---
title: "Managed Security Operations Centre (SOC) and Incident Response Services Agreement"
ocid: "ocds-h6vhtk-069e64"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-069e64"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-069e64.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-069e64.json"
source: "Find A Tender Service"
current_stage: "Tender"
buyer: "UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED"
published: "2026-07-23"
---

# Managed Security Operations Centre (SOC) and Incident Response Services Agreement

Buyer: UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED  
Current stage: Tender  
OCID: ocds-h6vhtk-069e64

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-069e64)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-069e64.json)

## Summary

The United Kingdom National Nuclear Laboratory Limited (UKNNL) has initiated a tender process for a Managed Security Operations Centre (SOC) and Incident Response Services Agreement. This procurement, identified by the tender ID "NNLC748", aims to enhance UKNNL’s cyber security capabilities. The contract will include 24/7 security monitoring, incident response, and SOC management services. The procurement follows a Competitive Flexible Procedure with key stages including the Procurement Specification Questionnaire deadline on 17th August 2026, and the final tender submission due by 22nd September 2026. The contract's estimated value is £2.5 million, with the possibility of options for additional cyber security services. The procurement is categorised under IT services and security services, focusing on operations located in the UK.

This tender presents significant opportunities for businesses specialising in cyber security services, particularly those with expertise in SOC management and incident response. Companies with relevant industry accreditations such as CREST and capabilities in threat intelligence and digital forensics will be well-positioned to compete. The contract spans three years, starting from 1st November 2026, with potential extensions up to two additional years. SMEs capable of providing innovative solutions and enhancements to security operation services are highly encouraged to participate, offering a platform to expand operations and expertise within the public sector and secure substantial growth opportunities.

## Notice

UKNNL is seeking to procure a Managed Security Operations Centre (SOC) and Incident Response service to enhance its cyber security capability and support the protection of its IT estate, digital assets, and sensitive information. UKNNL requires a new partner to manage its Security Operations Centre, to monitor, detect, respond to, and remediate cyber threats across its network. The SOC incorporates people, process, and technology to provide a detect-and-respond capability that better protects the Authority's digital assets and data. The requirement is for a comprehensive Security Operations Centre service, delivering 24/7 monitoring, incident detection, incident response, digital forensic investigation, threat intelligence, and SOC management services. The service will support the identification, analysis, containment, and escalation of cybersecurity threats and incidents affecting the environment, whilst continuously improving security operations and response maturity.

### Lot Information

Lot 1

Options: The contract may include the option for UKNNL to procure additional cyber security services during the contract term where required. Such services may include, but are not limited to: * Enhanced Security Operations (SecOps) services; * Additional threat hunting capabilities; * Enhanced threat intelligence services; * Additional Digital Forensics and Incident Response (DFIR) support; * Additional incident response retainer hours and specialist support; * Cyber security consultancy and advisory services; * Security engineering, optimisation and security tool support; * Additional monitoring, detection and response capabilities; and * Onboarding, integration and support for new systems, networks and security technologies. The exercise of any option will be subject to UKNNL's operational requirements, available funding, the terms of the contract and all applicable procurement legislation.

Renewal: The contract will be awarded for an initial period of three (3) years, with the option to extend for up to two (2) further periods of twelve (12) months each. Any extension will be exercised at UKNNL's sole discretion and in accordance with the contract terms and applicable legislation.

### Planning Information

UKNNL will be holding a virtual market engagement event on Friday 5th June at 10:00am.
This session will provide an overview of the proposed service scope, delivery model, and procurement approach, and will give suppliers an opportunity to better understand UKNNL's requirements and provide feedback.
Suppliers interested in attending should confirm their attendance by emailing gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued.
Due to the anticipated level of supplier interest, please allow 48-72 hours for a response to enquiries and registration requests.
All information presented during the session will be shared as part of the tender pack for those unable to attend.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/069975-2026 |
| Notice type | UK4 - Tender Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Competitive flexible procedure |
| Tender suitability | SME |
| Awardee scale | Not specified |
| All stages | Planning, Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 23 Jul 2026 |
| Submission deadline | 17 Aug 2026 |
| Future notice date | 5 Jun 2026 |
| Award date | Not specified |
| Contract period | 1 Nov 2026 - 31 Oct 2029 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £2,500,000 |
| Lots value | £2,500,000 |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Active |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED |
| Locality | WARRINGTON |
| Post town | Warrington |
| Postcode | WA3 6AE |
| Country | England |
| ITL 1 | TLD North West (England) |
| ITL 2 | TLD6 Cheshire |
| ITL 3 | TLD61 Warrington |
| Local authority | Warrington |
| Electoral ward | Birchwood |
| Westminster constituency | Warrington North |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 48 - Software package and information systems
- 72 - IT services: consulting, software development, Internet and support
- 79 - Business services: law, marketing, consulting, recruitment, printing and security

### Codes

- 48730000 - Security software package
- 72000000 - IT services: consulting, software development, Internet and support
- 79710000 - Security services

## Release History

- 23 Jul 2026 at 18:29 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/069975-2026
- 21 May 2026 at 08:10 - Planning - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/046764-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/069975-2026
  23rd July 2026 - Tender notice on Find a Tender
- https://www.find-tender.service.gov.uk/Notice/046764-2026
  21st May 2026 - Preliminary market engagement notice on Find a Tender

## Notice URLs

- http://www.uknnl.com
- https://procontract.due-north.com/Advert?advertId=04370941-a686-f111-813c-005056b64545
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-069e64. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-069e64.json.