Planning

Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT)

NHS ENGLAND, LEEDS

This public procurement record has 1 release in its history.

Planning

14 Jul 2025 at 08:49

UK1 - Pipeline Notice
Summary of the contracting process

NHS England, based in Leeds, is planning a procurement process for the establishment of a Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT). The intended contract, valued at up to £12 million, falls under the services category and involves computer-related professional services. The procurement will be conducted via the Crown Commercial Services RM3764.3 Cyber Security Services 3 DPS in compliance with the Public Contracts Regulations 2015. The formal notice for this procurement process is anticipated on 4th August 2025, and the contract is expected to commence on 1st May 2026, concluding by 30th April 2030. The central government entity is seeking to enhance its cyber security infrastructure across the United Kingdom, with a focus on rapid incident response.

This tender offers significant opportunities for businesses specialising in cyber security and incident management. Companies providing comprehensive cyber incident response solutions and possessing expertise in professional computer-related services will find this opportunity particularly advantageous. Engaging in such a high-profile project not only helps strengthen a firm's portfolio but also promotes growth by associating with a reputable public authority. Businesses experienced in navigating governmental procurement processes, particularly those aligned with Crown Commercial Service frameworks, will be well-positioned to compete for this contract.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Start Free Trial Book a Demo
All Features Pricing

Notice Information

Notice Title

Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT)

Notice Description

The Cyber Security Operations Centre (CSOC) relies on 3rd party support to provide Cyber Incident Response Team to customers during cyber incidents. The CIR Team provides boots on the ground support to investigate and recover from cyber incidents. Please note this will be procured via Crown Commercial Services RM3764.3 Cyber Security Services 3 DPS under PCR 2015.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-055e25
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/039475-2025
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK1 - Pipeline Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72590000 - Computer-related professional services

Notice Value(s)

Tender Value
£10,000,000 £10M-£100M
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
14 Jul 20257 months ago
Submission Deadline
Not specified
Future Notice Date
4 Aug 2025Expired
Award Date
Not specified
Contract Period
30 Apr 2026 - 30 Apr 2030 4-5 years
Recurrence
Not specified

Notice Status

Tender Status
Planned
Lots Status
Planned
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
NHS ENGLAND, LEEDS
Contact Name
Not specified
Contact Email
england.commercialqueries@nhs.net
Contact Phone
Not specified

Buyer Location

Locality
LEEDS
Postcode
LS1 4AP
Post Town
Leeds
Country
England
Major Region (ITL 1)
TLE Yorkshire and The Humber
Basic Region (ITL 2)
TLE4 West Yorkshire
Small Region (ITL 3)
TLE42 Leeds
Delivery Location
Not specified
Local Authority
Leeds
Electoral Ward
Hunslet & Riverside
Westminster Constituency
Leeds South

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-055e25-2025-07-14T09:49:51+01:00",
    "date": "2025-07-14T09:49:51+01:00",
    "ocid": "ocds-h6vhtk-055e25",
    "initiationType": "tender",
    "planning": {
        "documents": [
            {
                "id": "039475-2025",
                "documentType": "plannedProcurementNotice",
                "noticeType": "UK1",
                "description": "Pipeline notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/039475-2025",
                "datePublished": "2025-07-14T09:49:51+01:00",
                "format": "text/html"
            }
        ]
    },
    "parties": [
        {
            "id": "GB-PPON-PDPT-3135-BWWY",
            "name": "NHS England, Leeds",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PDPT-3135-BWWY"
            },
            "address": {
                "streetAddress": "7&8 Wellington Place",
                "locality": "Leeds",
                "postalCode": "LS1 4AP",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKE42"
            },
            "contactPoint": {
                "email": "england.commercialqueries@nhs.net"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.england.nhs.uk//",
                "classifications": [
                    {
                        "scheme": "UK_CA_TYPE",
                        "id": "publicAuthorityCentralGovernment",
                        "description": "Public authority - central government"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PDPT-3135-BWWY",
        "name": "NHS England, Leeds"
    },
    "tender": {
        "id": "W173515",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT)",
        "description": "The Cyber Security Operations Centre (CSOC) relies on 3rd party support to provide Cyber Incident Response Team to customers during cyber incidents. The CIR Team provides boots on the ground support to investigate and recover from cyber incidents. Please note this will be procured via Crown Commercial Services RM3764.3 Cyber Security Services 3 DPS under PCR 2015.",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72590000",
                        "description": "Computer-related professional services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 12000000,
            "amount": 10000000,
            "currency": "GBP"
        },
        "mainProcurementCategory": "services",
        "aboveThreshold": true,
        "lots": [
            {
                "id": "1",
                "contractPeriod": {
                    "startDate": "2026-05-01T00:00:00+01:00",
                    "endDate": "2030-04-30T23:59:59+01:00"
                },
                "status": "planned"
            }
        ],
        "communication": {
            "futureNoticeDate": "2025-08-04T23:59:59+01:00"
        },
        "status": "planned"
    },
    "language": "en"
}