Managed Security Operations Centre (SOC) and Incident Response Services Agreement

2026-11-03

UKNNL is undertaking a preliminary market engagement exercise to inform and refine its requirements for a Managed Security Operations Centre (SOC) and Incident Response service. This includes shaping the service scope, delivery approach, and overall specification, while gathering supplier feedback to ensure alignment with current market capability. The service will provide continuous monitoring, detection, and response to cyber security threats across UKNNL's IT estate. It will integrate people, processes, and technology to deliver an effective "detect and respond" capability, supporting incident response and remediation while safeguarding UKNNL's digital assets and information. UKNNL expects a capable SOC provider to enhance its overall security posture by improving threat visibility, reducing response times, and providing access to specialist cyber security expertise, delivered in a reliable and low-risk manner. Suppliers will be expected to demonstrate relevant industry accreditations aligned to the service scope, including CREST accreditation for SOC services and Cyber Incident Response (via CREST, NCSC, or equivalent). UKNNL will host a virtual market engagement event on Friday 5 June at 10:00am. The session will provide an overview of the proposed service, delivery model, and procurement approach, and will offer suppliers the opportunity to ask questions and provide feedback. Suppliers wishing to attend should confirm via email to gemma.slocombe@uknnl.com, and a Microsoft Teams invitation will be issued. All materials presented will be shared as part of the tender pack for those unable to attend.

United Kingdom (UK)

2026-06-02