Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Cybersecurity Managed Services

ISLINGTON & SHOREDITCH HOUSING ASSOCIATION LIMITED

This public procurement record has 1 release in its history.

Award

14 Oct 2026 at 15:27

Award Notice
Summary of the contracting process

Islington & Shoreditch Housing Association (ISHA) procured managed cybersecurity services to strengthen its security and operational resilience, and to prevent, detect, respond to and recover from cyber threats. The scope covers security assessments such as IT health checks and vulnerability assessments; incident handling, threat intelligence and business continuity support; managed detection and response, security operations centre services and continuous monitoring; and specialist consultancy on risk, security architecture, cyber maturity, strategy, policies and transformation. The service mix depends on the association’s operational and security requirements. Work is for the association in London. Services are to follow relevant industry standards and legislation, with cyber security certifications required where set by the purchasing framework’s filters.

The procurement is complete and the contract is active. ISHA selected Grant Thornton UK Advisory & Tax LLP through a mini-competition under the Crown Commercial Service Cyber Security Services 3 dynamic purchasing system, using a limited procedure. The award was made on 7 May 2026; the contract was signed on that date. Its value is £573,995.23. The stated initial term is three years, with two optional 12-month extensions, giving a maximum possible duration of five years. Extensions depend on satisfactory performance, value for money, continuing need and any scope changes remaining within the permitted limits. The single lot was evaluated on quality at 70% and price at 30%. Two bids were recorded.

This award shows that ISHA buys a broad, managed cybersecurity capability through a mini-competition on the Cyber Security Services 3 purchasing system, rather than as an open standalone tender. Suppliers seeking comparable work with this buyer would need to be admitted to that system and meet the relevant category filters and certification requirements. Credible providers would be able to combine assessment and vulnerability testing with incident response, threat intelligence, business continuity, continuous monitoring and managed security operations, alongside senior cyber consultancy on risk, architecture, maturity and strategy. The scope calls for capacity across both operational response and advisory work, with services that can flex to changing security needs. Strong evidence of quality and dependable delivery would matter particularly in an evaluation where quality carried more weight than price.

How relevant is this notice?

Notice Information

Notice Title

Cybersecurity Managed Services

Notice Description

The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats. The required services may include, but are not limited to: Security assessment services, including IT health checks and vulnerability assessments; Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support; Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring; Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities. These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract. Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).

Lot Information

Lot 1

The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats. The required services may include, but are not limited to: Security assessment services, including IT health checks and vulnerability assessments; Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support; Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring; Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities. These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract. Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).

Options: The contract will be awarded for an initial term of three (3) years, with the option to extend by up to two (2) additional periods of twelve (12) months each, up to a maximum total contract duration of five (5) years. Extensions may be used where: The Supplier's performance remains satisfactory, as demonstrated through contract management reviews, KPIs, and service delivery standards; Continuing with the incumbent Supplier represents value for money, taking into account cost, quality, market conditions, and the Authority's ongoing operational requirements; There is a continued business need for the services and extending the contract supports continuity and avoids unnecessary disruption to service delivery; Any changes in scope remain within the limits permitted by the PCR2015 and do not materially alter the nature of the original procurement. Where both optional extensions are exercised, they may be applied individually or consecutively, depending on the needs of the Authority at the relevant time.

Procurement Information

The procurement was a mini-competition from a PCR2015 compliant DPS, namely Government Commercial Services' RM3764.3 Cyber Security Services 3.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-0787cf
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/097134-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Dynamic
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Award procedure without prior publication of a call for competition
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72590000 - Computer-related professional services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£573,995 £500K-£1M

Notice Dates

Publication Date
14 Oct 20261 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Cancelled
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
ISLINGTON & SHOREDITCH HOUSING ASSOCIATION LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
N4 2DR
Postcode Area
North London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI4 Inner London - East
Small Region (ITL 3)
TLI43 Haringey and Islington
Delivery Location
TLI London
Local Authority
Islington
Electoral Ward
Finsbury Park
Westminster Constituency
Islington North

Supplier Information

Number of Suppliers
1
Supplier Name

Grant Thornton UK LLP

Further Information

Notice URLs

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...