Notice Information
Notice Title
Managed Security Operations Centre (SOC) and Incident Response Services Agreement
Notice Description
UKNNL is undertaking a preliminary market engagement exercise to inform and refine its requirements for a Managed Security Operations Centre (SOC) and Incident Response service. This includes shaping the service scope, delivery approach, and overall specification, while gathering supplier feedback to ensure alignment with current market capability. The service will provide continuous monitoring, detection, and response to cyber security threats across UKNNL's IT estate. It will integrate people, processes, and technology to deliver an effective "detect and respond" capability, supporting incident response and remediation while safeguarding UKNNL's digital assets and information. UKNNL expects a capable SOC provider to enhance its overall security posture by improving threat visibility, reducing response times, and providing access to specialist cyber security expertise, delivered in a reliable and low-risk manner. Suppliers will be expected to demonstrate relevant industry accreditations aligned to the service scope, including CREST accreditation for SOC services and Cyber Incident Response (via CREST, NCSC, or equivalent). UKNNL will host a virtual market engagement event on Friday 5 June at 10:00am. The session will provide an overview of the proposed service, delivery model, and procurement approach, and will offer suppliers the opportunity to ask questions and provide feedback. Suppliers wishing to attend should confirm via email to gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued. All materials presented will be shared as part of the tender pack for those unable to attend.
Planning Information
UKNNL will be holding a virtual market engagement event on Friday 5th June at 10:00am. This session will provide an overview of the proposed service scope, delivery model, and procurement approach, and will give suppliers an opportunity to better understand UKNNL's requirements and provide feedback. Suppliers interested in attending should confirm their attendance by emailing gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued. Due to the anticipated level of supplier interest, please allow 48-72 hours for a response to enquiries and registration requests. All information presented during the session will be shared as part of the tender pack for those unable to attend.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-069e64
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/046764-2026
- Current Stage
- Planning
- All Stages
- Planning
Procurement Classification
- Notice Type
- UK2 - Preliminary Market Engagement Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Not Specified
- Procurement Method Details
- Not specified
- Tender Suitability
- SME
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
48 - Software package and information systems
72 - IT services: consulting, software development, Internet and support
79 - Business services: law, marketing, consulting, recruitment, printing and security
-
- CPV Codes
48730000 - Security software package
72200000 - Software programming and consultancy services
72316000 - Data analysis services
79711000 - Alarm-monitoring services
Notice Value(s)
- Tender Value
- Not specified
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 21 May 20262 weeks ago
- Submission Deadline
- Not specified
- Future Notice Date
- 5 Jun 20261 day to go
- Award Date
- Not specified
- Contract Period
- 30 Sep 2026 - 30 Sep 2029 3-4 years
- Recurrence
- Not specified
Notice Status
- Tender Status
- Planning
- Lots Status
- Planning
- Awards Status
- Not Specified
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED
- Contact Name
- Available with D3 Tenders Premium →
- Contact Email
- Available with D3 Tenders Premium →
- Contact Phone
- Available with D3 Tenders Premium →
Buyer Location
- Locality
- WARRINGTON
- Postcode
- WA3 6AE
- Post Town
- Warrington
- Country
- England
-
- Major Region (ITL 1)
- TLD North West (England)
- Basic Region (ITL 2)
- TLD6 Cheshire
- Small Region (ITL 3)
- TLD61 Warrington
- Delivery Location
- Not specified
-
- Local Authority
- Warrington
- Electoral Ward
- Birchwood
- Westminster Constituency
- Warrington North
Further Information
Notice Documents
-
https://www.find-tender.service.gov.uk/Notice/046764-2026
21st May 2026 - Preliminary market engagement notice on Find a Tender
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-069e64-2026-05-21T09:10:38+01:00",
"date": "2026-05-21T09:10:38+01:00",
"ocid": "ocds-h6vhtk-069e64",
"initiationType": "tender",
"parties": [
{
"id": "GB-COH-03857752",
"name": "UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED",
"identifier": {
"scheme": "GB-COH",
"id": "03857752"
},
"additionalIdentifiers": [
{
"scheme": "GB-PPON",
"id": "PVXT-8784-YGNV"
}
],
"address": {
"streetAddress": "Chadwick House Warrington Road",
"locality": "Warrington",
"postalCode": "WA3 6AE",
"country": "GB",
"countryName": "United Kingdom",
"region": "UKD61"
},
"contactPoint": {
"name": "Gemma Slocombe",
"email": "gemma.slocombe@uknnl.com"
},
"roles": [
"buyer"
],
"details": {
"url": "http://www.uknnl.com",
"classifications": [
{
"id": "publicAuthoritySubCentralGovernment",
"scheme": "UK_CA_TYPE",
"description": "Public authority - sub-central government"
}
]
}
}
],
"buyer": {
"id": "GB-COH-03857752",
"name": "UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED"
},
"planning": {
"milestones": [
{
"id": "engagement",
"type": "engagement",
"description": "UKNNL will be holding a virtual market engagement event on Friday 5th June at 10:00am. This session will provide an overview of the proposed service scope, delivery model, and procurement approach, and will give suppliers an opportunity to better understand UKNNL's requirements and provide feedback. Suppliers interested in attending should confirm their attendance by emailing gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued. Due to the anticipated level of supplier interest, please allow 48-72 hours for a response to enquiries and registration requests. All information presented during the session will be shared as part of the tender pack for those unable to attend.",
"dueDate": "2026-06-05T23:59:59+01:00",
"status": "scheduled"
}
],
"documents": [
{
"id": "046764-2026",
"documentType": "marketEngagementNotice",
"noticeType": "UK2",
"description": "Preliminary market engagement notice on Find a Tender",
"url": "https://www.find-tender.service.gov.uk/Notice/046764-2026",
"datePublished": "2026-05-21T09:10:38+01:00",
"format": "text/html"
}
]
},
"tender": {
"id": "NNLC748",
"legalBasis": {
"id": "2023/54",
"scheme": "UKPGA",
"uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
},
"title": "Managed Security Operations Centre (SOC) and Incident Response Services Agreement",
"description": "UKNNL is undertaking a preliminary market engagement exercise to inform and refine its requirements for a Managed Security Operations Centre (SOC) and Incident Response service. This includes shaping the service scope, delivery approach, and overall specification, while gathering supplier feedback to ensure alignment with current market capability. The service will provide continuous monitoring, detection, and response to cyber security threats across UKNNL's IT estate. It will integrate people, processes, and technology to deliver an effective \"detect and respond\" capability, supporting incident response and remediation while safeguarding UKNNL's digital assets and information. UKNNL expects a capable SOC provider to enhance its overall security posture by improving threat visibility, reducing response times, and providing access to specialist cyber security expertise, delivered in a reliable and low-risk manner. Suppliers will be expected to demonstrate relevant industry accreditations aligned to the service scope, including CREST accreditation for SOC services and Cyber Incident Response (via CREST, NCSC, or equivalent). UKNNL will host a virtual market engagement event on Friday 5 June at 10:00am. The session will provide an overview of the proposed service, delivery model, and procurement approach, and will offer suppliers the opportunity to ask questions and provide feedback. Suppliers wishing to attend should confirm via email to gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued. All materials presented will be shared as part of the tender pack for those unable to attend.",
"items": [
{
"id": "1",
"additionalClassifications": [
{
"scheme": "CPV",
"id": "48730000",
"description": "Security software package"
},
{
"scheme": "CPV",
"id": "72200000",
"description": "Software programming and consultancy services"
},
{
"scheme": "CPV",
"id": "72316000",
"description": "Data analysis services"
},
{
"scheme": "CPV",
"id": "79711000",
"description": "Alarm-monitoring services"
}
],
"deliveryAddresses": [
{
"region": "UK",
"country": "GB",
"countryName": "United Kingdom"
}
],
"relatedLot": "1"
}
],
"mainProcurementCategory": "services",
"aboveThreshold": true,
"lots": [
{
"id": "1",
"suitability": {
"sme": true
},
"contractPeriod": {
"startDate": "2026-10-01T00:00:00+01:00",
"endDate": "2029-09-30T23:59:59+01:00",
"maxExtentDate": "2031-09-30T23:59:59+01:00"
},
"hasRenewal": true,
"status": "planning"
}
],
"status": "planning"
},
"language": "en"
}