Tender

Security Operations Centre (SOC)

  • National Physical Laboratory

F02: Contract notice

Notice identifier: 2024/S 000-010818

Procurement identifier (OCID): ocds-h6vhtk-044f63

Published 3 April 2024, 4:05pm



Section one: Contracting authority

one.1) Name and addresses

National Physical Laboratory

Hampton Road

Teddington

TW11 0LW

Contact

Nina Heath

Email

nina.heath@npl.co.uk

Country

United Kingdom

Region code

UK - United Kingdom

Internet address(es)

Main address

www.npl.co.uk

one.3) Communication

The procurement documents are available for unrestricted and full direct access, free of charge, at

https://lupc.bravosolution.co.uk/

Additional information can be obtained from the above-mentioned address

Tenders or requests to participate must be submitted electronically via

https://lupc.bravosolution.co.uk/

Tenders or requests to participate must be submitted to the above-mentioned address

one.4) Type of the contracting authority

Body governed by public law

one.5) Main activity

Other activity

Research


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

Security Operations Centre (SOC)

two.1.2) Main CPV code

  • 72000000 - IT services: consulting, software development, Internet and support

two.1.3) Type of contract

Services

two.1.4) Short description

The National Physical Laboratory [NPL] requirement is to implement a 24x7 Security Operations Centre (SOC). It would enable NPL to gain 24x7 visibility over potential security threats in its environment and respond to them in a timely manner as per severity and agreed SLA.

Currently, NPL does not have out of hours capability to respond to security alerts/incidents which leaves it vulnerable to security threats coming in out of hours, which in turn can have a significant impact on the availability of NPL systems if we are hit by a determined cyber threat actor, especially at this time where UK government organisations are at a higher alert status.

NPL’s intention is to find a service provider that could supply several services which would fill the gap left from having a lack of resources (Senior Engineers and Architect), and who could function as part of an extended virtual team.

Services required for SOC will be focused on NPL’s M365 E5 licensing stack, including handling Defender EDR capabilities, SIEM service, threat hunting, compliance reporting, cloud security baselining, vulnerability assessments, phishing trends, dark web monitoring and technical security advisory.

The contract will initially be for a period of three years with the possibility of extending it by two further periods of one year each (3 + 1+ 1), following satisfactory performance of the supplier and at the sole discretion of NPL.

two.1.5) Estimated total value

Value excluding VAT: £375,000

two.1.6) Information about lots

This contract is divided into lots: No

two.2) Description

two.2.3) Place of performance

NUTS codes
  • UK - United Kingdom
Main site or place of performance

Teddington, UK

two.2.4) Description of the procurement

Security Operations Centre (SOC)

two.2.5) Award criteria

Price is not the only award criterion and all criteria are stated only in the procurement documents

two.2.6) Estimated value

Value excluding VAT: £375,000

two.2.7) Duration of the contract, framework agreement or dynamic purchasing system

End date

30 June 2027

This contract is subject to renewal

Yes

Description of renewals

The contract will initially be for a period of three years with the possibility of extending it by two further periods of one year each (3 + 1+ 1), following satisfactory performance of the supplier and at the sole discretion of NPL.

two.2.10) Information about variants

Variants will be accepted: No

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Open procedure

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes

four.2) Administrative information

four.2.2) Time limit for receipt of tenders or requests to participate

Date

3 May 2024

Local time

5:00pm

four.2.4) Languages in which tenders or requests to participate may be submitted

English

four.2.7) Conditions for opening of tenders

Date

7 May 2024

Local time

9:00am


Section six. Complementary information

six.1) Information about recurrence

This is a recurrent procurement: No

six.4) Procedures for review

six.4.1) Review body

NPL Management

Teddington

Country

United Kingdom