Scope
Reference
OPEN20251753
Description
As a local authority, we have a duty to protect sensitive citizen and staff data, maintain critical services, and demonstrate compliance with national standards and regulations. Cyber threats continue to increase in scale and sophistication, and our existing controls need to be enhanced to reduce risk, improve detection, and shorten response times.
We are therefore seeking to engage with the market to understand current capabilities in delivering Extended Detection and Response (XDR) solutions, focused on endpoint and email protection, supported by 24/7 managed Security Operations Centre (SOC) services.
Scope of Requirement
Suppliers are invited to share details of their solutions and services that can deliver:
• An XDR platform capable of detecting and correlating threats across endpoint devices and email systems (e.g. phishing, malware, ransomware, and advanced persistent threats).
• Integration with widely used local government environments (e.g. Microsoft 365, Windows-based estate, iOS, Android).
• Real-time monitoring, alerting, and response, with automated containment where feasible.
• Access to a 24/7 SOC service, including:
o Continuous monitoring and triage of alerts
o Threat intelligence integration, ideally aligned to UK government/NCSC guidance
o Incident response and clear escalation pathways
o Regular reporting, dashboards, and compliance outputs to support audits (e.g. PSN, PCI-DSS, Cyber Essentials Plus, ISO27001)
Total value (estimated)
- £1,000,000 excluding VAT
- £1,200,000 including VAT
Above the relevant threshold
Contract dates (estimated)
- 1 April 2026 to 31 March 2029
- 3 years
Main procurement category
Services
CPV classifications
- 48730000 - Security software package
- 72212730 - Security software development services
Contract locations
- UKC14 - Durham CC
Engagement
Engagement deadline
24 October 2025
Engagement process description
Market Engagement questionnaire can be accessed free of charge by registering on the Open Portal which be accessed via open-uk.org
Deadline for completed submissions via the Open Portal is Friday 24th October 2025 at 12 noon.
Contracting authority
Durham County Council
- Public Procurement Organisation Number: PMPB-8772-VYWM
Corten House, Dunholme Close
Durham
DH1 5WB
United Kingdom
Email: zoe.embleton@durham.gov.uk
Website: http://www.durham.gov.uk/
Region: UKC14 - Durham CC
Organisation type: Public authority - sub-central government