--- title: "Security Information Event and Management Software and Professional Services" ocid: "ocds-h6vhtk-051626" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-051626" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-051626.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-051626.json" source: "Find A Tender Service" current_stage: "Award" buyer: "NATIONAL ENERGY SYSTEM OPERATOR LIMITED" published: "2025-05-16" --- # Security Information Event and Management Software and Professional Services Buyer: NATIONAL ENERGY SYSTEM OPERATOR LIMITED Current stage: Award OCID: ocds-h6vhtk-051626 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-051626) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-051626.json) ## Summary NATIONAL ENERGY SYSTEM OPERATOR LIMITED has completed a procurement process for the provision of security information event and management software and professional services, with a focus on software-related services. The procurement process, tagged as a contract award, was undertaken using a limited procurement method without the prior publication of a call for competition, due to the absence of competition for technical reasons. The process culminated in the award of the contract to Elastic, involving the continuous monitoring of information systems and networks for security events, designed to meet National Power Outage (NPO) requirements. This contract, classified under CPV code 72260000, is located in the UK, and the contract was signed on 29th April 2025. This tender creates substantial opportunities for businesses in the cybersecurity software and IT services sector, especially those with capabilities in developing or integrating security information and event management (SIEM) solutions. The opportunity is particularly suited for businesses with expertise in systems compatible with Managed Security Service Providers (MSSP) and those able to meet stringent technical and compliance needs of critical infrastructure. As the contract was awarded directly to Elastic, it underscores the importance of positioning products within market-leading assessments, such as high placement in the Gartner Quadrant. This direct award serves as an excellent case study for businesses aiming to highlight cost-efficiency, compliance, and compatibility within their proposals to secure high-value contracts in the public sector. ## Notice Provision of security information event and management software ### Lot Information Lot 1 Procurement of a tool used to continuously monitor information systems and networks for security events and anomalies, collect and review logs, and aid in the investigation of security incidents. ### Procurement Information Following a comprehensive and competitive procurement process, a direct award to Elastic is being proposed based on the following critical factors: (i)Compliance with National Power Outage (NPO) Requirements: The procurement exercise established that only two solutions that sit high in the Gartner Quadrant, Splunk and Elastic, are capable of meeting the stringent National Power Outage (NPO) requirements. These requirements explicitly preclude the use of cloud-based SIEM solutions. Furthermore, both technologies are compatible with the selected Managed Security Service Provider (MSSP) and have readily available engineering expertise within the open market. This significantly reduces delivery risk and ensures continuity of service. (ii)Technical Recommendation and Internal Validation: The selected SOC MSSP has provided a strong recommendation in favor of Elastic, citing its suitability to meet the NPO constraints and operational needs. In parallel, the NESO Chief Security Office (CSO) has conducted an internal assessment of Elastic and confirmed it aligns with their functional and security requirements. This dual endorsement reinforces confidence in the technical and strategic fit of the solution. Furthermore, Elastic is already being used in CNI and the business for health monitoring purposes, so there is some experience in supporting it. (iii)Cost Efficiency: From a financial standpoint, Elastic is significantly more cost-effective option compared to Splunk. The estimated annual cost of implementing and maintaining Splunk is over eight times higher than that of Elastic. This substantial cost differential highlights the strong value for money achieved through a direct award to Elastic, making it the more economically viable solution. In light of the above considerations, namely compliance with critical NPO constraints, alignment with MSSP and CSO assessments, and marked cost savings, a direct award to Elastic is both justified and strategically sound. ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/022341-2025 | | Notice type | Award Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Limited | | Procurement method details | Award procedure without prior publication of a call for competition | | Tender suitability | Not specified | | Awardee scale | Not specified | | All stages | Award | ## Dates | Field | Value | | --- | --- | | Publication date | 16 May 2025 | | Submission deadline | Not specified | | Future notice date | Not specified | | Award date | 28 Apr 2025 | | Contract period | Not specified | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | Not specified | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Complete | | Lots status | Cancelled | | Awards status | Active | | Contracts status | Active | ## Buyer | Field | Value | | --- | --- | | Main buyer | NATIONAL ENERGY SYSTEM OPERATOR LIMITED | | Locality | WOKINGHAM | | Post town | Reading | | Postcode | RG41 5BN | | Country | England | | ITL 1 | TLJ South East (England) | | ITL 2 | TLJ1 Berkshire, Buckinghamshire and Oxfordshire | | ITL 3 | TLJ16 Berkshire West | | Local authority | Wokingham | | Electoral ward | Winnersh | | Westminster constituency | Wokingham | | Delivery location | Not specified | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72260000 - Software-related services ## Release History - 16 May 2025 at 14:42 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/022341-2025 ## Notice URLs - https://www.neso.energy/ ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-051626. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-051626.json.