This public procurement record has 1 release in its history.

Tender

08 Oct 2026 at 11:08

Summary of the contracting process

The British Film Institute is procuring a hybrid Security Operations Centre service to protect its critical systems. The requirement combines a continuously staffed, 24-hour, 365-day security operations capability with the design of a new hybrid operating model. The supplier is expected to establish a service that monitors agreed critical systems, detects priority cyber threats, investigates security events, responds to serious incidents, conducts proactive threat hunting, protects security logs, escalates incidents appropriately, reports to management and identifies and fixes significant monitoring gaps. This is a cybersecurity and managed IT service, with related security software elements. The work is for the BFI in the United Kingdom and is intended to provide the Institute with an operational security monitoring and response capability.

The BFI invited offers through a below-threshold open competition. This is the tender stage. Questions were due by 26 October 2026 at 12:00, and offers by 2 November 2026 at 12:00. The stated contract period runs from 31 March 2027 to 30 March 2028, with two possible one-year extensions and an overall maximum end date of 30 March 2030. The estimated value is £150,000 excluding VAT and £180,000 including VAT. There is one lot. Evaluation begins with pass/fail technical questions; bids passing that stage are assessed 80% on quality and 20% on price. Electronic submission is permitted.

This opportunity suits cybersecurity and managed security service providers able to design and operate a hybrid SOC for a public-sector client. The supplier must deliver continuous monitoring throughout the year and build demonstrable operational capability to monitor agreed critical systems, identify priority threats, investigate events and respond to priority-one and priority-two incidents. Proactive threat hunting, secure log management, clear incident escalation, management-level reporting, and the ability to find and remedy material monitoring gaps are also central to the requirement. Suppliers should be able to establish the operating model as well as provide the ongoing service. The description does not state particular certifications, named technologies or minimum supplier credentials; technical responses must pass the initial pass/fail assessment.

How relevant is this notice?

Notice Information

Notice Title

Hybrid Security Operations Centre (SOC)

Notice Description

The British Film Institute (BFI) is looking for a supplier to provide a Hybrid Security Operations Centre (SOC) on a 1+1+1 year basis. It will consist a 24/7 for 365 days SOC with a Hybrid SOC Service Design for a new Hybrid SOC Operating Model by end of BFI's financial year end Q4-2027, 31 March 2027. At the end of the first contracted year, the Supplier shall have established a demonstrable operational capability that enables BFI to: - Continuously monitor agreed critical systems; - Detect priority cyber threats; - Investigate security events; - Respond to P1/P2 incidents; - Undertake proactive threat hunting; - Maintain protected security logs; - Demonstrate appropriate incident escalation; - Provide management-level security reporting; and - Identify and remediate material monitoring gaps. To take part in this tender, please visit our website, at https://in-tendhost.co.uk/bfi/aspx/Tenders/Current , where you will need to register, if you haven't already, and express an interest in this opportunity to access the relevant documents. Please note expressions of interest will only be accepted via the portal.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-07837f
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/095088-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Below threshold - open competition
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support


CPV Codes

48730000 - Security software package

72000000 - IT services: consulting, software development, Internet and support

72212730 - Security software development services

Notice Value(s)

Tender Value
£150,000 £100K-£500K
Lots Value
£150,000 £100K-£500K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
8 Oct 20265 days ago
Submission Deadline
2 Nov 20263 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
31 Mar 2027 - 30 Mar 2028 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
BFI
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
W1T 1LN
Postcode Area
West London
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI36 Camden
Delivery Location
TLI London

Local Authority
Camden
Electoral Ward
Bloomsbury
Westminster Constituency
Holborn and St Pancras

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...