Managed Security Operations Centre (SOC) and Incident Response Services Agreement

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-069e64-2026-07-23T19:29:59+01:00",
    "date": "2026-07-23T19:29:59+01:00",
    "ocid": "ocds-h6vhtk-069e64",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-COH-03857752",
            "name": "UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED",
            "identifier": {
                "scheme": "GB-COH",
                "id": "03857752"
            },
            "additionalIdentifiers": [
                {
                    "scheme": "GB-PPON",
                    "id": "PVXT-8784-YGNV"
                }
            ],
            "address": {
                "streetAddress": "Chadwick House Warrington Road",
                "locality": "Warrington",
                "postalCode": "WA3 6AE",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKD61"
            },
            "contactPoint": {
                "name": "Gemma Slocombe",
                "email": "procurement@uknnl.com"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.uknnl.com",
                "classifications": [
                    {
                        "id": "publicAuthoritySubCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - sub-central government"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-COH-03857752",
        "name": "UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED"
    },
    "planning": {
        "milestones": [
            {
                "id": "engagement",
                "type": "engagement",
                "description": "UKNNL will be holding a virtual market engagement event on Friday 5th June at 10:00am. This session will provide an overview of the proposed service scope, delivery model, and procurement approach, and will give suppliers an opportunity to better understand UKNNL's requirements and provide feedback. Suppliers interested in attending should confirm their attendance by emailing gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued. Due to the anticipated level of supplier interest, please allow 48-72 hours for a response to enquiries and registration requests. All information presented during the session will be shared as part of the tender pack for those unable to attend.",
                "dueDate": "2026-06-05T23:59:59+01:00",
                "status": "scheduled"
            }
        ],
        "documents": [
            {
                "id": "046764-2026",
                "documentType": "marketEngagementNotice",
                "noticeType": "UK2",
                "description": "Preliminary market engagement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/046764-2026",
                "datePublished": "2026-05-21T09:10:38+01:00",
                "format": "text/html"
            }
        ]
    },
    "tender": {
        "id": "NNLC748",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Managed Security Operations Centre (SOC) and Incident Response Services Agreement",
        "description": "UKNNL is seeking to procure a Managed Security Operations Centre (SOC) and Incident Response service to enhance its cyber security capability and support the protection of its IT estate, digital assets, and sensitive information. UKNNL requires a new partner to manage its Security Operations Centre, to monitor, detect, respond to, and remediate cyber threats across its network. The SOC incorporates people, process, and technology to provide a detect-and-respond capability that better protects the Authority's digital assets and data. The requirement is for a comprehensive Security Operations Centre service, delivering 24/7 monitoring, incident detection, incident response, digital forensic investigation, threat intelligence, and SOC management services. The service will support the identification, analysis, containment, and escalation of cybersecurity threats and incidents affecting the environment, whilst continuously improving security operations and response maturity.",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "48730000",
                        "description": "Security software package"
                    },
                    {
                        "scheme": "CPV",
                        "id": "72000000",
                        "description": "IT services: consulting, software development, Internet and support"
                    },
                    {
                        "scheme": "CPV",
                        "id": "79710000",
                        "description": "Security services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "mainProcurementCategory": "services",
        "aboveThreshold": true,
        "lots": [
            {
                "id": "1",
                "suitability": {
                    "sme": true
                },
                "contractPeriod": {
                    "startDate": "2026-11-01T00:00:00Z",
                    "endDate": "2029-10-31T23:59:59Z",
                    "maxExtentDate": "2031-10-31T23:59:59Z"
                },
                "hasRenewal": true,
                "status": "active",
                "value": {
                    "amountGross": 3000000,
                    "amount": 2500000,
                    "currency": "GBP"
                },
                "awardCriteria": {
                    "weightingDescription": "The contract will be awarded to the supplier submitting the Most Advantageous Tender (MAT). Detailed award criteria, sub-criteria, scoring methodology and any associated weightings will be provided within the Invitation to Tender documentation issued to suppliers progressing to Stage 3 of the Competitive Flexible Procedure.",
                    "criteria": [
                        {
                            "type": "cost",
                            "name": "Commercial Evaluation"
                        },
                        {
                            "type": "quality",
                            "name": "Technical Evaluation"
                        },
                        {
                            "type": "quality",
                            "name": "Social Value"
                        }
                    ]
                },
                "selectionCriteria": {
                    "criteria": [
                        {
                            "type": "economic",
                            "description": "Full details of the legal and financial conditions of participation are set out within the Procurement Specification Questionnaire (PSQ) and associated procurement documentation."
                        },
                        {
                            "type": "technical",
                            "description": "The technical capability requirements for this procurement are detailed within the Procurement Specification Questionnaire (PSQ). Suppliers should refer to the procurement documentation for the full participation requirements and evaluation approach."
                        }
                    ]
                },
                "renewal": {
                    "description": "The contract will be awarded for an initial period of three (3) years, with the option to extend for up to two (2) further periods of twelve (12) months each. Any extension will be exercised at UKNNL's sole discretion and in accordance with the contract terms and applicable legislation."
                },
                "hasOptions": true,
                "options": {
                    "description": "The contract may include the option for UKNNL to procure additional cyber security services during the contract term where required. Such services may include, but are not limited to: * Enhanced Security Operations (SecOps) services; * Additional threat hunting capabilities; * Enhanced threat intelligence services; * Additional Digital Forensics and Incident Response (DFIR) support; * Additional incident response retainer hours and specialist support; * Cyber security consultancy and advisory services; * Security engineering, optimisation and security tool support; * Additional monitoring, detection and response capabilities; and * Onboarding, integration and support for new systems, networks and security technologies. The exercise of any option will be subject to UKNNL's operational requirements, available funding, the terms of the contract and all applicable procurement legislation."
                }
            }
        ],
        "status": "active",
        "value": {
            "amountGross": 3000000,
            "amount": 2500000,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Competitive flexible procedure",
        "procedure": {
            "features": "The procurement will be conducted using the Competitive Flexible Procedure in accordance with the Procurement Act 2023. The procedure will comprise three mandatory stages and one optional negotiation stage. Suppliers will be assessed through the following stages: Stage 1: Procurement Specification Questionnaire (Shortlisting) Deadline: 17th August 2026 Suppliers will be assessed against UKNNL's technical and service requirements. The five highest-scoring suppliers will progress to Stage 2. In the event of a tie affecting progression to Stage 2, the tie-break methodology set out within the procurement documentation will apply. Stage 2: Supplier Demonstration and Presentation Indicative dates: 24th - 25th August 2026 Suppliers progressing from Stage 1 will be invited to participate in a demonstration and presentation to assess their capability to deliver the Managed Security Operations Centre (SOC) and Incident Response Services Agreement. This stage will be assessed on a pass/fail basis. Suppliers achieving a Pass will progress to Stage 3. Stage 3: Final Tender Submission ITT issue date: 28th August 2026 Tender return date: 22nd September 2026 Suppliers progressing from Stage 2 will be invited to submit a final tender. Full details of the evaluation methodology, award criteria and weightings will be contained within the Invitation to Tender documentation. Stage 4: Negotiation (Optional) UKNNL reserves the right to undertake negotiations with the highest-ranked supplier following completion of Stage 3."
        },
        "submissionMethodDetails": "This procurement will be conducted electronically via the ProContract eTendering Portal. All communications, clarification questions, document exchanges and tender submissions must be submitted through the portal. Suppliers wishing to participate must be registered on the ProContract eTendering Portal and follow the instructions contained within the procurement documentation. The Procurement Specification Questionnaire (PSQ) and subsequent procurement documents will be issued through the portal in accordance with the Competitive Flexible Procedure described within this notice. Access to the procurement documents is available via the following link: https://procontract.due-north.com/Advert?advertId=04370941-a686-f111-813c-005056b64545 Suppliers are responsible for ensuring their organisation is registered on the Government Central Digital Platform (CDP) and that registration information remains accurate and up to date throughout the procurement process.",
        "submissionTerms": {
            "electronicSubmissionPolicy": "allowed",
            "languages": [
                "en"
            ]
        },
        "tenderPeriod": {
            "endDate": "2026-08-17T10:00:00+01:00"
        },
        "enquiryPeriod": {
            "endDate": "2026-08-10T23:59:59+01:00"
        },
        "awardPeriod": {
            "endDate": "2026-08-20T23:59:59+01:00"
        },
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            },
            {
                "id": "069975-2026",
                "documentType": "tenderNotice",
                "noticeType": "UK4",
                "description": "Tender notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/069975-2026",
                "datePublished": "2026-07-23T19:29:59+01:00",
                "format": "text/html"
            }
        ]
    },
    "language": "en"
}