Tender

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

SIEM/SOAR Solution for Jisc Security Operations Centre

Jisc

This public procurement record has 3 releases in its history.

Tender

02 Sep 2026 at 13:24

UK4 - Tender Notice
Planning

14 May 2026 at 15:26

UK1 - Pipeline Notice
Planning

12 Mar 2026 at 14:01

UK2 - Preliminary Market Engagement Notice
Summary of the contracting process

Jisc Services Ltd, a wholly owned subsidiary of Jisc, is procuring a security information and event management (SIEM) and security orchestration, automation and response (SOAR) solution for Jisc’s Security Operations Centre. The requirement supports managed security monitoring, threat detection, investigation and response for organisations across the UK education and research sector. The platform will ingest and analyse telemetry from endpoints, identity systems, cloud platforms, networks and applications. It must support the continuing development of the SOC’s capability, including multi-tenant services for customers. The work is delivered across the United Kingdom. The procurement covers security software and associated information technology and software support services.

The process has reached tender: Jisc invited offers through a selective competitive flexible procedure. It comprises initial technical and procurement questions, detailed technical and price responses, a proof of concept, and a possible best and final offer stage. Expressions of interest were due by 29 September 2026 at 12:00, and enquiries closed on 21 September 2026 at 23:30. The contract is expected to run from 1 June 2028 to 31 May 2031, with two optional one-year extensions available until 31 May 2033. The estimated value is £9.25 million excluding VAT, or £11.1 million including VAT. There is one lot. Evaluation allocates 40% to technical quality, 20% to pricing and 40% to the proof of concept. Up to five bidders may reach the detailed response stage, with three intended for proof of concept.

This opportunity suits established cybersecurity technology suppliers able to provide and support enterprise SIEM and SOAR platforms for a managed, multi-customer security service. Strong candidates will demonstrate ingestion and normalisation of representative telemetry across endpoints, identity, cloud, network and application sources; detection engineering and detection-as-code workflows; rule authoring, version control and deployment; risk-based alerting and cross-source correlation; and threat-intelligence enrichment. The platform must support secure multi-tenant segregation and access controls, alongside practical analyst workflows for triage, investigation and case handling. Suppliers should be able to provide responsive technical support and participate in a proof of concept that objectively validates their written claims. The staged process favours businesses with the technical depth, delivery capacity and evidence to progress through multiple evaluations, including an optional best and final offer.

How relevant is this notice?

Notice Information

Notice Title

SIEM/SOAR Solution for Jisc Security Operations Centre

Notice Description

Jisc operates a Security Operations Centre (SOC) providing managed security monitoring, detection, and response services to organisations across the UK education and research sector. The SOC ingests and analyses security telemetry from a wide range of sources including endpoints, identity systems, cloud platforms, network infrastructure, and applications in order to detect, investigate, and respond to cyber threats on behalf of its customers. Jisc is commencing a formal procurement process for a SIEM/SOAR platform to support ongoing evolution of its SOC capability. This Invitation to Tender (ITT) outlines Jisc's requirements and the evaluation process that will be used to assess supplier submissions and select a preferred partner. This procurement process is led by Jisc Services Ltd, a wholly owned subsidiary of Jisc.

Lot Information

Lot LOT-0000

Renewal: The duration of this contract will be for an initial period of 3 years plus 2 x additional 1 year optional extensions. (3+1+1).

Planning Information

https://uk.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=103594&TID=100108787&B=

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-066870
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/083054-2026
Current Stage
Tender
All Stages
Planning, Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Competitive flexible procedure
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support

CPV Codes

48730000 - Security software package

72222300 - Information technology services

72261000 - Software support services

Notice Value(s)

Tender Value
£9,250,000 £1M-£10M
Lots Value
£9,250,000 £1M-£10M
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
2 Sep 20261 months ago
Submission Deadline
Not specified
Future Notice Date
1 Jul 2026Expired
Award Date
Not specified
Contract Period
1 Jun 2028 - 31 May 2031 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Jisc
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BRISTOL
Postcode
BS1 6NB
Postcode Area
Bristol
Country
England
Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK5 West of England
Small Region (ITL 3)
TLK51 Bristol, City of
Delivery Location
Not specified
Local Authority
Bristol, City of
Electoral Ward
Central
Westminster Constituency
Bristol Central

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...