---
title: "SONI095 Managed Service - Security Operations Centre"
ocid: "ocds-h6vhtk-079161"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-079161"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-079161.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-079161.json"
source: "Find A Tender Service"
current_stage: "Tender"
buyer: "SONI Ltd"
published: "2026-10-27"
---

# SONI095 Managed Service - Security Operations Centre

Buyer: SONI Ltd  
Current stage: Tender  
OCID: ocds-h6vhtk-079161

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-079161)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-079161.json)

## Summary

SONI Ltd is seeking a single supplier to provide a managed Security Operations Centre service as one layer of its multi-tier security environment. The service must operate using SONI’s own security tools and security information and event management (SIEM) system. Detailed service, architecture, tooling, telemetry, integration, governance, performance and contractual requirements are to be provided during the tender stage under a non-disclosure agreement. The procurement is for IT and security services, with delivery in the United Kingdom. The arrangement is intended to appoint one supplier to deliver the service throughout the contract term.

SONI invited offers through a competitive flexible procedure, using a selective process with a preliminary questionnaire stage. After that stage, exactly three qualified candidates are to be shortlisted and invited to tender; the intended outcome is one appointed supplier. The clarification deadline was 16 November 2026 at 12:00, and the expression-of-interest deadline was 30 November 2026 at 12:00. The award decision was due by 1 March 2027. The contract period is 1 March 2027 to 28 February 2032, with an option to extend by up to three years, to 28 February 2035. Estimated value is £17.6 million excluding VAT (£21.12 million including VAT). Evaluation weights capacity at 35% and previous experience at 65%.

This opportunity is suited to managed security providers able to deliver a security operations centre service within a customer-owned technology environment, integrating with the customer’s existing tools and SIEM. Suppliers need access to enough appropriately qualified personnel and a credible delivery model for a service of this nature. Capacity is assessed through both quantitative evidence and a resourcing approach narrative. Candidates must also demonstrate sufficient recent, relevant experience through the previous-experience questionnaire. The contract calls for a single supplier able to sustain delivery over a multi-year term and manage the technical integration, governance and performance requirements. Small and medium-sized businesses are identified as suitable, though the work requires substantial staffing capability and a demonstrated track record.

## Notice

SONI intends to procure a single Supplier to deliver the SOC (Managed Service - Security Operations Centre) Services, as one tier of a multi-tiered security environment, operating fully within SONI owned tooling and SIEM for the provision of the managed SOC. Detailed service, architecture, tooling, telemetry, integration, governance, performance and contractual requirements will be provided at tender stage under NDA. Following completion of this PSQ stage, up to 3 suitably qualified Candidates will be shortlisted and invited to participate in the tender stage. The tender process will result in the selection and appointment of a single Supplier who will be responsible for delivering the Services for the duration of the contract.

### Lot Information

Lot 1

Renewal: Option to extend for up to 3 years.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/101615-2026 |
| Notice type | UK4 - Tender Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Competitive flexible procedure |
| Tender suitability | SME |
| Awardee scale | Not specified |
| All stages | Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 27 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 1 Mar 2027 - 28 Feb 2032 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £17,600,000 |
| Lots value | £17,600,000 |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Active |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | SONI Ltd |
| Locality | BELFAST |
| Postcode area | Northern Ireland |
| Postcode | BT6 9RT |
| Country | Northern Ireland |
| ITL 1 | TLN Northern Ireland |
| ITL 2 | TLN0 Northern Ireland |
| ITL 3 | TLN0E Lisburn and Castlereagh |
| Local authority | Lisburn and Castlereagh |
| Electoral ward | Moneyreagh |
| Westminster constituency | Belfast South and Mid Down |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 27 Oct 2026 at 14:32 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/101615-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/101615-2026
  27th October 2026 - Tender notice on Find a Tender
- https://www.mytenders.co.uk/Authority/NoticeBuilder/NoticeBuilder_FileDownload.aspx?id=656217
  Information Memorandum and Procurement Specific Questionnaire (PSQ)

## Notice URLs

- http://www.soni.ltd.uk
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-079161. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-079161.json.