Buyer Name: Development Bank of Wales
Buyer Address: Development Bank of Wales plc, Cardiff, UKL22, CF10 4BZ, United Kingdom
Contact Name: Leanne Millard
Contact Email: procurement@developmentbank.wales
Contact Telephone: +442920801715
Buyer Name: Development Bank of Wales
Buyer Address: Development Bank of Wales plc, Cardiff, UKL22, CF10 4BZ, United Kingdom
Contact Name: Leanne Millard
Contact Email: procurement@developmentbank.wales
Contact Telephone: +442920801715
This notice is to notify the market of the Development Bank of Wales' intention to award a contract for the IT security services. The Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. his transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security posture caused by the fragmentation of tools and services. Currently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate. The Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on-going management of the platform, and providing proactive advice and recommendations to improve the security of our Microsoft estate, drawing on Microsoft’s insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.
No linked documents found for this notice.
Lot 1 Status: complete
Award Title: IT Security Services
{
"awards": [
{
"aboveThreshold": true,
"assessmentSummariesDateSent": "2025-07-08T00:00:00+01:00",
"contractPeriod": {
"endDate": "2030-07-17T23:59:59+01:00",
"maxExtentDate": "2033-07-17T23:59:59+01:00",
"startDate": "2025-07-22T00:00:00+01:00"
},
"date": "2025-07-07T00:00:00+01:00",
"documents": [
{
"datePublished": "2025-07-08T14:02:41+01:00",
"description": "Contract award notice on Find a Tender",
"documentType": "awardNotice",
"format": "text/html",
"id": "038257-2025",
"noticeType": "UK6",
"url": "https://www.find-tender.service.gov.uk/Notice/038257-2025"
}
],
"hasOptions": true,
"hasRenewal": true,
"id": "1",
"items": [
{
"additionalClassifications": [
{
"description": "IT services: consulting, software development, Internet and support",
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"country": "GB",
"countryName": "United Kingdom",
"region": "UK"
}
],
"id": "1",
"relatedLot": "1"
}
],
"mainProcurementCategory": "services",
"milestones": [
{
"dueDate": "2025-07-21T23:59:59+01:00",
"id": "1",
"status": "scheduled",
"type": "futureSignatureDate"
}
],
"options": {
"description": "Additional services and project work may be required "
},
"relatedLots": [
"1"
],
"renewal": {
"description": "12 month increments"
},
"standstillPeriod": {
"endDate": "2025-07-18T23:59:59+01:00"
},
"status": "pending",
"suppliers": [
{
"id": "GB-PPON-PGGC-2348-BVLG",
"name": "Wavenet Limited"
}
],
"title": "IT Security Services",
"value": {
"amount": 1500000,
"amountGross": 1800000,
"currency": "GBP"
}
}
],
"bids": {
"statistics": [
{
"id": "1",
"measure": "bids",
"relatedLot": "1",
"value": 10
},
{
"id": "2",
"measure": "finalStageBids",
"relatedLot": "1",
"value": 9
},
{
"id": "3",
"measure": "smeFinalStageBids",
"relatedLot": "1",
"value": 0
},
{
"id": "4",
"measure": "vcseFinalStageBids",
"relatedLot": "1",
"value": 0
}
]
},
"buyer": {
"id": "GB-PPON-PCWM-6438-QYVP",
"name": "Development Bank of Wales"
},
"date": "2025-07-08T14:02:41+01:00",
"id": "038257-2025",
"initiationType": "tender",
"language": "en",
"ocid": "ocds-h6vhtk-04efe9",
"parties": [
{
"address": {
"country": "GB",
"countryName": "United Kingdom",
"locality": "Cardiff",
"postalCode": "CF10 4BZ",
"region": "UKL22",
"streetAddress": "Development Bank of Wales plc"
},
"contactPoint": {
"email": "procurement@developmentbank.wales",
"name": "Leanne Millard",
"telephone": "+442920801715"
},
"details": {
"classifications": [
{
"description": "Public authority - central government",
"id": "publicAuthorityCentralGovernment",
"scheme": "UK_CA_TYPE"
},
{
"description": "Welsh devolved regulations apply",
"id": "GB-WLS",
"scheme": "UK_CA_DEVOLVED_REGULATIONS"
}
],
"url": "http://www.developmentbank.wales"
},
"id": "GB-PPON-PCWM-6438-QYVP",
"identifier": {
"id": "PCWM-6438-QYVP",
"scheme": "GB-PPON"
},
"name": "Development Bank of Wales",
"roles": [
"buyer"
]
},
{
"address": {
"country": "GB",
"countryName": "United Kingdom",
"locality": "Solihull",
"postalCode": "B90 8BG",
"region": "UKG32",
"streetAddress": "Second Floor One Central Boulevard, Central Boulevard"
},
"contactPoint": {
"email": "shekul.islam@wavenet.co.uk"
},
"control": {
"description": "Venetia Copper \nPhilip Grannum\nStewart Motler\nAt One Central Boulevard, Solihull, B90 8BG\nThetis Parentco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD\nThetis Midco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD\nWn Corporate Limited - Second Floor One Central Boulevard, Central Boulevard Blythe Valley Park, Shirley, Solihull B90 8BG\nWilliam Dawson - One Central Boulevard, Solihull B90 8BG\nMacquarie Group Limited - 1 Elizabeth Street, Sydney AU-NSW 2000\nThetis Bidco Limited - Second Floor One Central Boulevard, Central Boulevard Blythe Valley Park, Shirley, Solihull B90 8BG\nThetis Topco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD\nMprc Europe Ltd - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD\nMacquarie Principal Finance UK Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD"
},
"details": {
"publicServiceMissionOrganization": false,
"scale": "large",
"shelteredWorkshop": false,
"vcse": false
},
"id": "GB-PPON-PGGC-2348-BVLG",
"identifier": {
"id": "PGGC-2348-BVLG",
"scheme": "GB-PPON"
},
"name": "Wavenet Limited",
"roles": [
"supplier"
]
}
],
"tag": [
"award",
"contract"
],
"tender": {
"description": "This notice is to notify the market of the Development Bank of Wales\u0027 intention to award a contract for the IT security services.\nThe Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. his transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security posture caused by the fragmentation of tools and services.\nCurrently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate.\nThe Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on-going management of the platform, and providing proactive advice and recommendations to improve the security of our Microsoft estate, drawing on Microsoft\u2019s insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.",
"id": "DBW00105",
"legalBasis": {
"id": "2023/54",
"scheme": "UKPGA",
"uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
},
"lots": [
{
"id": "1",
"status": "complete"
}
],
"procurementMethod": "open",
"procurementMethodDetails": "Competitive flexible procedure",
"status": "complete",
"title": "Award of IT Security Sevices"
}
}