Find a TenderClosedTender notice
Published 21 May 2026, 09:10 BST

Official UK procurement notice

Managed Security Operations Centre (SOC) and Incident Response Services Agreement

Official notice

Authority: NATIONAL NUCLEAR LABORATORY LIMITED

ServicesCompetitive flexible procedureAbove thresholdSME suitable
Published estimate£2,500,000≈ £833k / year · £3,000,000 inc. VAT · 1 value update
Submissions closed 17 Aug 2026
Contract term 3 yrsends 31 Oct 2029 · up to 31 Oct 2031 with extensions · starts 1 Nov 2026

What is being bought

Published requirement description

UKNNL is seeking to procure a Managed Security Operations Centre (SOC) and Incident Response service to enhance its cyber security capability and support the protection of its IT estate, digital assets, and sensitive information.

UKNNL requires a new partner to manage its Security Operations Centre, to monitor, detect, respond to, and remediate cyber threats across its network. The SOC incorporates people, process, and technology to provide a detect-and-respond capability that better protects the Authority's digital assets and data.

The requirement is for a comprehensive Security Operations Centre service, delivering 24/7 monitoring, incident detection, incident response, digital forensic investigation, threat intelligence, and SOC management services. The service will support the identification, analysis, containment, and escalation of cybersecurity threats and incidents affecting the environment, whilst continuously improving security operations and response maturity.

  • How the procedure runs: The procurement will be conducted using the Competitive Flexible Procedure in accordance with the Procurement Act 2023. The procedure will comprise three mandatory stages and one optional negotiation stage. Suppliers will be assessed through the following stages: Stage 1: Procurement Specification Questionnaire (Shortlisting) Deadline: 17th August 2026 Suppliers will be assessed against UKNNL's technical and service requirements. The five highest-scoring suppliers will progress to Stage 2. In the event of a tie affecting progression to Stage 2, the tie-break methodology set out within the procurement documentation will apply. Stage 2: Supplier Demonstration and Presentation Indicative dates: 24th - 25th August 2026 Suppliers progressing from Stage 1 will be invited to participate in a demonstration and presentation to assess their capability to deliver the Managed Security Operations Centre (SOC) and Incident Response Services Agreement. This stage will be assessed on a pass/fail basis. Suppliers achieving a Pass will progress to Stage 3. Stage 3: Final Tender Submission ITT issue date: 28th August 2026 Tender return date: 22nd September 2026 Suppliers progressing from Stage 2 will be invited to submit a final tender. Full details of the evaluation methodology, award criteria and weightings will be contained within the Invitation to Tender documentation. Stage 4: Negotiation (Optional) UKNNL reserves the right to undertake negotiations with the highest-ranked supplier following completion of Stage 3.

CPV: IT services: consulting, software development, Internet and support · Security services · Security software package

The lotProcurement structure

single lot · value published
Lot #1Renewal 3 yrsSMEPublished value£2,500,000
Contract period: 1 Nov 2026 – 31 Oct 2029 (3 yrs) · up to 31 Oct 2031 with extensionsValue: £2,500,000 exc. VAT · £3,000,000 inc. VAT
Delivery: UKEligibility: SME eligible
Extensions: The contract may include the option for UKNNL to procure additional cyber security services during the contract term where required. Such services may include, but are not limited to: • Enhanced Security Operations (SecOps) services; • Additional threat hunting capabilities; • Enhanced threat intelligence services; • Additional Digital Forensics and Incident Response (DFIR) support; • Additional incident response retainer hours and specialist support; • Cyber security consultancy and advisory services; • Security engineering, optimisation and security tool support; • Additional monitoring, detection and response capabilities; and • Onboarding, integration and support for new systems, networks and security technologies. The exercise of any option will be subject to UKNNL's operational requirements, available funding, the terms of the contract and all applicable procurement legislation. · The contract will be awarded for an initial period of three (3) years, with the option to extend for up to two (2) further periods of twelve (12) months each. Any extension will be exercised at UKNNL's sole discretion and in accordance with the contract terms and applicable legislation.
Pre-qualification & selection criteria (PQQ)2
  • Economic & financial standing

    Full details of the legal and financial conditions of participation are set out within the Procurement Specification Questionnaire (PSQ) and associated procurement documentation.

  • Technical & professional ability

    The technical capability requirements for this procurement are detailed within the Procurement Specification Questionnaire (PSQ). Suppliers should refer to the procurement documentation for the full participation requirements and evaluation approach.

What it takes to win
i

How this buyer will score bids.

The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).

Evaluation split and conditions of participation as published; the tender pack may add more
How bids were scored
  • Commercial Evaluation
  • Technical Evaluation
  • Social Value
Conditions of participation2
  • Economic & financial standing

    Full details of the legal and financial conditions of participation are set out within the Procurement Specification Questionnaire (PSQ) and associated procurement documentation.

  • Technical & professional ability

    The technical capability requirements for this procurement are detailed within the Procurement Specification Questionnaire (PSQ). Suppliers should refer to the procurement documentation for the full participation requirements and evaluation approach.

Procedure terms & legal framework

From the official record
Procedure method
Competitive flexible procedure
Legal basis
UKPGA · 2023/54 Procurement Act 2023
Procurement category
Services
Notice status
Closed
Procurement threshold
Above threshold (FTS publication)
Regulatory regime
Standard
Commercial structure
Stand-alone contract (no framework)
Competition type
Competitive procedure
GPA / WTO covered
Unspecified in notice
Recurring procurement
Unspecified in notice
First published
21 May 2026, 09:10 BST
Last source update
23 Jul 2026, 19:29 BST
Award evaluation window
Submission end – 20 Aug 2026
Authority reference
NNLC748
FTS notice number
2026/S 000-069975
Latest notice
Tender notice (UK4)
Classification (CPV)
IT services: consulting, software development, Internet and supportSecurity servicesSecurity software package
Delivery area
UK
Official registry OCID
ocds-h6vhtk-069e64 Find a Tender
How it runs

The procurement will be conducted using the Competitive Flexible Procedure in accordance with the Procurement Act 2023.

The procedure will comprise three mandatory stages and one optional negotiation stage. Suppliers will be assessed through the following stages:

Stage 1: Procurement Specification Questionnaire (Shortlisting)

Deadline: 17th August 2026

Suppliers will be assessed against UKNNL's technical and service requirements. The five highest-scoring suppliers will progress to Stage 2. In the event of a tie affecting progression to Stage 2, the tie-break methodology set out within the procurement documentation will apply.

Stage 2: Supplier Demonstration and Presentation

Indicative dates: 24th - 25th August 2026

Suppliers progressing from Stage 1 will be invited to participate in a demonstration and presentation to assess their capability to deliver the Managed Security Operations Centre (SOC) and Incident Response Services Agreement. This stage will be assessed on a pass/fail basis. Suppliers achieving a Pass will progress to Stage 3.

Stage 3: Final Tender Submission

ITT issue date: 28th August 2026

Tender return date: 22nd September 2026

Suppliers progressing from Stage 2 will be invited to submit a final tender. Full details of the evaluation methodology, award criteria and weightings will be contained within the Invitation to Tender documentation.

Stage 4: Negotiation (Optional)

UKNNL reserves the right to undertake negotiations with the highest-ranked supplier following completion of Stage 3.

How it was run

Official notice
Run through: ProContract (Due North) · Who buys & how to bid on ProContract
Supplier login requiredElectronic submission allowedLanguage: EN
Access & registration note: Free · short registration with manual review; public opportunity list
Submission deadline
17 Aug 2026, 10:00 BST
Clarification deadline
10 Aug 2026, 23:59 BST
Submission channel
Official e-sourcing portal
Electronic submission
Allowed
Accepted languages
en
Detailed submission instructions & authority contactsFrom official release

This procurement will be conducted electronically via the ProContract eTendering Portal. All communications, clarification questions, document exchanges and tender submissions must be submitted through the portal.

Suppliers wishing to participate must be registered on the ProContract eTendering Portal and follow the instructions contained within the procurement documentation. The Procurement Specification Questionnaire (PSQ) and subsequent procurement documents will be issued through the portal in accordance with the Competitive Flexible Procedure described within this notice.

Access to the procurement documents is available via the following link: procontract.due-north.com/Advert ↗

Suppliers are responsible for ensuring their organisation is registered on the Government Central Digital Platform (CDP) and that registration information remains accurate and up to date throughout the procurement process.

Timeline

21 May 2026 → 1 Nov 2026 · 7 dates
  1. Planning notice published159 days ago
    21 May 2026, 09:10 BST
  2. Market engagement143 days ago
    5 Jun 2026, 23:59 BST

    UKNNL will be holding a virtual market engagement event on Friday 5th June at 10:00am.

    This session will provide an overview of the proposed service scope, delivery model, and procurement approach, and will give suppliers an opportunity to better understand UKNNL's requirements and provide feedback.

    Suppliers interested in attending should confirm their attendance by emailing gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued.

    Due to the anticipated level of supplier interest, please allow 48-72 hours for a response to enquiries and registration requests.

    All information presented during the session will be shared as part of the tender pack for those unable to attend.

  3. Tender notice published96 days ago
    23 Jul 2026, 19:29 BST
  4. Clarification questions by77 days ago
    10 Aug 2026, 23:59 BST
  5. Submission deadline71 days ago
    17 Aug 2026, 10:00 BST
  6. Award decision expected by67 days ago
    20 Aug 2026, 23:59 BST
  7. Today
    27 Oct 2026
  8. Contract startsin 4 days
    1 Nov 2026

Notice history

6 events · 2 releases on Find a Tender · since 21 May 2026
  1. Preliminary market engagement notice published
    21 May 2026, 09:10 BST
    UK2
  2. Tender notice published
    23 Jul 2026, 19:29 BST
    UK4
  3. Published value published: £2,500,000
    23 Jul 2026, 19:29 BST
  4. Status changed to active
    23 Jul 2026, 19:29 BST
  5. Procurement method changed
    23 Jul 2026, 19:29 BST
  6. Deadline published: 17 Aug 2026, 10:00 BST
    23 Jul 2026, 19:29 BST

Contracting authority & participating public bodies

UNITED KINGDOM NATIONAL NUCLEAR LABORATORY LIMITED

Contracting authorityPublic authority - sub-central government GB-COH: 03857752 · GB-PPON: PVXT-8784-YGNV Chadwick House Warrington Road, Warrington, North West, WA3 6AEContact name, email

Official documents & specifications (2)

Official links; attachments are not copied

Notices published for this procedure