Notice Information
Notice Title
Managed Security Services
Notice Description
GSA require a Managed Detection and Response, Security service to mitigation of threats across the GSA's digital environment.
Lot Information
Lot 1
The service includes Managed Detection and Response, Security Information and Event Management, Endpoint Detection and Response supported by Next Generation Anti-Virus, identity monitoring, cyber threat intelligence, threat hunting, cyber maturity assessments, efficiency testing and full incident response readiness. These capabilities collectively enable the proactive identification, investigation and mitigation of threats across the GSA's digital environment. Managed Detection and Response (MDR). Enterprise data will be captured and analysed for indicators of attack or compromise, which, if discovered, shall initiate a first response. This response will be either automated or human, depending on the source of the detection. GSA require Level 1 and 2 support, and the first one hour of any Level 3 investigations. Support levels are defined below. Level 1 The first line of security analysts who manage security tools and run regular reporting. At this level, alerts and alert urgency will be determined by the security team. Decisions about escalation to Level 2 will also be undertaken at this level. Level 2 The second line of security analysts / engineers who have the expertise required to get to the root of a problem and assess which part of the enterprise may be compromised. Remediation and repair of problems is expected and issues for additional investigation will be highlighted. Level 3 The third line of security engineers / incident responders, which consists of highly skilled technical resource. If required, personnel will use advanced detection methods (threat hunting) to identify and neutralise the threat, providing remediation advice to the Client's IT team. Key deliverables: - Managed Detection and Response (MDR) Service o 24/7x365 Threat Detection & Response o Ongoing Detection Engineering o Ongoing Use Case Development o Cyber Threat Intelligence (CTI) o Threat Hunting o Cyber Maturity Assessment o Incident Response (first 1 hour of IR) o Dedicated Customer Success Manager - SIEM Licensing (Splunk) 100GB - CrowdStrike EDR Licensing with Falcon Mobile (1650 endpoints)
Procurement Information
GSA has undertaken a direct award via an existing compliant framework agreement in accordance with the Public Contracts Regulations. This approach has been justified on the grounds of extreme urgency brought about by events that were unforeseeable and outside the control of the authority. The requirement for a managed security service has arisen due to an immediate and critical need to ensure the continued protection of organisational systems, data, and infrastructure against evolving cyber security risks. The timescales associated with conducting a full competitive procedure would not have enabled the authority to meet these urgent operational and security requirements. The selected framework was originally procured in compliance with the relevant procurement regulations and provides a lawful route to market. The direct award mechanism available within the framework enables the authority to appoint a capable supplier within the required timeframe while maintaining compliance, transparency, and value for money. This approach ensures continuity of service and mitigates significant risk, while remaining fully aligned with procurement regulations and the strict conditions governing the use of urgency provisions. The overarching objective of this procurement is to ensure that GSA have a continued Managed Security Service that ensures the organisation's cybersecurity posture is maintained and continuously improved over the life of the contract. There is insufficient time is available to conduct a competitive procurement, the use of the G Cloud 14 Framework and the continued engagement with the incumbent supplier will ensure value for money is delivered in terms of economy, efficiency, and effectiveness.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-06b5a4
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/056502-2026
- Current Stage
- Award
- All Stages
- Award
Procurement Classification
- Notice Type
- Award Notice
- Procurement Type
- Framework
- Procurement Category
- Services
- Procurement Method
- Limited
- Procurement Method Details
- Award procedure without prior publication of a call for competition
- Tender Suitability
- Not specified
- Awardee Scale
- SME
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72222300 - Information technology services
Notice Value(s)
- Tender Value
- Not specified
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- £441,880 £100K-£500K
Notice Dates
- Publication Date
- 16 Jun 20261 weeks ago
- Submission Deadline
- Not specified
- Future Notice Date
- Not specified
- Award Date
- 13 Apr 20262 months ago
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Cancelled
- Awards Status
- Active
- Contracts Status
- Active
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- GREENSQUAREACCORD LIMITED
- Contact Name
- Available with D3 Tenders Premium →
- Contact Email
- Available with D3 Tenders Premium →
- Contact Phone
- Available with D3 Tenders Premium →
Buyer Location
- Locality
- BIRMINGHAM
- Postcode
- B1 2JB
- Post Town
- Birmingham
- Country
- England
-
- Major Region (ITL 1)
- TLG West Midlands (England)
- Basic Region (ITL 2)
- TLG3 West Midlands
- Small Region (ITL 3)
- TLG31 Birmingham
- Delivery Location
- TLC North East (England), TLD North West (England), TLE Yorkshire and The Humber, TLF East Midlands (England), TLG West Midlands (England), TLH East (England), TLI London, TLJ South East (England), TLK South West (England)
-
- Local Authority
- Birmingham
- Electoral Ward
- Ladywood
- Westminster Constituency
- Birmingham Ladywood
Further Information
Notice URLs
Open Contracting Data Standard (OCDS)
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-06b5a4-2026-06-16T10:49:45+01:00",
"date": "2026-06-16T10:49:45+01:00",
"ocid": "ocds-h6vhtk-06b5a4",
"initiationType": "tender",
"tender": {
"id": "00001474",
"legalBasis": {
"id": "32014L0024",
"scheme": "CELEX"
},
"title": "Managed Security Services",
"status": "complete",
"classification": {
"scheme": "CPV",
"id": "72222300",
"description": "Information technology services"
},
"mainProcurementCategory": "services",
"description": "GSA require a Managed Detection and Response, Security service to mitigation of threats across the GSA's digital environment.",
"lots": [
{
"id": "1",
"description": "The service includes Managed Detection and Response, Security Information and Event Management, Endpoint Detection and Response supported by Next Generation Anti-Virus, identity monitoring, cyber threat intelligence, threat hunting, cyber maturity assessments, efficiency testing and full incident response readiness. These capabilities collectively enable the proactive identification, investigation and mitigation of threats across the GSA's digital environment. Managed Detection and Response (MDR). Enterprise data will be captured and analysed for indicators of attack or compromise, which, if discovered, shall initiate a first response. This response will be either automated or human, depending on the source of the detection. GSA require Level 1 and 2 support, and the first one hour of any Level 3 investigations. Support levels are defined below. Level 1 The first line of security analysts who manage security tools and run regular reporting. At this level, alerts and alert urgency will be determined by the security team. Decisions about escalation to Level 2 will also be undertaken at this level. Level 2 The second line of security analysts / engineers who have the expertise required to get to the root of a problem and assess which part of the enterprise may be compromised. Remediation and repair of problems is expected and issues for additional investigation will be highlighted. Level 3 The third line of security engineers / incident responders, which consists of highly skilled technical resource. If required, personnel will use advanced detection methods (threat hunting) to identify and neutralise the threat, providing remediation advice to the Client's IT team. Key deliverables: - Managed Detection and Response (MDR) Service o 24/7x365 Threat Detection & Response o Ongoing Detection Engineering o Ongoing Use Case Development o Cyber Threat Intelligence (CTI) o Threat Hunting o Cyber Maturity Assessment o Incident Response (first 1 hour of IR) o Dedicated Customer Success Manager - SIEM Licensing (Splunk) 100GB - CrowdStrike EDR Licensing with Falcon Mobile (1650 endpoints)",
"awardCriteria": {
"criteria": [
{
"type": "price"
}
]
},
"hasOptions": false,
"status": "cancelled"
}
],
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"region": "UKC"
},
{
"region": "UKD"
},
{
"region": "UKE"
},
{
"region": "UKF"
},
{
"region": "UKG"
},
{
"region": "UKH"
},
{
"region": "UKI"
},
{
"region": "UKJ"
},
{
"region": "UKK"
}
],
"relatedLot": "1"
}
],
"procurementMethod": "limited",
"procurementMethodDetails": "Award procedure without prior publication of a call for competition",
"techniques": {
"hasFrameworkAgreement": true
},
"coveredBy": [
"GPA"
],
"procurementMethodRationaleClassifications": [
{
"id": "D_EXTREME_URGENCY",
"scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
"description": "Extreme urgency brought about by events unforeseeable for the contracting authority/entity and in accordance with the strict conditions stated in the directive"
}
],
"procurementMethodRationale": "GSA has undertaken a direct award via an existing compliant framework agreement in accordance with the Public Contracts Regulations. This approach has been justified on the grounds of extreme urgency brought about by events that were unforeseeable and outside the control of the authority. The requirement for a managed security service has arisen due to an immediate and critical need to ensure the continued protection of organisational systems, data, and infrastructure against evolving cyber security risks. The timescales associated with conducting a full competitive procedure would not have enabled the authority to meet these urgent operational and security requirements. The selected framework was originally procured in compliance with the relevant procurement regulations and provides a lawful route to market. The direct award mechanism available within the framework enables the authority to appoint a capable supplier within the required timeframe while maintaining compliance, transparency, and value for money. This approach ensures continuity of service and mitigates significant risk, while remaining fully aligned with procurement regulations and the strict conditions governing the use of urgency provisions. The overarching objective of this procurement is to ensure that GSA have a continued Managed Security Service that ensures the organisation's cybersecurity posture is maintained and continuously improved over the life of the contract. There is insufficient time is available to conduct a competitive procurement, the use of the G Cloud 14 Framework and the continued engagement with the incumbent supplier will ensure value for money is delivered in terms of economy, efficiency, and effectiveness."
},
"awards": [
{
"id": "056502-2026-1",
"relatedLots": [
"1"
],
"status": "active",
"suppliers": [
{
"id": "GB-COH-11422969",
"name": "Cysiam Limited"
}
]
}
],
"parties": [
{
"id": "GB-COH-RS027052",
"name": "GREENSQUAREACCORD LIMITED",
"identifier": {
"legalName": "GREENSQUAREACCORD LIMITED",
"id": "RS027052",
"scheme": "GB-COH"
},
"address": {
"streetAddress": "Second Floor, 10 Brindley Place",
"locality": "Birmingham",
"region": "UKG31",
"postalCode": "B12JB",
"countryName": "United Kingdom"
},
"contactPoint": {
"name": "Charlene Joseph",
"email": "charlene.joseph@greensquareaccord.co.uk"
},
"roles": [
"buyer"
],
"details": {
"url": "https://greensquareaccord.co.uk",
"classifications": [
{
"id": "BODY_PUBLIC",
"scheme": "TED_CA_TYPE",
"description": "Body governed by public law"
},
{
"id": "01",
"scheme": "COFOG",
"description": "General public services"
}
]
}
},
{
"id": "GB-COH-11422969",
"name": "Cysiam Limited",
"identifier": {
"legalName": "Cysiam Limited",
"id": "11422969",
"scheme": "GB-COH"
},
"address": {
"locality": "Somerset",
"region": "UK",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "sme"
}
},
{
"id": "GB-FTS-183350",
"name": "GreenSquareAccord",
"identifier": {
"legalName": "GreenSquareAccord"
},
"address": {
"streetAddress": "10 Brindley Place",
"locality": "Birmingham",
"postalCode": "B1 2JB",
"countryName": "United Kingdom"
},
"roles": [
"reviewBody"
]
}
],
"buyer": {
"id": "GB-COH-RS027052",
"name": "GREENSQUAREACCORD LIMITED"
},
"contracts": [
{
"id": "056502-2026-1",
"awardID": "056502-2026-1",
"status": "active",
"value": {
"amount": 441880,
"currency": "GBP"
},
"dateSigned": "2026-04-14T00:00:00+01:00"
}
],
"bids": {
"statistics": [
{
"id": "1",
"measure": "bids",
"relatedLot": "1",
"value": 1
}
]
},
"language": "en"
}