Hybrid Security Operations Centre (SOC)
Open
Closes in 17 days
Key facts
- Closing date
- Monday 2 November 2026, 12:00 (UK time) Closes in 17 days
- Buyer's estimated value
- £150,000 (excl. VAT) The buyer's own estimate, not income to you.
- Clarification questions deadline
- 26 October 2026, 12:00
- Contract period
- 30 Mar 2027 to 30 Mar 2028
- Procedure
- Below threshold - open competition
- Notice type
- Tender notice (UK4)
Decision brief
Taken from the buyer's published notice (shown as written, shortened where long). Tenderpatch has not added to or interpreted it. Always read the official documents before bidding.
- How bids will be scored
- Not stated in the notice.
- Conditions of participation (what you must show)
- None published in the notice. They may be in the tender documents.
- Contract length and extensions
- 30 Mar 2027 to 30 Mar 2028. Extensions: 2 potential 1 year extensions
- How to submit
- Through supplier.in-tend.co.uk ↗ (the buyer's own portal). Electronic submission: allowed.
- Tender documents
- No document links in the notice. Use the official notice link.
New to public tenders? Plain-English guide to this page
- Framework
- An agreement that sets terms for work the buyer may order later, often from several suppliers. The value shown usually covers the whole agreement, not one job.
- Open for bids / closing date
- You must submit by the closing date and time, normally through the buyer's own online portal. Late bids are normally refused.
- Clarification questions
- A deadline for asking the buyer questions about the tender. It is earlier than the closing date.
- Conditions of participation
- What the buyer asks suppliers to show before they can be considered, such as experience, insurance or accreditations.
- Bids are scored on
- How the buyer will compare bids, usually a split between price and quality. A 60/40 split in favour of quality means the cheapest bid will not necessarily win.
- Lots
- A tender can be split into parts. You can often bid for only the lots that suit you.
- Area (ITL)
- The buyer names an official statistical area for where the work is, not a street address. Check the tender documents for the actual sites.
- UK4 and other notice codes
- Official codes for the type of notice. A "tender notice" means bids are being invited.
General explanations written by Tenderpatch, not part of this notice.
Description
The British Film Institute (BFI) is looking for a supplier to provide a Hybrid Security Operations Centre (SOC) on a 1+1+1 year basis.
It will consist a 24/7 for 365 days SOC with a Hybrid SOC Service Design for a new Hybrid SOC Operating Model by end of BFI’s financial year end Q4-2027, 31 March 2027.
At the end of the first contracted year, the Supplier shall have established a demonstrable operational capability that enables BFI to:
- Continuously monitor agreed critical systems;
- Detect priority cyber threats;
- Investigate security events;
- Respond to P1/P2 incidents;
- Undertake proactive threat hunting;
- Maintain protected security logs;
- Demonstrate appropriate incident escalation;
- Provide management-level security reporting; and
- Identify and remediate material monitoring gaps.
To take part in this tender, please visit our website, at https://in-tendhost.co.uk/bfi/aspx/Tenders/Current , where you will need to register, if you haven’t already, and express an interest in this opportunity to access the relevant documents. Please note expressions of interest will only be accepted via the portal.