This public procurement record has 1 release in its history.

Award

16 Jun 2026 at 09:49

Summary of the contracting process

The procurement process initiated by GreenSquareAccord Limited, operating as a body governed by public law, involved the award of a contract for Managed Security Services titled "Managed Security Services" in the information technology services industry category. The procurement was necessitated by extreme urgency and was conducted using a limited procurement method under a previously established framework agreement, without prior competition. The contract, valued at GBP 441,880, was awarded on 14 April 2026 to Cysiam Limited, a small and medium-sized enterprise based in Somerset. This process serves multiple UK regions, including UKC, UKD, UKE, UKF, UKG, UKH, UKI, UKJ, and UKK, ensuring the organisation's cybersecurity posture is robust against threats. The procurement stage is complete, with the contract now active, having been awarded to address the immediate security needs of the organisation.

This tender presents opportunities for businesses specialising in cybersecurity and managed security services to showcase and expand their expertise in providing advanced threat detection and response solutions. Companies involved in providing Security Information and Event Management (SIEM), cyber threat intelligence, and endpoint detection services, with capabilities in threat hunting and incident response, may find similar future opportunities beneficial for growth. Organisations looking to tender would benefit from possessing comprehensive expertise in mitigation measures and the ability to engage in frameworks under extreme urgency conditions, ensuring compliance with procurement regulations while delivering value through proficient security services.

How relevant is this notice?

Notice Title

Managed Security Services

Notice Description

GSA require a Managed Detection and Response, Security service to mitigation of threats across the GSA's digital environment.

Lot Information

Lot 1

The service includes Managed Detection and Response, Security Information and Event Management, Endpoint Detection and Response supported by Next Generation Anti-Virus, identity monitoring, cyber threat intelligence, threat hunting, cyber maturity assessments, efficiency testing and full incident response readiness. These capabilities collectively enable the proactive identification, investigation and mitigation of threats across the GSA's digital environment. Managed Detection and Response (MDR). Enterprise data will be captured and analysed for indicators of attack or compromise, which, if discovered, shall initiate a first response. This response will be either automated or human, depending on the source of the detection. GSA require Level 1 and 2 support, and the first one hour of any Level 3 investigations. Support levels are defined below. Level 1 The first line of security analysts who manage security tools and run regular reporting. At this level, alerts and alert urgency will be determined by the security team. Decisions about escalation to Level 2 will also be undertaken at this level. Level 2 The second line of security analysts / engineers who have the expertise required to get to the root of a problem and assess which part of the enterprise may be compromised. Remediation and repair of problems is expected and issues for additional investigation will be highlighted. Level 3 The third line of security engineers / incident responders, which consists of highly skilled technical resource. If required, personnel will use advanced detection methods (threat hunting) to identify and neutralise the threat, providing remediation advice to the Client's IT team. Key deliverables: - Managed Detection and Response (MDR) Service o 24/7x365 Threat Detection & Response o Ongoing Detection Engineering o Ongoing Use Case Development o Cyber Threat Intelligence (CTI) o Threat Hunting o Cyber Maturity Assessment o Incident Response (first 1 hour of IR) o Dedicated Customer Success Manager - SIEM Licensing (Splunk) 100GB - CrowdStrike EDR Licensing with Falcon Mobile (1650 endpoints)

Procurement Information

GSA has undertaken a direct award via an existing compliant framework agreement in accordance with the Public Contracts Regulations. This approach has been justified on the grounds of extreme urgency brought about by events that were unforeseeable and outside the control of the authority. The requirement for a managed security service has arisen due to an immediate and critical need to ensure the continued protection of organisational systems, data, and infrastructure against evolving cyber security risks. The timescales associated with conducting a full competitive procedure would not have enabled the authority to meet these urgent operational and security requirements. The selected framework was originally procured in compliance with the relevant procurement regulations and provides a lawful route to market. The direct award mechanism available within the framework enables the authority to appoint a capable supplier within the required timeframe while maintaining compliance, transparency, and value for money. This approach ensures continuity of service and mitigates significant risk, while remaining fully aligned with procurement regulations and the strict conditions governing the use of urgency provisions. The overarching objective of this procurement is to ensure that GSA have a continued Managed Security Service that ensures the organisation's cybersecurity posture is maintained and continuously improved over the life of the contract. There is insufficient time is available to conduct a competitive procurement, the use of the G Cloud 14 Framework and the continued engagement with the incumbent supplier will ensure value for money is delivered in terms of economy, efficiency, and effectiveness.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06b5a4
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/056502-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Award procedure without prior publication of a call for competition
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72222300 - Information technology services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£441,880 £100K-£500K

Notice Dates

Publication Date
16 Jun 20261 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
13 Apr 20262 months ago
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Cancelled
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
GREENSQUAREACCORD LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BIRMINGHAM
Postcode
B1 2JB
Post Town
Birmingham
Country
England

Major Region (ITL 1)
TLG West Midlands (England)
Basic Region (ITL 2)
TLG3 West Midlands
Small Region (ITL 3)
TLG31 Birmingham
Delivery Location
TLC North East (England), TLD North West (England), TLE Yorkshire and The Humber, TLF East Midlands (England), TLG West Midlands (England), TLH East (England), TLI London, TLJ South East (England), TLK South West (England)

Local Authority
Birmingham
Electoral Ward
Ladywood
Westminster Constituency
Birmingham Ladywood

Supplier Information

Number of Suppliers
1
Supplier Name

CYSIAM

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-06b5a4-2026-06-16T10:49:45+01:00",
    "date": "2026-06-16T10:49:45+01:00",
    "ocid": "ocds-h6vhtk-06b5a4",
    "initiationType": "tender",
    "tender": {
        "id": "00001474",
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "title": "Managed Security Services",
        "status": "complete",
        "classification": {
            "scheme": "CPV",
            "id": "72222300",
            "description": "Information technology services"
        },
        "mainProcurementCategory": "services",
        "description": "GSA require a Managed Detection and Response, Security service to mitigation of threats across the GSA's digital environment.",
        "lots": [
            {
                "id": "1",
                "description": "The service includes Managed Detection and Response, Security Information and Event Management, Endpoint Detection and Response supported by Next Generation Anti-Virus, identity monitoring, cyber threat intelligence, threat hunting, cyber maturity assessments, efficiency testing and full incident response readiness. These capabilities collectively enable the proactive identification, investigation and mitigation of threats across the GSA's digital environment. Managed Detection and Response (MDR). Enterprise data will be captured and analysed for indicators of attack or compromise, which, if discovered, shall initiate a first response. This response will be either automated or human, depending on the source of the detection. GSA require Level 1 and 2 support, and the first one hour of any Level 3 investigations. Support levels are defined below. Level 1 The first line of security analysts who manage security tools and run regular reporting. At this level, alerts and alert urgency will be determined by the security team. Decisions about escalation to Level 2 will also be undertaken at this level. Level 2 The second line of security analysts / engineers who have the expertise required to get to the root of a problem and assess which part of the enterprise may be compromised. Remediation and repair of problems is expected and issues for additional investigation will be highlighted. Level 3 The third line of security engineers / incident responders, which consists of highly skilled technical resource. If required, personnel will use advanced detection methods (threat hunting) to identify and neutralise the threat, providing remediation advice to the Client's IT team. Key deliverables: - Managed Detection and Response (MDR) Service o 24/7x365 Threat Detection & Response o Ongoing Detection Engineering o Ongoing Use Case Development o Cyber Threat Intelligence (CTI) o Threat Hunting o Cyber Maturity Assessment o Incident Response (first 1 hour of IR) o Dedicated Customer Success Manager - SIEM Licensing (Splunk) 100GB - CrowdStrike EDR Licensing with Falcon Mobile (1650 endpoints)",
                "awardCriteria": {
                    "criteria": [
                        {
                            "type": "price"
                        }
                    ]
                },
                "hasOptions": false,
                "status": "cancelled"
            }
        ],
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "region": "UKC"
                    },
                    {
                        "region": "UKD"
                    },
                    {
                        "region": "UKE"
                    },
                    {
                        "region": "UKF"
                    },
                    {
                        "region": "UKG"
                    },
                    {
                        "region": "UKH"
                    },
                    {
                        "region": "UKI"
                    },
                    {
                        "region": "UKJ"
                    },
                    {
                        "region": "UKK"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "procurementMethod": "limited",
        "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
        "techniques": {
            "hasFrameworkAgreement": true
        },
        "coveredBy": [
            "GPA"
        ],
        "procurementMethodRationaleClassifications": [
            {
                "id": "D_EXTREME_URGENCY",
                "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
                "description": "Extreme urgency brought about by events unforeseeable for the contracting authority/entity and in accordance with the strict conditions stated in the directive"
            }
        ],
        "procurementMethodRationale": "GSA has undertaken a direct award via an existing compliant framework agreement in accordance with the Public Contracts Regulations. This approach has been justified on the grounds of extreme urgency brought about by events that were unforeseeable and outside the control of the authority. The requirement for a managed security service has arisen due to an immediate and critical need to ensure the continued protection of organisational systems, data, and infrastructure against evolving cyber security risks. The timescales associated with conducting a full competitive procedure would not have enabled the authority to meet these urgent operational and security requirements. The selected framework was originally procured in compliance with the relevant procurement regulations and provides a lawful route to market. The direct award mechanism available within the framework enables the authority to appoint a capable supplier within the required timeframe while maintaining compliance, transparency, and value for money. This approach ensures continuity of service and mitigates significant risk, while remaining fully aligned with procurement regulations and the strict conditions governing the use of urgency provisions. The overarching objective of this procurement is to ensure that GSA have a continued Managed Security Service that ensures the organisation's cybersecurity posture is maintained and continuously improved over the life of the contract. There is insufficient time is available to conduct a competitive procurement, the use of the G Cloud 14 Framework and the continued engagement with the incumbent supplier will ensure value for money is delivered in terms of economy, efficiency, and effectiveness."
    },
    "awards": [
        {
            "id": "056502-2026-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-COH-11422969",
                    "name": "Cysiam Limited"
                }
            ]
        }
    ],
    "parties": [
        {
            "id": "GB-COH-RS027052",
            "name": "GREENSQUAREACCORD LIMITED",
            "identifier": {
                "legalName": "GREENSQUAREACCORD LIMITED",
                "id": "RS027052",
                "scheme": "GB-COH"
            },
            "address": {
                "streetAddress": "Second Floor, 10 Brindley Place",
                "locality": "Birmingham",
                "region": "UKG31",
                "postalCode": "B12JB",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "name": "Charlene Joseph",
                "email": "charlene.joseph@greensquareaccord.co.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://greensquareaccord.co.uk",
                "classifications": [
                    {
                        "id": "BODY_PUBLIC",
                        "scheme": "TED_CA_TYPE",
                        "description": "Body governed by public law"
                    },
                    {
                        "id": "01",
                        "scheme": "COFOG",
                        "description": "General public services"
                    }
                ]
            }
        },
        {
            "id": "GB-COH-11422969",
            "name": "Cysiam Limited",
            "identifier": {
                "legalName": "Cysiam Limited",
                "id": "11422969",
                "scheme": "GB-COH"
            },
            "address": {
                "locality": "Somerset",
                "region": "UK",
                "countryName": "United Kingdom"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "sme"
            }
        },
        {
            "id": "GB-FTS-183350",
            "name": "GreenSquareAccord",
            "identifier": {
                "legalName": "GreenSquareAccord"
            },
            "address": {
                "streetAddress": "10 Brindley Place",
                "locality": "Birmingham",
                "postalCode": "B1 2JB",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "id": "GB-COH-RS027052",
        "name": "GREENSQUAREACCORD LIMITED"
    },
    "contracts": [
        {
            "id": "056502-2026-1",
            "awardID": "056502-2026-1",
            "status": "active",
            "value": {
                "amount": 441880,
                "currency": "GBP"
            },
            "dateSigned": "2026-04-14T00:00:00+01:00"
        }
    ],
    "bids": {
        "statistics": [
            {
                "id": "1",
                "measure": "bids",
                "relatedLot": "1",
                "value": 1
            }
        ]
    },
    "language": "en"
}