Procurement of a Security Operations Centre (SOC) Solutions

Concepts

• data security
• sheffield
• cyber security insurance providers
• continuous cyber security monitoring
• cyber security insurance
• security events
• resilient soc services
• security operations centre
• soc
• the universitys overall cyber security posture

Location

Sheffield

Description

The University requires the provision of a managed Security Operations Centre (SOC) service to provide continuous cyber security monitoring, threat detection, and incident response across its IT infrastructure.

Total Quantity or Scope

Description of the Procurement … Nature of Services 24 hours a day, 365 days a year monitoring of University systems and networks. Analysis of security events and escalation of incidents to the University's Digital Technology Services (DTS) team where further investigation is required. Authority for the SOC provider to take immediate protective action, including the disconnection of systems, in the event of confirmed malicious activity. Delivery of assurance, intelligence and reporting to support the University's overall cyber security posture and to maintain eligibility for cyber security insurance. Quantity / Scope A single contract covering the full scope of University IT systems. Continuous (24/365) managed service provision. Contract term: up to 4 years, commencing October 2025. Requirements The service must meet the requirements of cyber security insurance providers and underpin the University's ability to participate in research and consultancy contracts. The supplier must demonstrate proven capability to deliver resilient SOC services within a Higher Education or comparable complex technical environment.

Award Detail

Award Criteria

CPV Codes

• 72212732 - Data security software development services

Indicators

• Award on basis of price.

Legal Justification

The contract is awarded without prior publication in the Find a Tender service as it is made under the G-Cloud 14 Framework Agreement (RM1557.14). In line with Regulation 33 of the Public Contracts Regulations 2015, contracts may be awarded under a framework agreement without further publication, provided the framework has been lawfully established. G-Cloud 14 was procured compliantly and includes the required SOC services, making this direct award a lawful and compliant route to market.