Scope
Reference
DBW00105
Description
This notice is to notify the market of the Development Bank of Wales' intention to award a contract for the IT security services.
The Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. his transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security posture caused by the fragmentation of tools and services.
Currently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate.
The Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on-going management of the platform, and providing proactive advice and recommendations to improve the security of our Microsoft estate, drawing on Microsoft's insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.
Contract 1. IT Security Services
Supplier
Contract value
- £1,500,000 excluding VAT
- £1,800,000 including VAT
Above the relevant threshold
Award decision date
7 July 2025
Date assessment summaries were sent to tenderers
8 July 2025
Standstill period
- End: 18 July 2025
- 8 working days
Earliest date the contract will be signed
21 July 2025
Contract dates (estimated)
- 22 July 2025 to 17 July 2030
- Possible extension to 17 July 2033
- 7 years, 11 months, 27 days
Description of possible extension:
12 month increments
Main procurement category
Services
Options
The right to additional purchases while the contract is valid.
Additional services and project work may be required
CPV classifications
- 72000000 - IT services: consulting, software development, Internet and support
Contract locations
- UK - United Kingdom
Information about tenders
- 10 tenders received
- 9 tenders assessed in the final stage:
- 0 submitted by small and medium-sized enterprises (SME)
- 0 submitted by voluntary, community and social enterprises (VCSE)
- 1 supplier awarded contracts
- 8 suppliers unsuccessful (details included for contracts over £5 million)
Submission
Submission type
Tenders
Procedure
Procedure type
Competitive flexible procedure
Supplier
Wavenet Limited
- Public Procurement Organisation Number: PGGC-2348-BVLG
Second Floor One Central Boulevard, Central Boulevard
Solihull
B90 8BG
United Kingdom
Email: shekul.islam@wavenet.co.uk
Region: UKG32 - Solihull
Small or medium-sized enterprise (SME): No
Voluntary, community or social enterprise (VCSE): No
Supported employment provider: No
Public service mutual: No
Connected people/organisations:
Venetia Copper
Philip Grannum
Stewart Motler
At One Central Boulevard, Solihull, B90 8BG
Thetis Parentco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD
Thetis Midco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD
Wn Corporate Limited - Second Floor One Central Boulevard, Central Boulevard Blythe Valley Park, Shirley, Solihull B90 8BG
William Dawson - One Central Boulevard, Solihull B90 8BG
Macquarie Group Limited - 1 Elizabeth Street, Sydney AU-NSW 2000
Thetis Bidco Limited - Second Floor One Central Boulevard, Central Boulevard Blythe Valley Park, Shirley, Solihull B90 8BG
Thetis Topco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD
Mprc Europe Ltd - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD
Macquarie Principal Finance UK Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD
Contract 1. IT Security Services
Contracting authority
Development Bank of Wales
- Public Procurement Organisation Number: PCWM-6438-QYVP
Development Bank of Wales plc
Cardiff
CF10 4BZ
United Kingdom
Contact name: Leanne Millard
Telephone: +442920801715
Email: procurement@developmentbank.wales
Website: http://www.developmentbank.wales
Region: UKL22 - Cardiff and Vale of Glamorgan
Organisation type: Public authority - central government
Devolved regulations that apply: Wales