---
title: "Provision of Security Operations Centre Managed Service: Prior Information Notice"
ocid: "ocds-h6vhtk-03efa8"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-03efa8"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-03efa8.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-03efa8.json"
source: "Find A Tender Service"
current_stage: "Planning"
buyer: "CROWN PROSECUTION SERVICE"
published: "2023-08-14"
---

# Provision of Security Operations Centre Managed Service: Prior Information Notice

Buyer: CROWN PROSECUTION SERVICE  
Current stage: Planning  
OCID: ocds-h6vhtk-03efa8

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-03efa8)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-03efa8.json)

## Summary

The Crown Prosecution Service is planning a procurement process titled "Provision of Security Operations Centre Managed Service: Prior Information Notice". This procurement falls under the services category and aims to secure a Security Operations Centre (SOC) service. The SOC provider will need to manage a SIEM solution, provide cyber threat intelligence, handle incident response, ensure compliance, and offer capability integration. The planned communication of future details for this tender is set for January 31, 2024, enabling interested suppliers to engage.

This opportunity allows businesses specializing in security services, IT services, and cyber threat intelligence to compete. Companies with expertise in providing 24/7 security services, incident response, compliance management, and cybersecurity capabilities will find this tender suitable. The Crown Prosecution Service as the buying organization is focusing on modernizing its approach to SOC service provision and seeks innovative solutions from potential suppliers to enhance their security capabilities.

## Notice

Provision of Security Operations Centre Managed Service Requirement: Prior Information Notice. The Crown Prosecution Service (CPS) has a security function within the Digital and Information Directorate (DID), delivering a professional approach and striving for Security Excellence in the provision of all IT services. Whilst the Security team is internal, the CPS is seeking to procure a Security Operations Centre (SOC) service. The Security Operations Centre is a key service for the CPS, and it is critical that any supplier delivering this service understands the nature of the business, the key role that the CPS plays within the Criminal Justice System and the need for a full 24 x 7 x 365 security service, as there are services available outside office hours.

### Lot Information

Lot 1

Prior Information Notice for Provision of a Security Operations Centre (SOC) Service: The Crown Prosecution Service (CPS) has a security function within the Digital and Information Directorate (DID), delivering a professional approach and striving for Security Excellence in the provision of all IT services. Whilst the Security team is internal, the CPS is seeking to procure a Security Operations Centre (SOC) service. The Security Operations Centre is a key service for the CPS, and it is critical that any supplier delivering this service understands the nature of the business, the key role that the CPS plays within the Criminal Justice System and the need for a full 24 x 7 x 365 security service, as there are services available outside office hours. The CPS plans to (separately) procure a SIEM tool and is looking for a SOC provider to complement its cyber defensive capabilities in providing: * Managing the CPS SIEM solution, including: o Onboarding / removal of SIEM feeds and/or configuration of SIEM tool o Creating customised alerts o 24x7x365 monitoring of alerts, including analysing alerts to detect threats and configuration of security orchestration, automation and response. * Provide cyber threat Intelligence, including: o Threat Intel - Identify, Investigate and hunt for cyber threats to gain insight into attacker behaviour, infrastructure, motives and IOCs'. o Vulnerability Intelligence - identify vulnerabilities that pose the most risk to their organisation, reducing downtime, and preventing attacks. o Supply chain intelligence - monitor the CPS's supply chain o Brand intelligence - provide analytical insights to proactively defend against new and emerging threats to your brand, products, employees, executives, and suppliers. * Capability integration - continually improve the detection capabilities of the SIEM by learning from cyber threat intelligence and incidents. * Incident response, including: o Work according to agreed incident response processes, playbooks with the customer. o Identify, analyse, contain and eradicate, recover (see below) and review incidents. o Provide Forensic analysis / forensic evidence gathering as required (preferably NCSC certified) * Compliance Management - help ensure that applications, security tools and processes comply with privacy regulations, namely Data Protection Act. The SOC provider will be expected to record incidents in the CPS ITSM tool to automate the production of incident management information. The SOC provider will also be required to assist with the trending of incidents and attend operational level meetings with the CPS and other suppliers as required. At this stage, the CPS is seeking to engage with the supply market as part of an information-gathering exercise to understand how suppliers might approach the provision of the services outline above, particularly with regard to any developments in SIEM / SOC delivery and innovation. Suppliers who wish to express their interest in this potential opportunity should do so via the contact details contained within the notice and present their observations on how the requirements within this Prior Information Notice could be fulfilled. This may take any format and should cover the following areas per as minimum: * Observations / Comments on the customer requirements, particularly the feasibility of adding forensic analysis and NCSC certified Cyber Incident Responder retainer capability to the requirements. * how the provision of the SOC service has been modernised in recent years * approach to ensure Service Excellence * Recommendation for SIEM tool(s) and reasons.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/023779-2023 |
| Notice type | Planning Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Not Specified |
| Procurement method details | Not specified |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Planning |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 14 Aug 2023 |
| Submission deadline | Not specified |
| Future notice date | 31 Jan 2024 |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Planned |
| Lots status | Planned |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | CROWN PROSECUTION SERVICE |
| Locality | LONDON |
| Post town | South West London |
| Postcode | SW1H 9EA |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | TLI London |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72250000 - System and support services

## Release History

- 14 Aug 2023 at 15:33 - Planning - Planning Notice - https://www.find-tender.service.gov.uk/Notice/023779-2023

## Notice URLs

- https://www.cps.gov.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-03efa8. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-03efa8.json.