Official UK procurement notice
IT Security Services · UK public procurement notice
Authority: Development Bank of Wales (Central government)
What is being bought
Published requirement descriptionThe Development Bank of Wales undertook a competitive flexible procedure, this notice is to notify that we have entered into a contract with the successful supplier.
The Scope:
The Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the
Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. This transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security
posture caused by the fragmentation of tools and services.
Currently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate.
The Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on going management of the platform, and providing proactive advice and recommendations to
improve the security of our Microsoft estate, drawing on Microsoft’s insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.
- The authority expects to re-tender this requirement around 13 Mar 2033, 23:59 GMT.
- How the procedure runs: Stage 1 will consist of completion of Procurement Supplier Questionnaire - Pass/Fail Technical questionnaire with a variety of Pass/Fail questions and weighted questions 3PQ - Pass/Fail Stage 2 only the top 3 suppliers will be selected to go into stage 2 the evaluation will consist of Technical evaluation at 70% Commercial at 30% Further information can be found within the tender documentation
- No preliminary market engagement: A speculative notice was issued under the PCR2015
CPV: IT services: consulting, software development, Internet and support
The lotProcurement structure
single lot · value publishedLot #1AwardedRenewalPublished value£1,500,000
- Economic & financial standing
Professional Indemnity (PI) - £1,000,000
Cyber Essential insurance £1,000,000
Employers Liability (EL) - £10,000,000
Public Liability (PL) - £5,000,000
- Technical & professional ability
Please refer to the tender documentation
What it takes to wini
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Evaluation split and conditions of participation as published; the tender pack may add morei
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Published sub-criteria (3)
- Stage 1: 1%
- Stage 2: 69%
- Commercial: 30%
Published award criteria (3)
- Stage 1: PSQ - Pass/Fail Technical evaluation - Pass/Fail and weighted questions 3PQ Please note that this stage has a technical weighting of 100%
- Stage 2: Technical evaluation Questions have a total weighting of 70%
- Commercial: Annual costs including the implementation for the first year Rate cards
- Economic & financial standing
Professional Indemnity (PI) - £1,000,000
Cyber Essential insurance £1,000,000
Employers Liability (EL) - £10,000,000
Public Liability (PL) - £5,000,000
- Technical & professional ability
Please refer to the tender documentation
- Price carries 30 of 100 points: a 10% discount moves about 3 points. The method statement decides this lot, not the discount.
Price arithmetic assumes straight proportional scoring; the tender pack may use another formula.
Procedure terms & legal framework
From the official record- Procedure method
- Competitive flexible procedure
- Legal basis
- UKPGA · 2023/54 Procurement Act 2023
- Procurement category
- Services
- Notice status
- Awarded
- Procurement threshold
- Above threshold (FTS publication)
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Competitive procedure
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Yes · next expected 13 Mar 2033
- First published
- 20 Mar 2025, 15:51 GMT
- Last source update
- 31 Jul 2025, 12:48 BST
- Award evaluation window
- Submission end – 30 Jun 2025
- Authority reference
DBW00105- FTS notice number
2025/S 000-010484- Latest notice
- Contract details notice (UK7)
- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-04efe9Find a Tender- Contract terms summary
30 days
- How it runs
Stage 1 will consist of completion of
Procurement Supplier Questionnaire - Pass/Fail
Technical questionnaire with a variety of Pass/Fail questions and weighted questions
3PQ - Pass/Fail
Stage 2 only the top 3 suppliers will be selected to go into stage 2 the evaluation will consist of
Technical evaluation at 70%
Commercial at 30%
Further information can be found within the tender documentation
- Risks
NA
How it was run
Official notice- Submission deadline
- 9 Jun 2025, 12:00 BST
- Clarification deadline
- 17 Apr 2025, 12:00 BST
- Submission channel
- Official e-sourcing portal
- Electronic submission
- Allowed
- Accepted languages
- en
Timeline
20 Mar 2025 → 31 Jul 2025 · 8 dates- Tender notice published20 Mar 2025, 15:51 GMT
- Clarification questions by17 Apr 2025, 12:00 BST
- Submission deadline9 Jun 2025, 12:00 BST
- Award decision expected by30 Jun 2025, 23:59 BST
- Contract starts1 Jul 2025, 00:00 BST
- Assessment summaries sent8 Jul 2025, 00:00 BST
- Standstill ends18 Jul 2025, 23:59 BST
- Latest notice published31 Jul 2025, 12:48 BST
Notice history
5 events · 3 releases on Find a Tender · since 20 Mar 2025- Tender notice published20 Mar 2025, 15:51 GMTUK4
- Contract award notice published8 Jul 2025, 14:02 BSTUK6
- Status changed to complete8 Jul 2025, 14:02 BST
- Contract signature expected21 Jul 2025, 23:59 BSTscheduled
- Contract details notice published31 Jul 2025, 12:48 BSTUK7
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| Wavenet22 Jul 2025 – 17 Jul 2030 · up to 17 Jul 2033Extensions: 12 month increments · Options: Additional services and project work may be required | £1,500,000 | 7 Jul 2025 | Awarded |
Contracts
IT Security Services · Wavenet
- Signed
- 30 Jul 2025
- Value
- £1,500,000
- Period
- 31 Jul 2025 – 30 Jul 2030 · up to 30 Jul 2033 with extensions
- Status
- active
- Extensions
- 3 years in 12 month increments
- Options
- Additional services and consultancy may be required
1 agreed KPI: Resolving threats
- Resolving threats
Bid statistics published by the authority
| Bids | SME | VCSE | Valid bid range |
|---|---|---|---|
| 9final-stage tenders · 10 at stage one | 0 | 0 | — |
Contracting authority & participating public bodies
Bidders & participating suppliers
1 commercial party on the notice- Wavenet LimitedAwarded supplier
Official documents & specifications (4)
Official links; attachments are not copiedTender pack and attachments
- Bidding documents and specificationsAccess: https://etenderwales.bravosolution.co.uk/web/login.shtml
Notices published for this procedure
- Contract details notice Contract details notice on Find a Tender
- Contract award notice Contract award notice on Find a Tender
- Tender notice Tender notice on Find a Tender