Award

Protective Monitoring Transition and Exit

HOME OFFICE

This public procurement record has 4 releases in its history.

Award

27 Jan 2026 at 14:46

UK7 - Contract Details Notice
AwardUpdate

23 Dec 2025 at 16:09

UK6 - Contract Award Notice
Award

09 Dec 2025 at 17:20

UK6 - Contract Award Notice
Award

09 Dec 2025 at 16:51

UK5 - Transparency Notice
Summary of the contracting process

The Home Office has completed the procurement process for the "Protective Monitoring Transition and Exit" contract, awarded to IBM UK Ltd. This contract involves the continuation of protective monitoring services using IBM QRadar for both on-premises and AWS-based infrastructures. The procurement was executed as a direct award to ensure continuity and avert risks associated with transitioning suppliers. The service period extends from January 1st, 2026 to March 31st, 2026, followed by the conclusion and handover to an in-house solution slated for early 2026. The procurement process is now at the award stage, with the formal contract commencing on January 13, 2026, and ending on May 30, 2026.

This contract represents a critical opportunity for businesses specialising in data security and software development services, particularly those capable of providing operational support for protective monitoring services. Large firms like IBM UK Ltd, familiar with the technicalities and complexities of such services, are well-positioned to tap into these opportunities. Firms with expertise in Security Operations Centres (SOC), capable of analysing alerts and managing security incidents, stand to benefit significantly. The project underscores the demand for expertise in transitioning IT services to in-house solutions while maintaining rigorous security standards, offering a pathway for businesses to leverage their strengths in security systems management and integration.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Start Free Trial Book a Demo
All Features Pricing

Notice Information

Notice Title

Protective Monitoring Transition and Exit

Notice Description

The 2-month continuation (plus 1-month contingency) of the current protective monitoring service using IBM QRadar for on-premises and AWS-based Buyer-owned infrastructure and applications, to allow for transition to the in-house, long-term replacement solution. An operational support team monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) provides analysis of alerts, carries out triage and investigation of any potential security event, and alerts the Buyer. The monitoring service will be delivered from January 1st 2026 until March 31st 2026. An operational support team shall monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) shall provide analysis of alerts, carries out triage and investigation of any potential security event, and alert the Buyer. The in-house, long-term replacement solution is in the final stages of development and governance with an anticipated go-live of Jan/Feb 2026 with the current IBM QRadar contract terminating on 31st Decmeber 2025 with no further extensions available, this short-term continuation contract is required to support transition.

Procurement Information

IBM is the incumbent provider of the protective monitoring service. The current contract ends on 31 December 2025, and the replacement in-house CSOC solution will not complete early life support until mid-late February 2026. Continuity of service is essential to maintain security assurance. The time and cost of moving to an alternative supplier for a 2-3 month period would pose significant technical and financial risk. Transitioning to a new supplier would require onboarding, data conversion, and configuration, which is not feasible within the timeframe. The current log data is in IBM's proprietary format. Converting this large volume of data to another system within the timeframe is not considerd possible and in any case would require substantial resources and could compromise security monitoring during the transition.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-05f22c
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/007165-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72212732 - Data security software development services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
£337,664 £100K-£500K
Contracts Value
£337,664 £100K-£500K

Notice Dates

Publication Date
27 Jan 20263 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
2 Dec 20252 months ago
Contract Period
13 Jan 2026 - 30 May 2026 1-6 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
HOME OFFICE
Contact Name
Not specified
Contact Email
collaborativeprocurement@homeoffice.gov.uk
Contact Phone
Not specified

Buyer Location

Locality
LONDON
Postcode
SW1P 4DF
Post Town
South West London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified
Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Supplier Information

Number of Suppliers
1
Supplier Name

IBM

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-05f22c-2026-01-27T14:46:54Z",
    "date": "2026-01-27T14:46:54Z",
    "ocid": "ocds-h6vhtk-05f22c",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PWGC-6513-PQLZ",
            "name": "Home Office",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PWGC-6513-PQLZ"
            },
            "address": {
                "streetAddress": "2 Marsham Street",
                "locality": "London",
                "postalCode": "SW1P 4DF",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI32"
            },
            "contactPoint": {
                "email": "collaborativeprocurement@homeoffice.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        },
        {
            "id": "GB-COH-01503908",
            "name": "IBM UK Ltd",
            "identifier": {
                "scheme": "GB-COH",
                "id": "01503908"
            },
            "address": {
                "streetAddress": "Building C, IBM Hursley Office",
                "locality": "Winchester",
                "postalCode": "SO21 2JN",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKJ36"
            },
            "contactPoint": {
                "email": "jzillessen@uk.ibm.com"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "large",
                "vcse": false,
                "publicServiceMissionOrganization": false,
                "shelteredWorkshop": false
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PWGC-6513-PQLZ",
        "name": "Home Office"
    },
    "tender": {
        "id": "P_19864",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Protective Monitoring Transition and Exit",
        "description": "The 2-month continuation (plus 1-month contingency) of the current protective monitoring service using IBM QRadar for on-premises and AWS-based Buyer-owned infrastructure and applications, to allow for transition to the in-house, long-term replacement solution. An operational support team monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) provides analysis of alerts, carries out triage and investigation of any potential security event, and alerts the Buyer. The monitoring service will be delivered from January 1st 2026 until March 31st 2026. An operational support team shall monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) shall provide analysis of alerts, carries out triage and investigation of any potential security event, and alert the Buyer. The in-house, long-term replacement solution is in the final stages of development and governance with an anticipated go-live of Jan/Feb 2026 with the current IBM QRadar contract terminating on 31st Decmeber 2025 with no further extensions available, this short-term continuation contract is required to support transition.",
        "status": "complete",
        "procurementMethod": "direct",
        "procurementMethodDetails": "Direct award",
        "procurementMethodRationale": "IBM is the incumbent provider of the protective monitoring service. The current contract ends on 31 December 2025, and the replacement in-house CSOC solution will not complete early life support until mid-late February 2026. Continuity of service is essential to maintain security assurance. The time and cost of moving to an alternative supplier for a 2-3 month period would pose significant technical and financial risk. Transitioning to a new supplier would require onboarding, data conversion, and configuration, which is not feasible within the timeframe. The current log data is in IBM's proprietary format. Converting this large volume of data to another system within the timeframe is not considerd possible and in any case would require substantial resources and could compromise security monitoring during the transition.",
        "procurementMethodRationaleClassifications": [
            {
                "id": "singleSuppliersTechnicalReasons"
            },
            {
                "id": "additionalRepeatExtensionPartialReplacement"
            }
        ],
        "lots": [
            {
                "id": "1",
                "status": "complete"
            }
        ],
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            }
        ],
        "coveredBy": [
            "GPA"
        ]
    },
    "awards": [
        {
            "id": "1",
            "status": "active",
            "value": {
                "amountGross": 405197.57,
                "amount": 337664.64,
                "currency": "GBP"
            },
            "mainProcurementCategory": "services",
            "aboveThreshold": true,
            "suppliers": [
                {
                    "id": "GB-COH-01503908",
                    "name": "IBM UK Ltd"
                }
            ],
            "items": [
                {
                    "id": "1",
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "72212732",
                            "description": "Data security software development services"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "contractPeriod": {
                "startDate": "2026-01-09T00:00:00+00:00",
                "endDate": "2026-05-30T23:59:59+01:00"
            },
            "relatedLots": [
                "1"
            ],
            "documents": [
                {
                    "id": "081214-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK5",
                    "description": "Transparency notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/081214-2025",
                    "datePublished": "2025-12-09T16:51:56Z",
                    "format": "text/html"
                },
                {
                    "id": "081235-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK6",
                    "description": "Contract award notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/081235-2025",
                    "datePublished": "2025-12-09T17:20:31Z",
                    "format": "text/html"
                },
                {
                    "id": "085967-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK6",
                    "description": "Contract award notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/085967-2025",
                    "datePublished": "2025-12-23T16:09:18Z",
                    "format": "text/html"
                }
            ],
            "milestones": [
                {
                    "id": "1",
                    "type": "futureSignatureDate",
                    "dueDate": "2026-01-09T23:59:59+00:00",
                    "status": "scheduled"
                }
            ],
            "date": "2025-12-02T00:00:00+00:00",
            "standstillPeriod": {
                "endDate": "2025-12-18T23:59:59+00:00"
            },
            "amendments": [
                {
                    "id": "085967-2025",
                    "description": "The value of this contract has been increased from PS216,000 to PS337,664.64 ex. VAT. This is an increase from PS313,200 to PS405,197.57 inc. VAT. The value has been amended due to an error in the calclation of the charges. The estimated date the contract will be signed has changed from 23rd December 2025 to 9th January 2026 to account for a new 8 working day standstill period. The contract start date has also been amended to reflect this."
                }
            ]
        }
    ],
    "language": "en",
    "contracts": [
        {
            "id": "1",
            "awardID": "1",
            "status": "active",
            "period": {
                "startDate": "2026-01-13T00:00:00+00:00",
                "endDate": "2026-05-30T23:59:59+01:00"
            },
            "value": {
                "amountGross": 405197.57,
                "amount": 337664.64,
                "currency": "GBP"
            },
            "aboveThreshold": true,
            "dateSigned": "2026-01-13T00:00:00+00:00",
            "noAgreedMetricsRationale": "Service levels are included. Further performance indicators not suitable for transition and exit arrangement.",
            "documents": [
                {
                    "id": "007165-2026",
                    "documentType": "contractNotice",
                    "noticeType": "UK7",
                    "description": "Contract details notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/007165-2026",
                    "datePublished": "2026-01-27T14:46:54Z",
                    "format": "text/html"
                }
            ]
        }
    ]
}