002621 - Preliminary Market Engagement (PME) for 24/7 Managed Security Operations and a Managed Detection and Response (MDR) service

As a local authority, we have a duty to protect sensitive citizen and staff data, maintain critical services, and demonstrate compliance with national standards and regulations. Cyber threats continue to increase in scale and sophistication, and our existing controls need to be enhanced to reduce risk, improve detection, and shorten response times.

We are therefore seeking to engage with the market to understand current capabilities in delivering Extended Detection and Response (XDR) solutions, focused on endpoint and email protection, supported by 24/7 managed Security Operations Centre (SOC) services.

Scope of Requirement

Suppliers are invited to share details of their solutions and services that can deliver:

• An XDR platform capable of detecting and correlating threats across endpoint devices and email systems (e.g. phishing, malware, ransomware, and advanced persistent threats).
• Integration with widely used local government environments (e.g. Microsoft 365, Windows-based estate, iOS, Android).
• Real-time monitoring, alerting, and response, with automated containment where feasible.
• Access to a 24/7 SOC service, including:

o Continuous monitoring and triage of alerts o Threat intelligence integration, ideally aligned to UK government/NCSC guidance o Incident response and clear escalation pathways o Regular reporting, dashboards, and compliance outputs to support audits (e.g. PSN, PCI-DSS, Cyber Essentials Plus, ISO27001)

Lots

This procurement was divided into 1 lots, each awarded separately.

Notice Amendments

Changes the buyer published to this notice after it first appeared.