---
title: "Cybersecurity Managed Services"
ocid: "ocds-h6vhtk-0787cf"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0787cf"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0787cf.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0787cf.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "ISLINGTON & SHOREDITCH HOUSING ASSOCIATION LIMITED"
published: "2026-10-14"
---

# Cybersecurity Managed Services

Buyer: ISLINGTON & SHOREDITCH HOUSING ASSOCIATION LIMITED  
Current stage: Award  
OCID: ocds-h6vhtk-0787cf

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0787cf)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0787cf.json)

## Summary

Islington & Shoreditch Housing Association (ISHA) procured managed cybersecurity services to strengthen its security and operational resilience, and to prevent, detect, respond to and recover from cyber threats. The scope covers security assessments such as IT health checks and vulnerability assessments; incident handling, threat intelligence and business continuity support; managed detection and response, security operations centre services and continuous monitoring; and specialist consultancy on risk, security architecture, cyber maturity, strategy, policies and transformation. The service mix depends on the association’s operational and security requirements. Work is for the association in London. Services are to follow relevant industry standards and legislation, with cyber security certifications required where set by the purchasing framework’s filters.

The procurement is complete and the contract is active. ISHA selected Grant Thornton UK Advisory & Tax LLP through a mini-competition under the Crown Commercial Service Cyber Security Services 3 dynamic purchasing system, using a limited procedure. The award was made on 7 May 2026; the contract was signed on that date. Its value is £573,995.23. The stated initial term is three years, with two optional 12-month extensions, giving a maximum possible duration of five years. Extensions depend on satisfactory performance, value for money, continuing need and any scope changes remaining within the permitted limits. The single lot was evaluated on quality at 70% and price at 30%. Two bids were recorded.

This award shows that ISHA buys a broad, managed cybersecurity capability through a mini-competition on the Cyber Security Services 3 purchasing system, rather than as an open standalone tender. Suppliers seeking comparable work with this buyer would need to be admitted to that system and meet the relevant category filters and certification requirements. Credible providers would be able to combine assessment and vulnerability testing with incident response, threat intelligence, business continuity, continuous monitoring and managed security operations, alongside senior cyber consultancy on risk, architecture, maturity and strategy. The scope calls for capacity across both operational response and advisory work, with services that can flex to changing security needs. Strong evidence of quality and dependable delivery would matter particularly in an evaluation where quality carried more weight than price.

## Notice

The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats. The required services may include, but are not limited to: Security assessment services, including IT health checks and vulnerability assessments; Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support; Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring; Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities. These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract. Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).

### Lot Information

Lot 1

The Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats. The required services may include, but are not limited to: Security assessment services, including IT health checks and vulnerability assessments; Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support; Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring; Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities. These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract. Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).

Options: The contract will be awarded for an initial term of three (3) years, with the option to extend by up to two (2) additional periods of twelve (12) months each, up to a maximum total contract duration of five (5) years. Extensions may be used where: The Supplier's performance remains satisfactory, as demonstrated through contract management reviews, KPIs, and service delivery standards; Continuing with the incumbent Supplier represents value for money, taking into account cost, quality, market conditions, and the Authority's ongoing operational requirements; There is a continued business need for the services and extending the contract supports continuity and avoids unnecessary disruption to service delivery; Any changes in scope remain within the limits permitted by the PCR2015 and do not materially alter the nature of the original procurement. Where both optional extensions are exercised, they may be applied individually or consecutively, depending on the needs of the Authority at the relevant time.

### Procurement Information

The procurement was a mini-competition from a PCR2015 compliant DPS, namely Government Commercial Services' RM3764.3 Cyber Security Services 3.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/097134-2026 |
| Notice type | Award Notice |
| Procurement type | Dynamic |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Award procedure without prior publication of a call for competition |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 14 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £573,995 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | ISLINGTON & SHOREDITCH HOUSING ASSOCIATION LIMITED |
| Locality | LONDON |
| Postcode area | North London |
| Postcode | N4 2DR |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI43 Haringey and Islington |
| Local authority | Islington |
| Electoral ward | Finsbury Park |
| Westminster constituency | Islington North |
| Delivery location | TLI London |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Grant Thornton UK LLP |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72590000 - Computer-related professional services

## Release History

- 14 Oct 2026 at 15:27 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/097134-2026

## Notice URLs

- http://www.isha.co.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0787cf. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0787cf.json.