---
title: "Hybrid Security Operations Centre (SOC)"
ocid: "ocds-h6vhtk-07837f"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-07837f"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-07837f.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-07837f.json"
source: "Find A Tender Service"
current_stage: "Tender"
buyer: "BFI"
published: "2026-10-08"
---

# Hybrid Security Operations Centre (SOC)

Buyer: BFI  
Current stage: Tender  
OCID: ocds-h6vhtk-07837f

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-07837f)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-07837f.json)

## Summary

The British Film Institute is procuring a hybrid Security Operations Centre service to protect its critical systems. The requirement combines a continuously staffed, 24-hour, 365-day security operations capability with the design of a new hybrid operating model. The supplier is expected to establish a service that monitors agreed critical systems, detects priority cyber threats, investigates security events, responds to serious incidents, conducts proactive threat hunting, protects security logs, escalates incidents appropriately, reports to management and identifies and fixes significant monitoring gaps. This is a cybersecurity and managed IT service, with related security software elements. The work is for the BFI in the United Kingdom and is intended to provide the Institute with an operational security monitoring and response capability.

The BFI invited offers through a below-threshold open competition. This is the tender stage. Questions were due by 26 October 2026 at 12:00, and offers by 2 November 2026 at 12:00. The stated contract period runs from 31 March 2027 to 30 March 2028, with two possible one-year extensions and an overall maximum end date of 30 March 2030. The estimated value is £150,000 excluding VAT and £180,000 including VAT. There is one lot. Evaluation begins with pass/fail technical questions; bids passing that stage are assessed 80% on quality and 20% on price. Electronic submission is permitted.

This opportunity suits cybersecurity and managed security service providers able to design and operate a hybrid SOC for a public-sector client. The supplier must deliver continuous monitoring throughout the year and build demonstrable operational capability to monitor agreed critical systems, identify priority threats, investigate events and respond to priority-one and priority-two incidents. Proactive threat hunting, secure log management, clear incident escalation, management-level reporting, and the ability to find and remedy material monitoring gaps are also central to the requirement. Suppliers should be able to establish the operating model as well as provide the ongoing service. The description does not state particular certifications, named technologies or minimum supplier credentials; technical responses must pass the initial pass/fail assessment.

## Notice

The British Film Institute (BFI) is looking for a supplier to provide a Hybrid Security Operations Centre (SOC) on a 1+1+1 year basis. It will consist a 24/7 for 365 days SOC with a Hybrid SOC Service Design for a new Hybrid SOC Operating Model by end of BFI's financial year end Q4-2027, 31 March 2027. At the end of the first contracted year, the Supplier shall have established a demonstrable operational capability that enables BFI to: - Continuously monitor agreed critical systems; - Detect priority cyber threats; - Investigate security events; - Respond to P1/P2 incidents; - Undertake proactive threat hunting; - Maintain protected security logs; - Demonstrate appropriate incident escalation; - Provide management-level security reporting; and - Identify and remediate material monitoring gaps. To take part in this tender, please visit our website, at https://in-tendhost.co.uk/bfi/aspx/Tenders/Current , where you will need to register, if you haven't already, and express an interest in this opportunity to access the relevant documents. Please note expressions of interest will only be accepted via the portal.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/095088-2026 |
| Notice type | UK4 - Tender Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Below threshold - open competition |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 8 Oct 2026 |
| Submission deadline | 2 Nov 2026 |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 31 Mar 2027 - 30 Mar 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £150,000 |
| Lots value | £150,000 |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Active |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | BFI |
| Locality | LONDON |
| Postcode area | West London |
| Postcode | W1T 1LN |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI36 Camden |
| Local authority | Camden |
| Electoral ward | Bloomsbury |
| Westminster constituency | Holborn and St Pancras |
| Delivery location | TLI London |

## CPV Codes

### Divisions

- 48 - Software package and information systems
- 72 - IT services: consulting, software development, Internet and support

### Codes

- 48730000 - Security software package
- 72000000 - IT services: consulting, software development, Internet and support
- 72212730 - Security software development services

## Release History

- 8 Oct 2026 at 11:08 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/095088-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/095088-2026
  8th October 2026 - Tender notice on Find a Tender

## Notice URLs

- https://in-tendhost.co.uk/bfi/aspx/Tenders/Current
- https://supplier.in-tend.co.uk/bfi/home
- https://www.bfi.org.uk/
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-07837f. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-07837f.json.