UKRI-6251 Cyber Security - Managed Service and Detection Response & Security Operations Centre service

UK RESEARCH & INNOVATION

This public procurement record has 2 releases in its history.

PlanningUpdate

16 Sep 2026 at 12:54

Planning

21 Aug 2026 at 16:36

Summary of the contracting process

UK Research and Innovation, with the Science and Technology Facilities Council, intends to procure a cyber security managed service. The requirement is for collaborative managed detection and response and Security Operations Centre services, working with the existing STFC cyber security team. The provider will deliver continuous cyber security detection and response, operating 24 hours a day, 365 days a year. The service is intended initially for STFC, with potential to scale to other UKRI councils during the contract. This is a services procurement delivered across the United Kingdom. Relevant work includes cyber security operations, security monitoring and response, security software development, and computer support and consultancy. The procurement is a single lot and is identified as suitable for small and medium-sized enterprises.

This procurement is at the planning stage and is not an invitation to tender. UKRI is undertaking pre-market engagement through a request for information to shape the service requirements, mobilisation and transition arrangements, scalability and commercial approach. Responses were sought by 11 September 2026, with possible follow-up one-to-one meetings. The buyer expects to publish a subsequent notice on 1 October 2026. Subject to approvals, the intended route to market is the Cyber Security Services 3 Dynamic Purchasing System, RM3764.3. The anticipated contract is expected to run from 1 February 2027 to 1 February 2030, with mobilisation from February 2027 and the service operational by 1 May 2027. The estimated value is £1.25 million excluding VAT, or £1.5 million including VAT.

The requirement will suit managed security service providers and cyber security specialists able to deliver a collaborative Security Operations Centre and managed detection and response service at continuous, round-the-clock scale. Suppliers should be prepared to work alongside an established cyber security team, support mobilisation and transition, and demonstrate an approach that can expand from STFC to other UKRI councils. The buyer is seeking market input on service design, scalability and the commercial model, so experienced providers can help shape the eventual requirement during the pre-market engagement. Suppliers intending to compete in the later procurement should prepare for the requirements of the Cyber Security Services 3 Dynamic Purchasing System and apply to join it if they are not already appointed. Participation in the engagement will not influence later evaluation or guarantee an invitation.

How relevant is this notice?

Notice Information

Notice Title

UKRI-6251 Cyber Security - Managed Service and Detection Response & Security Operations Centre service

Notice Description

UKRI-6251 Cyber Security - Managed Service and Detection Response & Security Operations Centre service. A Cyber Security provider to deliver collaborative SOC services, working with the existing STFC cyber security team.

Planning Information

Pre-Market Engagement – Cyber Security Managed Service Detection and Response UK Research and Innovation (UKRI) and the Science and Technology Facilities Council (STFC) is undertaking a pre-market engagement to inform an upcoming procurement for a Managed Security Service Provider to deliver a cyber security managed detection and response / Security Operations Centre service. The initial requirement is for the Science and Technology Facilities Council for an anticipated three-year contract, with an estimated value of approximately £1.25 million excluding VAT. The service is expected to provide 24/7 x 365 cyber security detection and response, with mobilisation commencing from February 2027 and the service operational by 1 May 2027. STFC is also exploring the potential to scale the service to additional UKRI councils during the lifetime of the contract. STFC is seeking feedback from the market to help inform the proposed service requirements, mobilisation and transition arrangements, scalability and commercial approach. Engagement Activities STFC intends to undertake: Request for Information (RFI): Suppliers are invited to complete the questionnaire. To request a copy of the RFI, please email STFCProcurement@UKRI.org STFC may invite a limited number of suppliers to participate in structured one-to-one MS Teams meetings following review of the RFI responses. More information on this and the proposed route to market can be found in the RFI. Participation in this pre-market engagement does not form part of any subsequent procurement evaluation and will not provide suppliers with an advantage in any future competition. Amendment to Preliminary Market Engagement Notice UKRI would like to clarify the proposed route to market for the subsequent procurement. Subject to final approvals and confirmation of the procurement strategy, UKRI intends to utilise the Cyber Security Services 3 Dynamic Purchasing System (DPS), RM3764.3. Suppliers who are not currently appointed to the DPS and wish to participate in any subsequent competition should apply to join the DPS via the Government Supplier Registration System. Further information and the application process can be accessed here: https://supplierregistration.cabinetoffice.gov.uk/dps/RM3764.3?utm Suppliers should note that participation in this Pre-Market Engagement does not automatically result in an invitation to any subsequent competition. Supplier selection will be undertaken in accordance with the DPS requirements and applicable procurement procedures. Reason for amendment: To clarify the proposed route to market and provide interested suppliers with information on how to join the intended DPS.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06e9f0
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/087735-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

79 - Business services: law, marketing, consulting, recruitment, printing and security


CPV Codes

72212730 - Security software development services

72600000 - Computer support and consultancy services

79710000 - Security services

Notice Value(s)

Tender Value
£1,250,000 £1M-£10M
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
16 Sep 20261 months ago
Submission Deadline
Not specified
Future Notice Date
1 Oct 2026Expired
Award Date
Not specified
Contract Period
1 Feb 2027 - 1 Feb 2030 3-4 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
UK RESEARCH & INNOVATION
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
SWINDON, WILTSHIRE
Postcode
SN2 1FL
Postcode Area
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified

Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...