SIEM/SOAR Solution for Jisc Security Operations Centre

• How the procedure runs: In accordance with the competitive flexible procedure the tender process will include defined stages. This exercise will comprise of four stages: Stage 1. Initial technical and procurement specific questions Stage 2. Detailed technical response and price Stage 3. Proof of concept (PoC) Stage 4. Best and final offer (BAFO) - all rights reserved Progression to subsequent stages is not guaranteed and will be determined by the criteria per stage. In line with the Procurement Act (Part 3, Chapter 2, Section 20), we are not obligated to proceed to further stages if only one supplier remains successful. Stage 1 - Participation stage: selection, technical elements and commercial aspects All bidders are invited to respond to Part 2 and Part 3 of the tender suite. This stage comprises of four (4) steps. The first step within Stage 1 will be a completeness check. A complete bid is one which has been received by the deadline for submission of tenders, is complete and complies with the requirements of the ITT. Clarification and further information may be sought from bidders in order to determine if a bid is complete; Bidders must respond promptly and within any timeframe specified by the Contracting Authority and failure to provide sufficient clarification or information within the required timeframe may result in the bid being deemed incomplete and disqualified from further consideration. Additionally, any bid received after the submission deadline will be rejected. At the second step, the Contracting Authority will exclude any bidder that is an Excluded Supplier and reserves the right to exclude any bidder that is an Excludable Supplier. At the third step, the Contracting Authority will check that each bid satisfies the conditions of participation (Part 2 of the tender suite) which are all pass/fail criteria set out in the ITT. At the forth step, the Contracting Authority will evaluate bidders responses to the technical questions (Part 3 of the tender suite) which comprise of a mix of mandatory pass/fail questions and scored questions. Subject to there being a sufficient number of competent bidders, the Contracting Authority will shortlist up to five bidders to progress to Stage 2 of the procurement process. Where fewer than five bidders meet the required standard, only those bidders deemed capable will be shortlisted. Stage 2 - Detailed technical response and price (written responses) Shortlisted bidders are invited to respond to Part 4 and Part 5 of the tender suite. At this stage bidders will be required to sign an NDA before being issued with Part 4 and Part 5 of the tender suite. Stage 2 of the procurement process will consist of the evaluation of the technical requirements and initial price. The Contracting Authority intends to shortlist 3 bidders to go through the Stage 3, the Proof of Concept stage. Stage 3 - Proof of Concept Shortlisted suppliers will be invited to participate in a Proof of Concept (PoC) stage. The Proof of Concept is intended to provide objective evidence that validates the bidder's responses to the Stage 2 tender submission. PoC objectives: • Confirm the platform's ability to ingest and normalise representative telemetry from Jisc's SOC data sources • Validate detection as code workflows, including rule authoring, version control, and deployment • Demonstrate risk-based alerting and correlation across multiple data sources • Demonstrate threat intelligence enrichment using Jisc's existing or proposed tooling • Validate multi-tenant segregation of data and access controls suitable for a managed service model • Assess usability of the analyst workflow for triage, investigation, and case handling • Assess supplier responsiveness and support quality during PoC period This stage will be evaluated against the evaluation criteria published in Part 4 of the tender suite. Stage 4 - Best and Final Offer The Contracting Authority reserves the right to conduct one or more rounds of Best and Final Offers with bidders remaining in the procurement process. In the event that the Authority does not deem it valuable to conduct Stage 4, it reserves the right to award the contract on the basis of the initial tenders (outcomes from Stage 2 and Stage 3) without entering into Stage 4.

CPV: Information technology services · Security software package · Software support services

Procedure method

Competitive flexible procedure

Legal basis

UKPGA · 2023/54 Procurement Act 2023

Procurement category

Services

Notice status

Closed

Procurement threshold

Above threshold (FTS publication)

Regulatory regime

Standard

Commercial structure

Stand-alone contract (no framework)

Competition type

Competitive procedure

GPA / WTO covered

Unspecified in notice

Recurring procurement

Unspecified in notice

First published

12 Mar 2026, 14:01 GMT

Last source update

2 Sept 2026, 13:24 BST

Award evaluation window

Submission end – 27 Aug 2027

Authority reference

Proc3165

FTS notice number

2026/S 000-083054

Latest notice

Tender notice (UK4)

Classification (CPV)

Information technology servicesSecurity software packageSoftware support services

Delivery area

UK

Official registry OCID

ocds-h6vhtk-066870 Find a Tender

How it runs

In accordance with the competitive flexible procedure the tender process will include defined stages. This exercise will comprise of four stages:

Stage 1. Initial technical and procurement specific questions

Stage 2. Detailed technical response and price

Stage 3. Proof of concept (PoC)

Stage 4. Best and final offer (BAFO) - all rights reserved

Progression to subsequent stages is not guaranteed and will be determined by the criteria per stage.

In line with the Procurement Act (Part 3, Chapter 2, Section 20), we are not obligated to proceed to further stages if only one supplier remains successful.

Stage 1 - Participation stage: selection, technical elements and commercial aspects

All bidders are invited to respond to Part 2 and Part 3 of the tender suite.

This stage comprises of four (4) steps.

The first step within Stage 1 will be a completeness check. A complete bid is one which has been received by the deadline for submission of tenders, is complete and complies with the requirements of the ITT. Clarification and further information may be sought from bidders in order to determine if a bid is complete; Bidders must respond promptly and within any timeframe specified by the Contracting Authority and failure to provide sufficient clarification or information within the required timeframe may result in the bid being deemed incomplete and disqualified from further consideration. Additionally, any bid received after the submission deadline will be rejected.

At the second step, the Contracting Authority will exclude any bidder that is an Excluded Supplier and reserves the right to exclude any bidder that is an Excludable Supplier.

At the third step, the Contracting Authority will check that each bid satisfies the conditions of participation (Part 2 of the tender suite) which are all pass/fail criteria set out in the ITT.

At the forth step, the Contracting Authority will evaluate bidders responses to the technical questions (Part 3 of the tender suite) which comprise of a mix of mandatory pass/fail questions and scored questions.

Subject to there being a sufficient number of competent bidders, the Contracting Authority will shortlist up to five bidders to progress to Stage 2 of the procurement process. Where fewer than five bidders meet the required standard, only those bidders deemed capable will be shortlisted.

Stage 2 - Detailed technical response and price (written responses)

Shortlisted bidders are invited to respond to Part 4 and Part 5 of the tender suite.

At this stage bidders will be required to sign an NDA before being issued with Part 4 and Part 5 of the tender suite.

Stage 2 of the procurement process will consist of the evaluation of the technical requirements and initial price.

The Contracting Authority intends to shortlist 3 bidders to go through the Stage 3, the Proof of Concept stage.

Stage 3 - Proof of Concept

Shortlisted suppliers will be invited to participate in a Proof of Concept (PoC) stage.

The Proof of Concept is intended to provide objective evidence that validates the bidder's responses to the Stage 2 tender submission.

PoC objectives:

• Confirm the platform's ability to ingest and normalise representative telemetry from Jisc's SOC data sources
• Validate detection as code workflows, including rule authoring, version control, and deployment
• Demonstrate risk-based alerting and correlation across multiple data sources
• Demonstrate threat intelligence enrichment using Jisc's existing or proposed tooling
• Validate multi-tenant segregation of data and access controls suitable for a managed service model
• Assess usability of the analyst workflow for triage, investigation, and case handling
• Assess supplier responsiveness and support quality during PoC period

This stage will be evaluated against the evaluation criteria published in Part 4 of the tender suite.

Stage 4 - Best and Final Offer

The Contracting Authority reserves the right to conduct one or more rounds of Best and Final Offers with bidders remaining in the procurement process. In the event that the Authority does not deem it valuable to conduct Stage 4, it reserves the right to award the contract on the basis of the initial tenders (outcomes from Stage 2 and Stage 3) without entering into Stage 4.

Requests to participate (first stage)

29 Sept 2026, 12:00 BST

Submission deadline

29 Sept 2026, 12:00 BST

Clarification deadline

21 Sept 2026, 23:30 BST

Submission channel

Official e-sourcing portal

Electronic submission

Allowed

Accepted languages

en