Official UK procurement notice
Cybersecurity Managed Services · UK public procurement notice
Authority: ISLINGTON & SHOREDITCH HOUSING ASSOCIATION LIMITED (Housing)
What is being bought
Published requirement descriptionThe Authority is procuring cyber security services to support the organisation's security posture, operational resilience, and ability to prevent, detect, respond to, and recover from cyber threats.
The required services may include, but are not limited to:
Security assessment services, including IT health checks and vulnerability assessments;
Incident response and threat management services, including cyber incident handling, threat intelligence and business continuity support;
Managed security services, such as managed detection and response (MDR), Security Operations Centre (SOC) services, and continuous monitoring;
Specialist cyber consultancy, including risk assessment, security architecture, cyber maturity analysis, security strategy, policy development and transformation activities.
These services must be delivered by suppliers admitted to the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3) and selected through the appropriate DPS filtering options. The volume, mix, and scope of services will depend on the Authority's ongoing operational and security requirements over the life of the contract.
Suppliers must ensure all services are delivered in accordance with relevant industry standards, applicable legislation, and any required cyber security certifications (including those required by the DPS filters).
- How the procedure runs: This procurement is being conducted under the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3). Only suppliers admitted to the DPS in the relevant service categories may participate in the competition.
CPV: Computer-related professional services
The lotProcurement structure
single lot · value publishedLot #1AwardedRenewalPublished value£625,000
What it takes to wini
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Evaluation split and conditions of participation as published; the tender pack may add morei
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Published award criteria (2)
- Quality: Quality will be evaluated through a series of scored assessment questions covering: Technical merit and methodology - the supplier's proposed approach to delivering the required cyber security services, including clarity, robustness, and suitability of the solution. Experience and capability - relevant organisational capability and demonstrable experience delivering similar services. Service delivery and implementation - approach to mobilisation, service management, incident handling, reporting, and continuous improvement. Risk management and security assurance - how risks will be identified, managed and mitigated, including adherence to relevant standards and certifications. Each quality criterion will be weighted and scored as set out in the Invitation to Tender.
- Price: Price will be evaluated based on the total evaluated cost of the proposed solution as specified in the pricing schedule. The lowest‑priced compliant bid will receive full marks, with other bids scored proportionately using a standard cost‑evaluation formula.
- Price carries 30 of 100 points: a 10% discount moves about 3 points. The method statement decides this lot, not the discount.
Price arithmetic assumes straight proportional scoring; the tender pack may use another formula.
Procedure terms & legal framework
From the official record- Procedure method
- Competitive flexible procedure
- Legal basis
- UKPGA · 2023/54 Procurement Act 2023
- Procurement category
- Services
- Notice status
- Awarded
- Procurement threshold
- Above threshold (FTS publication)
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Competitive procedure
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 9 Feb 2026, 15:03 GMT
- Last source update
- 21 May 2026, 16:37 BST
- Award evaluation window
- Submission end – 18 Mar 2026
- Authority reference
Cybersec2026- FTS notice number
2026/S 000-011458- Latest notice
- Contract details notice (UK7)
- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-064b5eFind a Tender
- How it runs
This procurement is being conducted under the Crown Commercial Service Dynamic Purchasing System Cyber Security Services 3 (RM3764.3). Only suppliers admitted to the DPS in the relevant service categories may participate in the competition.
How it was run
Official notice- Submission deadline
- 9 Mar 2026, 16:00 GMT
- Clarification deadline
- 25 Feb 2026, 23:59 GMT
- Submission channel
- Official e-sourcing portal
- Electronic submission
- Allowed
- Accepted languages
- en
All tender submissions will be made as per the instructions sent to suppliers shortlisted through the Crown Commercial Service DPS Marketplace (supplierregistration.cabinetoffice.gov.uk ↗) as part of the Cyber Security Services 3 DPS (RM3764.3) competition process.
Timeline
9 Feb 2026 → 21 May 2026 · 8 dates- Tender notice published254 days ago9 Feb 2026, 15:03 GMT
- Clarification questions by237 days ago25 Feb 2026, 23:59 GMT
- Submission deadline226 days ago9 Mar 2026, 16:00 GMT
- Award decision expected by216 days ago18 Mar 2026, 23:59 GMT
- Assessment summaries sent215 days ago20 Mar 2026
- Standstill ends203 days ago31 Mar 2026, 23:59 BST
- Contract starts173 days ago1 May 2026, 00:00 BST
- Latest notice published153 days ago21 May 2026, 16:37 BST
Notice history
7 events · 4 releases on Find a Tender · since 9 Feb 2026- Tender notice published9 Feb 2026, 15:03 GMTUK4
- Tender notice published11 Feb 2026, 16:13 GMTUK4
- Deadline moved to 9 Mar 2026, 16:00 GMT11 Feb 2026, 16:13 GMT+3 days · was 6 Mar 2026, 16:00 GMT
- Contract award notice published20 Mar 2026, 17:16 GMTUK6
- Status changed to complete20 Mar 2026, 17:16 GMT
- Contract signature expected1 Apr 2026, 23:59 BSTscheduled
- Contract details notice published21 May 2026, 16:37 BSTUK7
Published amendments (1)
The tender submission date, questions deadline and contract award date have been changed as the competition carried out via the CCS framework was completed on 11th February, not 9th February as originally planned. This allows 25 days for supplier submissions.
Routine re-releases (4)
- 2026-02: 1 release · 9 Feb 2026
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| GRANT THORNTON UK ADVISORY & TAX LLP1 May 2026 – 30 Apr 2029 · up to 30 Apr 2031Extensions: The contract will be awarded for an initial term of three (3) years, with the option to extend by up to two (2) additional periods of twelve (12) months each, up to a maximum total contract duration of five (5) years. Extensions may be used where: The Supplier's performance remains satisfactory, as demonstrated through contract management reviews, KPIs, and service delivery standards; Continuing with the incumbent Supplier represents value for money, taking into account cost, quality, market conditions, and the Authority's ongoing operational requirements; There is a continued business need for the services and extending the contract supports continuity and avoids unnecessary disruption to service delivery; Any changes in scope remain within the limits permitted by the Procurement Act 2023 and do not materially alter the nature of the original procurement. Where both optional extensions are exercised, they may be applied individually or consecutively, depending on the needs of the Authority at the relevant time. · Options: Call off Consultancy for Security activities The Authority requires an allowance within the service of up to 100 hours per year to be used for security related activities, including but not limited to: • Advisory services in relation to cybersecurity compliance • Advice and implementation services in regard to enhanced or additional cybersecurity tools • Security certification support • Networking implementation • Review and hardening of components | £625,000 | 19 Mar 2026 | Awarded |
Contracts
Contract 1 · GRANT THORNTON UK ADVISORY & TAX LLP
- Signed
- 7 May 2026
- Value
- £573,995
- Period
- 7 May 2026 – 6 May 2029 · up to 6 May 2031 with extensions
- Status
- active
- Extensions
- The contract will be awarded for an initial term of three (3) years, with the option to extend by up to two (2) additional periods of twelve (12) months each, up to a maximum total contract duration of five (5) years. Extensions may be used where: The Supplier's performance remains satisfactory, as demonstrated through contract management reviews, KPIs, and service delivery standards; Continuing with the incumbent Supplier represents value for money, taking into account cost, quality, market conditions, and the Authority's ongoing operational requirements; There is a continued business need for the services and extending the contract supports continuity and avoids unnecessary disruption to service delivery; Any changes in scope remain within the limits permitted by the Procurement Act 2023 and do not materially alter the nature of the original procurement. Where both optional extensions are exercised, they may be applied individually or consecutively, depending on the needs of the Authority at the relevant time. Total contract value is on the basis of an assumed increase of 2% per annum based on the previous year's price.
- Options
- The right to additional purchases while the contract is valid. Call off Consultancy for Security activities The Authority requires an allowance within the service of up to 100 hours per year to be used for security related activities, including but not limited to: • Advisory services in relation to cybersecurity compliance • Advice and implementation services in regard to enhanced or additional cybersecurity tools • Security certification support • Networking implementation • Review and hardening of components
4 agreed KPIs: Security Incident Priority 1 · Security Incident Priority 2 · Security Incident Priority 3 …
- Security Incident Priority 1, This measures the supplier's response and resolution to Priority 1 (Critical) issues.
- Security Incident Priority 2, This measures the supplier's response and resolution to Priority 2 (High) issues.
- Security Incident Priority 3, This measures the supplier's response and resolution to Priority 3 (Medium) issues.
- Security Incident Priority 4, This measures the supplier's response and resolution to Priority 4 (Low) issues.
Bid statistics published by the authority
| Bids | SME | VCSE | Valid bid range |
|---|---|---|---|
| 2final-stage tenders | 0 | 0 | — |
Contracting authority & participating public bodies
Bidders & participating suppliers
1 commercial party on the notice- GRANT THORNTON UK ADVISORY & TAX LLPAwarded supplier
Official documents & specifications (4)
Official links; attachments are not copiedNotices published for this procedure
- Contract details notice Contract details notice on Find a Tender
- Contract award notice Contract award notice on Find a Tender
- Tender notice Tender notice on Find a Tender
- Tender notice Tender notice on Find a Tender