SIEM/SOAR Solution for Jisc Security Operations Centre

{
  "id": "083054-2026",
  "tag": [
    "tender"
  ],
  "date": "2026-09-02T13:24:11+01:00",
  "ocid": "ocds-h6vhtk-066870",
  "buyer": {
    "id": "GB-COH-05747339",
    "name": "JISC"
  },
  "tender": {
    "id": "Proc3165",
    "lots": [
      {
        "id": "LOT-0000",
        "value": {
          "amount": 9250000,
          "currency": "GBP",
          "amountGross": 11100000
        },
        "status": "active",
        "renewal": {
          "description": "The duration of this contract will be for an initial period of 3 years plus 2 x additional 1 year optional extensions.  (3+1+1)."
        },
        "hasRenewal": true,
        "awardCriteria": {
          "criteria": [
            {
              "name": "Technical",
              "type": "quality",
              "numbers": [
                {
                  "number": 40,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "Pricing",
              "type": "price",
              "numbers": [
                {
                  "number": 20,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "Proof of Concept",
              "type": "quality",
              "numbers": [
                {
                  "number": 40,
                  "weight": "percentageExact"
                }
              ]
            }
          ]
        },
        "contractPeriod": {
          "endDate": "2031-05-31T23:59:59+01:00",
          "startDate": "2028-06-01T00:00:00+01:00",
          "maxExtentDate": "2033-05-31T23:59:59+01:00"
        },
        "selectionCriteria": {
          "criteria": [
            {
              "description": "Criteria is provided in the ITT,",
              "forReduction": true
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "LOT-0000",
        "relatedLot": "LOT-0000",
        "deliveryAddresses": [
          {
            "region": "UK",
            "country": "GB",
            "countryName": "United Kingdom"
          }
        ],
        "additionalClassifications": [
          {
            "id": "48730000",
            "scheme": "CPV",
            "description": "Security software package"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "72261000",
            "scheme": "CPV",
            "description": "Software support services"
          }
        ]
      }
    ],
    "title": "SIEM/SOAR Solution for Jisc Security Operations Centre",
    "value": {
      "amount": 9250000,
      "currency": "GBP",
      "amountGross": 11100000
    },
    "status": "active",
    "documents": [
      {
        "id": "conflictOfInterest",
        "description": "Not published",
        "documentType": "conflictOfInterest"
      },
      {
        "id": "083054-2026",
        "url": "https://www.find-tender.service.gov.uk/Notice/083054-2026",
        "format": "text/html",
        "noticeType": "UK4",
        "description": "Tender notice on Find a Tender",
        "documentType": "tenderNotice",
        "datePublished": "2026-09-02T13:24:11+01:00"
      }
    ],
    "procedure": {
      "features": "In accordance with the competitive flexible procedure the tender process will include defined stages. This exercise will comprise of four stages:\nStage 1.\tInitial technical and procurement specific questions\nStage 2.\tDetailed technical response and price\nStage 3.\tProof of concept (PoC)\nStage 4.\tBest and final offer (BAFO) - all rights reserved\nProgression to subsequent stages is not guaranteed and will be determined by the criteria per stage.\nIn line with the Procurement Act (Part 3, Chapter 2, Section 20), we are not obligated to proceed to further stages if only one supplier remains successful.\nStage 1 - Participation stage: selection, technical elements and commercial aspects\nAll bidders are invited to respond to Part 2 and Part 3 of the tender suite.\nThis stage comprises of four (4) steps.\nThe first step within Stage 1 will be a completeness check. A complete bid is one which has been received by the deadline for submission of tenders, is complete and complies with the requirements of the ITT. Clarification and further information may be sought from bidders in order to determine if a bid is complete; Bidders must respond promptly and within any timeframe specified by the Contracting Authority and failure to provide sufficient clarification or information within the required timeframe may result in the bid being deemed incomplete and disqualified from further consideration. Additionally, any bid received after the submission deadline will be rejected.\nAt the second step, the Contracting Authority will exclude any bidder that is an Excluded Supplier and reserves the right to exclude any bidder that is an Excludable Supplier.\nAt the third step, the Contracting Authority will check that each bid satisfies the conditions of participation (Part 2 of the tender suite) which are all pass/fail criteria set out in the ITT.  \nAt the forth step, the Contracting Authority will evaluate bidders responses to the technical questions (Part 3 of the tender suite) which comprise of a mix of mandatory pass/fail questions and scored questions.\nSubject to there being a sufficient number of competent bidders, the Contracting Authority will shortlist up to five bidders to progress to Stage 2 of the procurement process. Where fewer than five bidders meet the required standard, only those bidders deemed capable will be shortlisted.\nStage 2 - Detailed technical response and price (written responses)\nShortlisted bidders are invited to respond to Part 4 and Part 5 of the tender suite.\nAt this stage bidders will be required to sign an NDA before being issued with Part 4 and Part 5 of the tender suite.\nStage 2 of the procurement process will consist of the evaluation of the technical requirements and initial price.  \nThe Contracting Authority intends to shortlist 3 bidders to go through the Stage 3, the Proof of Concept stage.\nStage 3 - Proof of Concept\nShortlisted suppliers will be invited to participate in a Proof of Concept (PoC) stage. \nThe Proof of Concept is intended to provide objective evidence that validates the bidder's responses to the Stage 2 tender submission.\nPoC objectives:\n•\tConfirm the platform's ability to ingest and normalise representative telemetry from Jisc's SOC data sources\n•\tValidate detection as code workflows, including rule authoring, version control, and deployment\n•\tDemonstrate risk-based alerting and correlation across multiple data sources\n•\tDemonstrate threat intelligence enrichment using Jisc's existing or proposed tooling\n•\tValidate multi-tenant segregation of data and access controls suitable for a managed service model\n•\tAssess usability of the analyst workflow for triage, investigation, and case handling\n•\tAssess supplier responsiveness and support quality during PoC period\nThis stage will be evaluated against the evaluation criteria published in Part 4 of the tender suite.\nStage 4 - Best and Final Offer\nThe Contracting Authority reserves the right to conduct one or more rounds of Best and Final Offers with bidders remaining in the procurement process. In the event that the Authority does not deem it valuable to conduct  Stage 4, it reserves the right to award the contract on the basis of the initial tenders (outcomes from Stage 2 and Stage 3) without entering into Stage 4."
    },
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "awardPeriod": {
      "endDate": "2027-08-27T23:59:59+01:00"
    },
    "description": "Jisc operates a Security Operations Centre (SOC) providing managed security monitoring, detection, and response services to organisations across the UK education and research sector. The SOC ingests and analyses security telemetry from a wide range of sources including endpoints, identity systems, cloud platforms, network infrastructure, and applications in order to detect, investigate, and respond to cyber threats on behalf of its customers. \nJisc is commencing a formal procurement process for a SIEM/SOAR platform to support ongoing evolution of its SOC capability. This Invitation to Tender (ITT) outlines Jisc's requirements and the evaluation process that will be used to assess supplier submissions and select a preferred partner.\nThis procurement process is led by  Jisc Services Ltd, a wholly owned subsidiary of Jisc.",
    "enquiryPeriod": {
      "endDate": "2026-09-21T23:30:00+01:00"
    },
    "aboveThreshold": true,
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "electronicSubmissionPolicy": "allowed"
    },
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "https://uk.eu-supply.com/login.asp?B=JISC",
    "procurementMethodDetails": "Competitive flexible procedure",
    "expressionOfInterestDeadline": "2026-09-29T12:00:00+01:00"
  },
  "parties": [
    {
      "id": "GB-COH-05747339",
      "name": "JISC",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKK11",
        "country": "GB",
        "locality": "Bristol",
        "postalCode": "BS1 6NB",
        "countryName": "United Kingdom",
        "streetAddress": "4 Portwall Lane"
      },
      "details": {
        "url": "http://www.jisc.ac.uk/",
        "classifications": [
          {
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - sub-central government"
          }
        ]
      },
      "identifier": {
        "id": "05747339",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "procurement@jisc.ac.uk"
      },
      "additionalIdentifiers": [
        {
          "id": "PGYD-1575-ZHXX",
          "scheme": "GB-PPON"
        }
      ]
    }
  ],
  "language": "en",
  "initiationType": "tender"
}

{
  "id": "044473-2026",
  "tag": [
    "planning"
  ],
  "date": "2026-05-14T15:26:20+01:00",
  "ocid": "ocds-h6vhtk-066870",
  "buyer": {
    "id": "GB-COH-05747339",
    "name": "JISC"
  },
  "tender": {
    "id": "Proc3165",
    "lots": [
      {
        "id": "LOT-0000",
        "status": "planned",
        "contractPeriod": {
          "endDate": "2032-09-30T23:59:59+01:00",
          "startDate": "2027-10-01T00:00:00+01:00"
        }
      }
    ],
    "items": [
      {
        "id": "LOT-0000",
        "relatedLot": "LOT-0000",
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "SIEM/SOAR Solution for Jisc Security Operations Centre",
    "status": "planned",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Jisc operates a Security Operations Centre (SOC) providing managed security\nmonitoring, detection, and response services to organisations across the UK education\nand research sector. Jisc intends to procure a platform to support its detection, investigation, automation, and response functions.\nA pre market engagement exercise has been conducted for the purpose of investigating the most appropriate route to market/ viable SIEM/SOAR solution for Jisc. The PME carried out has been undertaken solely to inform Jisc's understanding of the market. Participation in such activities will not confer any advantage or disadvantage in any subsequent procurement process, including supplier selection or shortlisting, which will be conducted in accordance with the Procurement Act 2023.\n•\tThis notice is issued for transparency and advance market awareness only. It does not constitute the commencement of a procurement process, an invitation to tender, or a commitment by Jisc to procure any goods, services, or works.\n•\tAny contract values stated in this notice are indicative only and subject to change. Final values may differ materially depending on funding availability, scope refinement, and internal approvals.\n•\tAll dates and timelines included in this notice are provisional and subject to change at the discretion of Jisc. They should be treated as indicative only.  No reliance should be placed on these dates for business or resource planning. Jisc reserves the right to exercise any extension options permitted under existing contractual or framework arrangements, which may impact or delay the future procurement activity referenced in this notice.\n•\tThe scope of the potential procurement described is indicative only and may be amended, expanded, reduced, or withdrawn entirely prior to any formal procurement process.  Any reference to potential re procurement is indicative only and does not represent a commitment to re tender existing arrangements or to replace any current supplier.  Jisc will assess the possible use of existing frameworks as a route to market, opposed to a new procurement process.\n•\tAny future procurement is subject to internal approvals, governance processes, and the availability of funding. While Jisc has taken reasonable care in preparing this notice, it does not warrant the accuracy or completeness of the information provided.\n•\tTo ensure fairness and transparency, suppliers are asked not to contact Jisc or submit expressions of interest in relation to this notice. Any future procurement will be conducted in accordance with the Procurement Act 2023 and advertised via Jisc's e-procurement systems. Suppliers should ensure they are registered on the Jisc portal: https://uk.eu-supply.com/login.asp?B=JISC.",
    "communication": {
      "futureNoticeDate": "2026-07-01T23:59:59+01:00"
    },
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-COH-05747339",
      "name": "JISC",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKK11",
        "country": "GB",
        "locality": "Bristol",
        "postalCode": "BS1 6NB",
        "countryName": "United Kingdom",
        "streetAddress": "4 Portwall Lane"
      },
      "details": {
        "url": "http://www.jisc.ac.uk/",
        "classifications": [
          {
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - sub-central government"
          }
        ]
      },
      "identifier": {
        "id": "05747339",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "procurement@jisc.ac.uk"
      },
      "additionalIdentifiers": [
        {
          "id": "PGYD-1575-ZHXX",
          "scheme": "GB-PPON"
        }
      ]
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "044473-2026",
        "url": "https://www.find-tender.service.gov.uk/Notice/044473-2026",
        "format": "text/html",
        "noticeType": "UK1",
        "description": "Pipeline notice on Find a Tender",
        "documentType": "plannedProcurementNotice",
        "datePublished": "2026-05-14T15:26:20+01:00"
      }
    ]
  },
  "initiationType": "tender"
}

{
  "id": "022351-2026",
  "tag": [
    "planning"
  ],
  "date": "2026-03-12T14:01:08Z",
  "ocid": "ocds-h6vhtk-066870",
  "buyer": {
    "id": "GB-PPON-PGYD-1575-ZHXX",
    "name": "Jisc"
  },
  "tender": {
    "id": "Proc3165",
    "lots": [
      {
        "id": "LOT-0000",
        "status": "planning",
        "description": null,
        "contractPeriod": {
          "endDate": "2030-01-01T23:59:59Z",
          "startDate": "2027-01-01T00:00:00Z"
        }
      }
    ],
    "items": [
      {
        "id": "LOT-0000",
        "relatedLot": "LOT-0000",
        "deliveryAddresses": [
          {
            "region": "UK",
            "country": "GB",
            "countryName": "United Kingdom"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "SIEM/SOAR solution options for Jisc Security Operations Centre",
    "value": {
      "amount": 0,
      "currency": "GBP",
      "amountGross": 0
    },
    "status": "planning",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Jisc operates a Security Operations Centre (SOC) providing managed security monitoring, detection, and response services to organisations across the UK education and research sector. As part of the ongoing evolution of the SOC capability, Jisc is assessing future platform options to support its detection, investigation, automation, and response functions. This includes reviewing potential solutions that provide Security Information and Event Management (SIEM), extended detection and response (XDR), Security Orchestration, Automation and Response (SOAR), and supporting telemetry pipeline capabilities. This is an information gathering exercise. It is neither a selection nor tender exercise; no evaluation, or award will result from this process. Information supplied in this process will be used to support a decision on the most appropriate route to market/viable solution and potentially inform a future procurement process.",
    "communication": {
      "futureNoticeDate": "2026-06-01T23:59:59+01:00"
    },
    "aboveThreshold": true,
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PGYD-1575-ZHXX",
      "name": "Jisc",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKK11",
        "country": "GB",
        "locality": "Bristol",
        "postalCode": "BS1 6NB",
        "countryName": "United Kingdom",
        "streetAddress": "4 Portwall Lane"
      },
      "details": {
        "url": "https://www.jisc.ac.uk",
        "classifications": [
          {
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - sub-central government"
          }
        ]
      },
      "identifier": {
        "id": "PGYD-1575-ZHXX",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Rhianna Best",
        "email": "procurement@jisc.ac.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "022351-2026",
        "url": "https://www.find-tender.service.gov.uk/Notice/022351-2026",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2026-03-12T14:01:08Z"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2026-04-15T23:59:59+01:00",
        "description": "https://uk.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=103594&TID=100108787&B="
      }
    ]
  },
  "initiationType": "tender"
}