This public procurement record has 1 release in its history.

Planning

17 Sep 2026 at 22:41

Summary of the contracting process

Bournemouth University is exploring a future co-managed Security Operations Centre (SOC) service to strengthen and future-proof its cyber security operations. The anticipated service would complement the University’s internal team by providing monitoring, threat detection, triage, incident response, false-positive reduction, specialist expertise, operational resilience and surge capacity during major incidents or heightened risk. It may include continuous or out-of-hours SOC coverage, maintenance of detection rules and playbooks, automation, threat intelligence, sector insight and AI-enabled capabilities. The service would also establish governance, reporting and service management arrangements with clear responsibilities between the University and supplier. The work is a cyber security and managed security service, delivered for Bournemouth University in the United Kingdom.

This process is at the preliminary market engagement and planning stage, not a request for quotation or invitation to tender. Bournemouth University planned to receive written supplier responses by 28 September 2026 to inform its requirements, service model, procurement strategy and budget planning, including indicative pricing. The University’s current intention was to advertise any future procurement separately, with a future notice date estimated for 1 July 2027. The planned contract period is 1 December 2027 to 30 November 2032, subject to the future procurement. One lot is planned, covering system and support services (CPV 72250000). The future procurement is expected to be above the applicable threshold; its procedure and award method remain to be determined.

The engagement is likely to suit experienced Managed Security Service Providers able to operate a co-managed SOC alongside an established in-house university security team. Relevant capability includes 24/7 or out-of-hours monitoring, detection engineering, threat triage, incident response, false-positive reduction, playbook and automation development, threat intelligence and operational support during major incidents. Suppliers should be able to work with the University’s existing Microsoft security environment, including Microsoft Sentinel, Microsoft Defender XDR, Entra ID Protection and Security Copilot, while limiting additional tooling where appropriate. Useful market input will cover operating models, implementation, governance, service levels, automation, artificial intelligence, commercial arrangements, risks, benefits, resourcing and the factors affecting service cost.

How relevant is this notice?

Notice Title

Security Operation Centre

Notice Description

Bournemouth University ("BU" or the "University") is exploring options for the provision of a co-managed Security Operations Centre (SOC) service to enhance and future-proof its cyber security operations capability. The University is seeking market feedback from experienced Managed Security Service Providers to better understand available service models, implementation approaches, commercial arrangements and indicative costs. BU has invested significantly in its internal cyber security capability and Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Entra ID Protection, Security Copilot and related services. The University is now considering how external specialist support could complement its in-house team through a co-managed SOC operating model. The key objectives of a future service are expected to include: - Enhancing monitoring, detection and response capabilities through either 24/7 or out-of-hours SOC coverage. - Improving threat detection, triage, false-positive reduction and incident response effectiveness. - Providing additional specialist expertise, operational resilience and surge capacity during major incidents or periods of heightened risk. - Maintaining and continuously improving detection rules, playbooks, automation and security monitoring capabilities. - Leveraging threat intelligence, sector insight, automation and AI-enabled capabilities to strengthen cyber resilience and operational effectiveness. - Establishing a robust governance, reporting and service management framework with clear responsibilities between BU and the supplier. - Maximising the value of the University's existing Microsoft security investments while minimising the need for additional tooling wherever appropriate. The University wishes to understand how the market can support these objectives, together with the costs, benefits, risks and implementation considerations associated with different service models. Supplier feedback received through this Preliminary Market Engagement exercise will help inform the University's future requirements, budget planning and procurement strategy.

Planning Information

The purpose of this Preliminary Market Engagement (PME) exercise is to engage with the market and gather supplier insight to help Bournemouth University develop its future Security Operations Centre requirements, understand available service models and technologies, and inform its procurement strategy and budget planning. Objectives - Gain a better understanding of the current market for co-managed Security Operations Centre services and Managed Security Service Providers. - Understand the range of operating models available, including 24/7 and out-of-hours service provision. - Gather feedback on implementation approaches, governance models, service levels, automation and AI capabilities, and commercial arrangements. - Obtain indicative pricing information and identify the key factors that influence service cost. - Better understand the resources, technologies and organisational commitments required to successfully implement and operate a future service. - Use supplier feedback to refine requirements, inform budget planning and determine the most appropriate route to market and procurement approach. Bournemouth University invites interested organisations to review the PME documentation and submit a written response. Suppliers are encouraged to provide detailed feedback, market insight and indicative pricing information to assist the University in understanding available options and the likely costs associated with a future Security Operations Centre service. Responses should be submitted in accordance with the instructions contained within the PME documentation and emailed to procurement@bournemouth.ac.uk by the published deadline. Please note that this PME is an information-gathering exercise only. It is not a request for quotation, invitation to tender or other competitive procurement process. The information obtained through this exercise will be used solely to help inform the University's future requirements, budget considerations and procurement strategy. There is no obligation for suppliers to respond to this PME. Supplier responses (or lack of responses) will not be used to determine participation in, or evaluation of, any future procurement exercise. Participation in this PME will not provide any supplier with an advantage or guarantee inclusion in any subsequent tender process. The University's current intention is that any future procurement opportunity arising from this requirement will be advertised separately at a later date.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-0774e7
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/088444-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72250000 - System and support services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
17 Sep 20264 days ago
Submission Deadline
Not specified
Future Notice Date
2 Jul 202710 months to go
Award Date
Not specified
Contract Period
1 Dec 2027 - 30 Nov 2032 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
Bournemouth University
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
POOLE
Postcode
BH12 5BB
Postcode Area
Bournemouth
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK6 North Somerset, Somerset and Dorset
Small Region (ITL 3)
TLK63 Bournemouth, Christchurch and Poole
Delivery Location
TLK24 Bournemouth, Christchurch and Poole

Local Authority
Bournemouth, Christchurch and Poole
Electoral Ward
Talbot & Branksome Woods
Westminster Constituency
Bournemouth West

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...