--- title: "SOC Out-of-Hours Protective Monitoring Service" ocid: "ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b" markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b.md" json_url: "https://d3tenders.com/contract/ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b.json" source: "Contracts Finder" current_stage: "Planning" buyer: "DEFRA" published: "2025-12-15" --- # SOC Out-of-Hours Protective Monitoring Service Buyer: DEFRA Current stage: Planning OCID: ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b) [Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b.json) ## Summary The Department for Environment, Food & Rural Affairs (Defra) is in the planning stage of re-procuring its Security Operations Centre (SOC) out-of-hours protective monitoring service. This initiative is tailored for the IT services sector, specifically focusing on consulting, software development, Internet, and support. The procurement process is managed under the Crown Commercial Service's RM3764.3 Cyber Security Services 3 Dynamic Purchasing System (DPS). The key engagement timeline extends until 10th March 2026, with the contract intended to start on 1st November 2026. The initial contract term is set for three years, with potential extensions of up to two additional years. The procurement is intended for services across several regions including the UK, British Oversea Territories, Channel Islands, Europe, Isle of Man, and globally. This tender presents significant opportunities for SMEs in the IT sector, as Defra seeks providers capable of delivering high-quality monitoring services outside regular business hours. Businesses that specialise in cybersecurity and possess the necessary capabilities to participate through the CCS DPS are encouraged to express interest. The flexible contract term offers a stable business opportunity, which can foster growth and allow firms to expand their expertise and portfolio within the public sector. Given the extensive geographical scope and requirement for specialised IT services, companies with robust infrastructure and experienced personnel in cybersecurity will find this tender particularly rewarding. ## Notice Defra's Security Operations Centre (SOC) is reliant on a hybrid model for protective monitoring, whereby Defra's internal SOC provides coverage during standard business hours (09:00-17:00) Monday to Friday and an external supplier delivers monitoring outside these hours. Defra is seeking to reprocure this out-of-hours Protective Monitoring SOC service when the incumbent contract expires on 31st October 2026. Contract Term: The Authority is seeking an initial contract term of 3-years, with two options to extend for 1-year each (3+1+1). Route to Market: The Crown Commercial Service's RM3764.3 Cyber Security Services 3 DPS. Suppliers must register on the DPS via CCS' website and meet the Contracting Authority's requirements to be considered for this opportunity. Timelines* (2026) 10th March - ITT Stage 1 released 23rd March - ITT Stage 2 released 20th April - ITT Submission deadline 11th June - Contract Award 1st November - Contract Start Date *Please note that these are provisional timelines and could be subject to change at the Authority's discretion. ## Key Details | Field | Value | | --- | --- | | Publication source | Contracts Finder | | Latest notice | https://www.contractsfinder.service.gov.uk/Notice/48c369bc-b932-4fd0-9dff-6fed2171890d | | Notice type | Market Engagement Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Not Specified | | Procurement method details | Not specified | | Tender suitability | SME | | Awardee scale | Not specified | | All stages | Planning | ## Dates | Field | Value | | --- | --- | | Publication date | 15 Dec 2025 | | Submission deadline | Not specified | | Future notice date | 10 Mar 2026 | | Award date | Not specified | | Contract period | Not specified | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | Not specified | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Planning | | Lots status | Not specified | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | DEFRA | | Locality | LONDON | | Post town | South West London | | Postcode | SW1P 4DF | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI3 Inner London - West | | ITL 3 | TLI35 Westminster and City of London | | Local authority | Westminster | | Electoral ward | St James's | | Westminster constituency | Cities of London and Westminster | | Delivery location | Not specified | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72000000 - IT services: consulting, software development, Internet and support ## Release History - 15 Dec 2025 at 17:14 - Planning - Market Engagement Notice - https://www.contractsfinder.service.gov.uk/Notice/48c369bc-b932-4fd0-9dff-6fed2171890d - 15 Dec 2025 at 17:12 - Planning - Market Engagement Notice - https://www.contractsfinder.service.gov.uk/Notice/031b4bcf-fad1-4fde-a3a2-419957e87b15 - 15 Dec 2025 at 17:09 - Planning - Market Engagement Notice - https://www.contractsfinder.service.gov.uk/Notice/8a168224-607b-4a45-9b98-8897091e4315 ## Documents - https://www.contractsfinder.service.gov.uk/Notice/48c369bc-b932-4fd0-9dff-6fed2171890d 15th December 2025 - Early engagement notice on Contracts Finder - https://www.contractsfinder.service.gov.uk/Notice/031b4bcf-fad1-4fde-a3a2-419957e87b15 15th December 2025 - Early engagement notice on Contracts Finder - https://www.contractsfinder.service.gov.uk/Notice/8a168224-607b-4a45-9b98-8897091e4315 15th December 2025 - Early engagement notice on Contracts Finder ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-d5109687-8400-4a9d-b0dd-255786fee88b.json.