Planning

SOC Out-of-Hours Protective Monitoring Service

  • DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS

F01: Prior information notice (prior information only)

Notice identifier: 2025/S 000-083442

Procurement identifier (OCID): ocds-h6vhtk-05f6e3

Published 16 December 2025, 2:50pm



Section one: Contracting authority

one.1) Name and addresses

DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS

Seacole Building, 2 Marsham Street

London

SW1P 4DF

Contact

Sara Bevan

Email

network.procurement@defra.gov.uk

Country

United Kingdom

Region code

UK - United Kingdom

Internet address(es)

Main address

https://www.gov.uk/government/organisations/department-for-environment-food-rural-affairs

Buyer's address

https://defra-family.force.com/s/Welcome

one.2) Information about joint procurement

The contract is awarded by a central purchasing body

one.3) Communication

Additional information can be obtained from the above-mentioned address

one.4) Type of the contracting authority

Ministry or any other national or federal authority

one.5) Main activity

Environment


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

SOC Out-of-Hours Protective Monitoring Service

Reference number

C32398

two.1.2) Main CPV code

  • 72222300 - Information technology services

two.1.3) Type of contract

Services

two.1.4) Short description

Defra's Security Operations Centre (SOC) is reliant on a hybrid model for protective monitoring, whereby Defra's internal SOC provides coverage during standard business hours (09:00-17:00) Monday to Friday and an external supplier delivers monitoring outside these hours. Defra is seeking to reprocure this out-of-hours Protective Monitoring SOC service when the incumbent contract expires on 31st October 2026.

two.1.5) Estimated total value

Value excluding VAT: £1,200,000

two.1.6) Information about lots

This contract is divided into lots: No

two.2) Description

two.2.2) Additional CPV code(s)

  • 72000000 - IT services: consulting, software development, Internet and support

two.2.3) Place of performance

NUTS codes
  • UKI32 - Westminster

two.2.4) Description of the procurement

Contract Term:
The Authority is seeking an initial contract term of 3-years, with two options to extend for 1-year each (3+1+1).
Route to Market:
The Crown Commercial Service's RM3764.3 Cyber Security Services 3 DPS. Suppliers must register on the DPS via CCS' website and meet the Contracting Authority's requirements to be considered for this opportunity.
Timelines* (2026)
10th March - ITT Stage 1 released
23rd March - ITT Stage 2 released
20th April - ITT Submission deadline
11th June - Contract Award
1st November - Contract Start Date
*Please note that these are provisional timelines and could be subject to change at the Authority's discretion.

two.2.14) Additional information

Please register on the DPS here https://supplierregistration.cabinetoffice.gov.uk/dps/RM37643?nav=0 to be considered for this opportunity.

two.3) Estimated date of publication of contract notice

15 July 2026


Section four. Procedure

four.1) Description

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes