This public procurement record has 4 releases in its history.

Award

03 Sep 2026 at 09:13

TenderUpdate

01 May 2026 at 11:56

TenderUpdate

20 Apr 2026 at 12:59

Tender

16 Apr 2026 at 15:43

Summary of the contracting process

SONI Ltd procured cyber security governance, assurance and specialist capacity services for work across the United Kingdom. The requirement was divided into two service areas. Lot 1 covers an embedded Cyber Security Governance Partner to establish and operate SONI’s cyber security governance, risk management and assurance model. Lot 2 covers embedded cyber security specialists who can provide additional capacity within SONI teams and support day-to-day governance and assurance activities. Required roles include security architects, risk analysts, audit and assurance analysts, incident response analysts, and a threat and vulnerability manager. This is a cyber security and IT consulting services requirement, classified under CPV 72000000. SONI Ltd is a private utility applying Northern Irish devolved regulations.

The procurement is complete and awards were made on 19 August 2026. Lot 1 was awarded to Nortal UK for £350,000 excluding VAT (£420,000 including VAT). Lot 2 was awarded to Nortal UK, Accenture (UK) Limited, Integrity360 Limited (Ireland) and Tata Consultancy Services Limited for £250,000 excluding VAT (£300,000 including VAT). Both lots use a selective competitive flexible procedure with a two-stage qualification and evaluation process, and form a closed framework with reopening competition. Each framework contract runs from 30 September 2026 to 30 September 2027, with an option to extend by one year to 30 September 2028. Lot 1 weighted experience 25%, governance and advisory 30%, standards and certifications 5%, account management 5%, cultural fit and references 5%, and cost 30%. Lot 2 weighted experience 25%, resource demand, quality and integration 35%, account management 5%, cultural fit and references 5%, and cost 30%.

This award demonstrates an established requirement for embedded cyber security governance, risk management, assurance and specialist resource within a private utility. A credible future supplier would need recent, relevant experience delivering governance and assurance services of comparable scope and complexity, together with the ability to establish and operate a cyber security governance function. It would also need qualified specialists covering architecture, risk, audit and assurance, incident response, and threat and vulnerability management. The winning model favours suppliers able to provide additional capacity when demand fluctuates or work is time-bound, while integrating effectively into client teams and organisational culture. Strong account management, suitable standards and certifications, references, and a clear delivery methodology would be important. The framework structure indicates that both a specialist cyber security consultancy and a larger multi-disciplinary technology provider could be credible competitors.

How relevant is this notice?

Notice Information

Notice Title

SONI077 Cyber Security Governance Partner and Capacity Services

Notice Description

SONI intends to establish a multi-Lot framework agreement for the provision of these services. Lot 1 - Cyber Security Governance Partner * Embedded Cyber Security Governance Partner services to establish and operate SONI's cyber security governance, risk management and assurance model Lot 2 - Capacity Services * Provision of embedded cyber security specialists to provide additional capacity within SONI teams, supporting the day-to-day delivery of cyber security governance and assurance activities, including but not limited to o Security Architects, Risk Analysts, Audit and Assurance Analysts, Incident response Analysts, Threat & Vulnerability Manager

Lot Information

Cyber Security Governance Partner

* Embedded Cyber Security Governance Partner services to establish and operate SONI's cyber security governance, risk management and assurance model

Renewal: Option to extend by one year

Capacity Services

Provision of embedded cyber security specialists to provide additional capacity within SONI teams, supporting the day-to-day delivery of cyber security governance and assurance activities.

Renewal: Option to extend by one year

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-068473
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/083285-2026
Current Stage
Award
All Stages
Tender, Award

Procurement Classification

Notice Type
UK6 - Contract Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Competitive flexible procedure
Tender Suitability
SME
Awardee Scale
Large, SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£600,000 £500K-£1M
Lots Value
£600,000 £500K-£1M
Awards Value
£600,000 £500K-£1M
Contracts Value
Not specified

Notice Dates

Publication Date
3 Sep 20261 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
19 Aug 20262 months ago
Contract Period
30 Sep 2026 - 30 Sep 2027 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Pending
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
SONI Ltd
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BELFAST
Postcode
BT6 9RT
Postcode Area
Northern Ireland
Country
Northern Ireland

Major Region (ITL 1)
TLN Northern Ireland
Basic Region (ITL 2)
TLN0 Northern Ireland
Small Region (ITL 3)
TLN0E Lisburn and Castlereagh
Delivery Location
Not specified

Local Authority
Lisburn and Castlereagh
Electoral Ward
Moneyreagh
Westminster Constituency
Belfast South and Mid Down

Supplier Information

Number of Suppliers
4
Supplier Names

3DOT SOLUTIONS LIMITED

Accenture (UK) Limited

Integrity360 Limited (Ireland)

Tata Consultancy Services Limited

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...