---
title: "Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT)"
ocid: "ocds-h6vhtk-055e25"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-055e25"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-055e25.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-055e25.json"
source: "Find A Tender Service"
current_stage: "Planning"
buyer: "NHS ENGLAND, LEEDS"
published: "2025-07-14"
---

# Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT)

Buyer: NHS ENGLAND, LEEDS  
Current stage: Planning  
OCID: ocds-h6vhtk-055e25

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-055e25)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-055e25.json)

## Summary

NHS England, based in Leeds, is planning a procurement process for the establishment of a Cyber Security Operations Centre (CSOC) Cyber Incident Response Team (CIRT). The intended contract, valued at up to £12 million, falls under the services category and involves computer-related professional services. The procurement will be conducted via the Crown Commercial Services RM3764.3 Cyber Security Services 3 DPS in compliance with the Public Contracts Regulations 2015. The formal notice for this procurement process is anticipated on 4th August 2025, and the contract is expected to commence on 1st May 2026, concluding by 30th April 2030. The central government entity is seeking to enhance its cyber security infrastructure across the United Kingdom, with a focus on rapid incident response.

This tender offers significant opportunities for businesses specialising in cyber security and incident management. Companies providing comprehensive cyber incident response solutions and possessing expertise in professional computer-related services will find this opportunity particularly advantageous. Engaging in such a high-profile project not only helps strengthen a firm's portfolio but also promotes growth by associating with a reputable public authority. Businesses experienced in navigating governmental procurement processes, particularly those aligned with Crown Commercial Service frameworks, will be well-positioned to compete for this contract.

## Notice

The Cyber Security Operations Centre (CSOC) relies on 3rd party support to provide Cyber Incident Response Team to customers during cyber incidents. The CIR Team provides boots on the ground support to investigate and recover from cyber incidents. Please note this will be procured via Crown Commercial Services RM3764.3 Cyber Security Services 3 DPS under PCR 2015.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/039475-2025 |
| Notice type | UK1 - Pipeline Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Not Specified |
| Procurement method details | Not specified |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Planning |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 14 Jul 2025 |
| Submission deadline | Not specified |
| Future notice date | 4 Aug 2025 |
| Award date | Not specified |
| Contract period | 30 Apr 2026 - 30 Apr 2030 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £10,000,000 |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Planned |
| Lots status | Planned |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NHS ENGLAND, LEEDS |
| Locality | LEEDS |
| Post town | Leeds |
| Postcode | LS1 4AP |
| Country | England |
| ITL 1 | TLE Yorkshire and The Humber |
| ITL 2 | TLE4 West Yorkshire |
| ITL 3 | TLE42 Leeds |
| Local authority | Leeds |
| Electoral ward | Hunslet & Riverside |
| Westminster constituency | Leeds South |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72590000 - Computer-related professional services

## Release History

- 14 Jul 2025 at 08:49 - Planning - UK1 - Pipeline Notice - https://www.find-tender.service.gov.uk/Notice/039475-2025

## Documents

- https://www.find-tender.service.gov.uk/Notice/039475-2025
  14th July 2025 - Pipeline notice on Find a Tender

## Notice URLs

- https://www.england.nhs.uk//
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-055e25. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-055e25.json.