Notice Information
Notice Title
R6140 Cyber Security Managed SIEM
Notice Description
This is a services Contract for a Managed Cyber Security Operations Centre to cover some of the additional cybersecurity protection required to further harden the Tower Hamlets estate against cyber-attacks.
Lot Information
Lot 1
Requirements of the service: * Initial health assessment and configuration of the Council's in-house Security Event and Incident Management (SIEM) solution (Microsoft Sentinel). * Secure log collection from both on-premises and cloud systems, with logs transmitted to an externally hosted intelligence platform for advanced threat analysis. * Adaptable detection policies, leveraging automated intelligence, supplier expertise, and council-provided threat intelligence. * Support for log ingestion from a wide range of infrastructure components, including Windows and Linux servers, firewalls, routers, Azure Active Directory, Microsoft Defender, and Office 365. * No disruption to business operations during implementation. * 24x7x365 managed SOC service with incident response capabilities and access to subject matter experts. * Endpoint detection and response (EDR / XDR) * Incident detection, analysis, response and escalation. * Threat intelligence and threat hunting. * Monthly executive risk reporting and KPIs. * Ongoing threat detection and investigation support, drawing on previous incident data. * Secure portal access for council staff to incident and management information, with all operational data and SOC personnel based in the UK and cleared to BPSS as a minimum. * Demonstrated security accreditations. * Full onboarding, deployment, and initial tuning of the solution, with clear cost breakdowns for setup.
Procurement Information
The contract has been awarded via a direct award on the Crown Commercial Services G-Cloud 14 Framework, specifically Lot 3: Cloud Support. The G-Cloud 14 Framework is an online catalogue to buy cloud-based computing services, including hosting, software, cloud support, and many off-the-shelf, pay-as-you-go cloud solution for all public sector organisations and charities. G-Cloud 14 has defined a 6-step buying process which should be followed when using the agreement. These steps must be followed to ensure that a compliant process is adhered to. The online catalogue ensures that all service information is available up front to enable you to evaluate services based upon best fit and/or price. This functionality aids a direct award following the buying process
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-068bc2
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/038094-2026
- Current Stage
- Award
- All Stages
- Award
Procurement Classification
- Notice Type
- Award Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Limited
- Procurement Method Details
- Award procedure without prior publication of a call for competition
- Tender Suitability
- Not specified
- Awardee Scale
- SME
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72000000 - IT services: consulting, software development, Internet and support
Notice Value(s)
- Tender Value
- Not specified
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- £499,875 £100K-£500K
Notice Dates
- Publication Date
- 27 Apr 20262 weeks ago
- Submission Deadline
- Not specified
- Future Notice Date
- Not specified
- Award Date
- 12 Apr 20261 months ago
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Cancelled
- Awards Status
- Active
- Contracts Status
- Active
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- TOWER HAMLETS
- Contact Name
- Available with D3 Tenders Premium →
- Contact Email
- Available with D3 Tenders Premium →
- Contact Phone
- Available with D3 Tenders Premium →
Buyer Location
- Locality
- LONDON
- Postcode
- E1 1BJ
- Post Town
- East London
- Country
- England
-
- Major Region (ITL 1)
- TLI London
- Basic Region (ITL 2)
- TLI4 Inner London - East
- Small Region (ITL 3)
- TLI42 Tower Hamlets
- Delivery Location
- TLI London
-
- Local Authority
- Tower Hamlets
- Electoral Ward
- Whitechapel
- Westminster Constituency
- Bethnal Green and Stepney
Further Information
Notice URLs
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-068bc2-2026-04-27T14:31:33+01:00",
"date": "2026-04-27T14:31:33+01:00",
"ocid": "ocds-h6vhtk-068bc2",
"initiationType": "tender",
"tender": {
"id": "DN812890",
"legalBasis": {
"id": "32014L0024",
"scheme": "CELEX"
},
"title": "R6140 Cyber Security Managed SIEM",
"status": "complete",
"classification": {
"scheme": "CPV",
"id": "72000000",
"description": "IT services: consulting, software development, Internet and support"
},
"mainProcurementCategory": "services",
"description": "This is a services Contract for a Managed Cyber Security Operations Centre to cover some of the additional cybersecurity protection required to further harden the Tower Hamlets estate against cyber-attacks.",
"lots": [
{
"id": "1",
"description": "Requirements of the service: * Initial health assessment and configuration of the Council's in-house Security Event and Incident Management (SIEM) solution (Microsoft Sentinel). * Secure log collection from both on-premises and cloud systems, with logs transmitted to an externally hosted intelligence platform for advanced threat analysis. * Adaptable detection policies, leveraging automated intelligence, supplier expertise, and council-provided threat intelligence. * Support for log ingestion from a wide range of infrastructure components, including Windows and Linux servers, firewalls, routers, Azure Active Directory, Microsoft Defender, and Office 365. * No disruption to business operations during implementation. * 24x7x365 managed SOC service with incident response capabilities and access to subject matter experts. * Endpoint detection and response (EDR / XDR) * Incident detection, analysis, response and escalation. * Threat intelligence and threat hunting. * Monthly executive risk reporting and KPIs. * Ongoing threat detection and investigation support, drawing on previous incident data. * Secure portal access for council staff to incident and management information, with all operational data and SOC personnel based in the UK and cleared to BPSS as a minimum. * Demonstrated security accreditations. * Full onboarding, deployment, and initial tuning of the solution, with clear cost breakdowns for setup.",
"awardCriteria": {
"criteria": [
{
"name": "Quality",
"type": "quality",
"description": "60"
},
{
"type": "price",
"description": "40"
}
]
},
"hasOptions": false,
"status": "cancelled"
}
],
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"region": "UKI"
}
],
"relatedLot": "1"
}
],
"procurementMethod": "limited",
"procurementMethodDetails": "Award procedure without prior publication of a call for competition",
"coveredBy": [
"GPA"
],
"procurementMethodRationaleClassifications": [
{
"id": "D_OUTSIDE_SCOPE",
"scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
"description": "The procurement falls outside the scope of application of the directive"
}
],
"procurementMethodRationale": "The contract has been awarded via a direct award on the Crown Commercial Services G-Cloud 14 Framework, specifically Lot 3: Cloud Support. The G-Cloud 14 Framework is an online catalogue to buy cloud-based computing services, including hosting, software, cloud support, and many off-the-shelf, pay-as-you-go cloud solution for all public sector organisations and charities. G-Cloud 14 has defined a 6-step buying process which should be followed when using the agreement. These steps must be followed to ensure that a compliant process is adhered to. The online catalogue ensures that all service information is available up front to enable you to evaluate services based upon best fit and/or price. This functionality aids a direct award following the buying process"
},
"awards": [
{
"id": "038094-2026-R6140-1",
"relatedLots": [
"1"
],
"status": "active",
"suppliers": [
{
"id": "GB-FTS-180786",
"name": "MTI Technology Limited"
}
]
}
],
"parties": [
{
"id": "GB-FTS-99595",
"name": "Tower Hamlets",
"identifier": {
"legalName": "Tower Hamlets"
},
"address": {
"streetAddress": "New Town Hall, 160 Whitechapel Road London",
"locality": "London",
"region": "UKI",
"postalCode": "E1 1BJ",
"countryName": "United Kingdom"
},
"contactPoint": {
"name": "Ms Morgan Hughes",
"telephone": "+44 2073644099",
"email": "Morgan.Hughes@towerhamlets.gov.uk"
},
"roles": [
"buyer",
"centralPurchasingBody"
],
"details": {
"url": "http://www.towerhamlets.gov.uk",
"buyerProfile": "http://www.towerhamlets.gov.uk",
"classifications": [
{
"id": "REGIONAL_AUTHORITY",
"scheme": "TED_CA_TYPE",
"description": "Regional or local authority"
},
{
"id": "01",
"scheme": "COFOG",
"description": "General public services"
}
]
}
},
{
"id": "GB-FTS-180786",
"name": "MTI Technology Limited",
"identifier": {
"legalName": "MTI Technology Limited"
},
"address": {
"streetAddress": "3 Lotus Park First Floor, The Causeway",
"locality": "Staines-Upon-Thames",
"region": "UKI",
"postalCode": "TW18 3AG",
"countryName": "United Kingdom"
},
"contactPoint": {
"email": "ukinfo@mti.com"
},
"roles": [
"supplier"
],
"details": {
"url": "https://mti.com/",
"scale": "sme"
}
},
{
"id": "GB-FTS-726",
"name": "High Court of England and Wales",
"identifier": {
"legalName": "High Court of England and Wales"
},
"address": {
"streetAddress": "The Strand",
"locality": "London",
"postalCode": "WC2A 2LL",
"countryName": "United Kingdom"
},
"roles": [
"reviewBody"
]
}
],
"buyer": {
"id": "GB-FTS-99595",
"name": "Tower Hamlets"
},
"contracts": [
{
"id": "038094-2026-R6140-1",
"awardID": "038094-2026-R6140-1",
"status": "active",
"value": {
"amount": 499875,
"currency": "GBP"
},
"dateSigned": "2026-04-13T00:00:00+01:00"
}
],
"bids": {
"statistics": [
{
"id": "1",
"measure": "bids",
"relatedLot": "1",
"value": 6
},
{
"id": "2",
"measure": "smeBids",
"relatedLot": "1",
"value": 3
},
{
"id": "3",
"measure": "foreignBidsFromEU",
"relatedLot": "1",
"value": 0
},
{
"id": "4",
"measure": "foreignBidsFromNonEU",
"relatedLot": "1",
"value": 0
},
{
"id": "5",
"measure": "electronicBids",
"relatedLot": "1",
"value": 6
}
]
},
"language": "en"
}