--- title: "Security Operation Centre" ocid: "ocds-h6vhtk-0774e7" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0774e7" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0774e7.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0774e7.json" source: "Find A Tender Service" current_stage: "Planning" buyer: "Bournemouth University" published: "2026-09-17" --- # Security Operation Centre Buyer: Bournemouth University Current stage: Planning OCID: ocds-h6vhtk-0774e7 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0774e7) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0774e7.json) ## Summary Bournemouth University is exploring a future co-managed Security Operations Centre (SOC) service to strengthen and future-proof its cyber security operations. The anticipated service would complement the University’s internal team by providing monitoring, threat detection, triage, incident response, false-positive reduction, specialist expertise, operational resilience and surge capacity during major incidents or heightened risk. It may include continuous or out-of-hours SOC coverage, maintenance of detection rules and playbooks, automation, threat intelligence, sector insight and AI-enabled capabilities. The service would also establish governance, reporting and service management arrangements with clear responsibilities between the University and supplier. The work is a cyber security and managed security service, delivered for Bournemouth University in the United Kingdom. This process is at the preliminary market engagement and planning stage, not a request for quotation or invitation to tender. Bournemouth University planned to receive written supplier responses by 28 September 2026 to inform its requirements, service model, procurement strategy and budget planning, including indicative pricing. The University’s current intention was to advertise any future procurement separately, with a future notice date estimated for 1 July 2027. The planned contract period is 1 December 2027 to 30 November 2032, subject to the future procurement. One lot is planned, covering system and support services (CPV 72250000). The future procurement is expected to be above the applicable threshold; its procedure and award method remain to be determined. The engagement is likely to suit experienced Managed Security Service Providers able to operate a co-managed SOC alongside an established in-house university security team. Relevant capability includes 24/7 or out-of-hours monitoring, detection engineering, threat triage, incident response, false-positive reduction, playbook and automation development, threat intelligence and operational support during major incidents. Suppliers should be able to work with the University’s existing Microsoft security environment, including Microsoft Sentinel, Microsoft Defender XDR, Entra ID Protection and Security Copilot, while limiting additional tooling where appropriate. Useful market input will cover operating models, implementation, governance, service levels, automation, artificial intelligence, commercial arrangements, risks, benefits, resourcing and the factors affecting service cost. ## Notice Bournemouth University ("BU" or the "University") is exploring options for the provision of a co-managed Security Operations Centre (SOC) service to enhance and future-proof its cyber security operations capability. The University is seeking market feedback from experienced Managed Security Service Providers to better understand available service models, implementation approaches, commercial arrangements and indicative costs. BU has invested significantly in its internal cyber security capability and Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Entra ID Protection, Security Copilot and related services. The University is now considering how external specialist support could complement its in-house team through a co-managed SOC operating model. The key objectives of a future service are expected to include: - Enhancing monitoring, detection and response capabilities through either 24/7 or out-of-hours SOC coverage. - Improving threat detection, triage, false-positive reduction and incident response effectiveness. - Providing additional specialist expertise, operational resilience and surge capacity during major incidents or periods of heightened risk. - Maintaining and continuously improving detection rules, playbooks, automation and security monitoring capabilities. - Leveraging threat intelligence, sector insight, automation and AI-enabled capabilities to strengthen cyber resilience and operational effectiveness. - Establishing a robust governance, reporting and service management framework with clear responsibilities between BU and the supplier. - Maximising the value of the University's existing Microsoft security investments while minimising the need for additional tooling wherever appropriate. The University wishes to understand how the market can support these objectives, together with the costs, benefits, risks and implementation considerations associated with different service models. Supplier feedback received through this Preliminary Market Engagement exercise will help inform the University's future requirements, budget planning and procurement strategy. ### Planning Information The purpose of this Preliminary Market Engagement (PME) exercise is to engage with the market and gather supplier insight to help Bournemouth University develop its future Security Operations Centre requirements, understand available service models and technologies, and inform its procurement strategy and budget planning. Objectives - Gain a better understanding of the current market for co-managed Security Operations Centre services and Managed Security Service Providers. - Understand the range of operating models available, including 24/7 and out-of-hours service provision. - Gather feedback on implementation approaches, governance models, service levels, automation and AI capabilities, and commercial arrangements. - Obtain indicative pricing information and identify the key factors that influence service cost. - Better understand the resources, technologies and organisational commitments required to successfully implement and operate a future service. - Use supplier feedback to refine requirements, inform budget planning and determine the most appropriate route to market and procurement approach. Bournemouth University invites interested organisations to review the PME documentation and submit a written response. Suppliers are encouraged to provide detailed feedback, market insight and indicative pricing information to assist the University in understanding available options and the likely costs associated with a future Security Operations Centre service. Responses should be submitted in accordance with the instructions contained within the PME documentation and emailed to procurement@bournemouth.ac.uk by the published deadline. Please note that this PME is an information-gathering exercise only. It is not a request for quotation, invitation to tender or other competitive procurement process. The information obtained through this exercise will be used solely to help inform the University's future requirements, budget considerations and procurement strategy. There is no obligation for suppliers to respond to this PME. Supplier responses (or lack of responses) will not be used to determine participation in, or evaluation of, any future procurement exercise. Participation in this PME will not provide any supplier with an advantage or guarantee inclusion in any subsequent tender process. The University's current intention is that any future procurement opportunity arising from this requirement will be advertised separately at a later date. ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/088444-2026 | | Notice type | UK2 - Preliminary Market Engagement Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Not Specified | | Procurement method details | Not specified | | Tender suitability | Not specified | | Awardee scale | Not specified | | All stages | Planning | ## Dates | Field | Value | | --- | --- | | Publication date | 17 Sep 2026 | | Submission deadline | Not specified | | Future notice date | 2 Jul 2027 | | Award date | Not specified | | Contract period | 1 Dec 2027 - 30 Nov 2032 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | Not specified | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Planning | | Lots status | Planning | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | Bournemouth University | | Locality | POOLE | | Postcode area | Bournemouth | | Postcode | BH12 5BB | | Country | England | | ITL 1 | TLK South West (England) | | ITL 2 | TLK6 North Somerset, Somerset and Dorset | | ITL 3 | TLK63 Bournemouth, Christchurch and Poole | | Local authority | Bournemouth, Christchurch and Poole | | Electoral ward | Talbot & Branksome Woods | | Westminster constituency | Bournemouth West | | Delivery location | TLK24 Bournemouth, Christchurch and Poole | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72250000 - System and support services ## Release History - 17 Sep 2026 at 22:41 - Planning - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/088444-2026 ## Documents - https://www.find-tender.service.gov.uk/Notice/088444-2026 17th September 2026 - Preliminary market engagement notice on Find a Tender ## Notice URLs - https://www.bournemouth.ac.uk/ - https://www.legislation.gov.uk/ukpga/2023/54/contents ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0774e7. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0774e7.json.