← Back to opportunities

DBS Security Operations Centre (SOC) Service

DBS

Buyer Contact Info

Buyer Name: DBS

Buyer Address: 10 Princes Parade, Liverpool, Merseyside, UKD72, L3 1QY, United Kingdom

Contact Name: Lesley Draper

Contact Email: DBSTenders@dbs.gov.uk

Status
active
Procedure
open
Value
9400000.0 GBP
Gross: 11200000 GBP
Published
11 Nov 2025, 15:41
Deadline
04 Feb 2026, 17:00
Contract Start
n/a
Contract End
n/a
Category
services
CPV
72000000 - IT services: consulting, software development, Internet and support
Region
n/a
Awarded To
n/a
Official Source
Open Find a Tender

Description

DBS is progressing a major transformation of its legacy IT estate, moving to modern, Software-as-a-Service (SaaS)–based applications. As part of this transformation, DBS intends to procure a modern, CREST accredited Security Operations Centre (SOC) Service to protect and monitor its next-generation estate. The SOC will be implemented on the next generation estate only, there is no requirement for SOC services on the legacy estate which is mainly greenfield and as such there is no history of security logs, events or incidents for the applications in scope. It will include multiple SaaS-based services, a data integration platform, connection to third-party services (which may provide log feeds), and potentially other IaaS/PaaS cloud based services, for which the service shall be capable of onboarding and monitoring. Multiple third parties work with the Buyer to deliver technology and business services and have access to the Buyer's information and systems. End point, network and other supporting services (email and productivity tools for example) are provided to the Buyer and monitored by the Home Office and as such are out of scope of the SOC Service; DBS holds information that is highly sensitive and must not be subject to compromise. It depends on real-time, accurate transactions, any compromise to the integrity of such data could lead to significant losses; DBS collects, stores and manages Personal Data (including sensitive Personal Data); and DBS services provide evidence to legal bodies that require full audit and visibility of data creation, manipulation and access as part of legislative and regulatory requirements. DBS require a supplier to design, build and maintain the SOC that is compliant with / aligned to the NCSC guide on building a SOC encompassing: the operating model; onboarding; detection; threat intelligence; and Security Incident response and management. The SOC must be available and operate 24 hours a day, 7 days a week (at all times). More information about DBS and its operations can be found at: Disclosure and Barring Service - GOV.UK (www.gov.uk).

Linked Documents

No linked documents found for this notice.

Opportunity Context

More Information Links

External Link: https://www.find-tender.service.gov.uk/Notice/072909-2025

Link Description: Tender notice on Find a Tender

Lots

Lot 1 Status: active

Lot 1 Value: GBP 9,400,000

Lot 1 Value (Gross): GBP 11,200,000

Lot 1 Contract Start: 2026-07-06T00:00:00+01:00

Lot 1 Contract End: 2029-07-05T23:59:59+01:00

Lot 1 SME Suitable: Yes

Lot 1 Award Criterion (quality): Technical (60%)

Lot 1 Award Criterion (price): Price (30%)

Lot 1 Award Criterion (quality): Social Value (10%)

Documents

Document Description: Not published

Document Description: Tender notice on Find a Tender

Raw Notice JSON

Expand raw payload
{
  "buyer": {
    "id": "GB-PPON-PJXX-6763-PBZL",
    "name": "DBS"
  },
  "date": "2025-11-11T15:41:31Z",
  "id": "072909-2025",
  "initiationType": "tender",
  "language": "en",
  "ocid": "ocds-h6vhtk-058556",
  "parties": [
    {
      "address": {
        "country": "GB",
        "countryName": "United Kingdom",
        "locality": "Merseyside",
        "postalCode": "L3 1QY",
        "region": "UKD72",
        "streetAddress": "10 Princes Parade, Liverpool"
      },
      "contactPoint": {
        "email": "DBSTenders@dbs.gov.uk",
        "name": "Lesley Draper"
      },
      "details": {
        "classifications": [
          {
            "description": "Public authority - sub-central government",
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE"
          }
        ]
      },
      "id": "GB-PPON-PJXX-6763-PBZL",
      "identifier": {
        "id": "PJXX-6763-PBZL",
        "scheme": "GB-PPON"
      },
      "name": "DBS",
      "roles": [
        "buyer"
      ]
    }
  ],
  "tag": [
    "tender"
  ],
  "tender": {
    "aboveThreshold": true,
    "awardPeriod": {
      "endDate": "2026-05-27T23:59:59+01:00"
    },
    "description": "DBS is progressing a major transformation of its legacy IT estate, moving to modern, Software-as-a-Service (SaaS)\u2013based applications.\nAs part of this transformation, DBS intends to procure a modern, CREST accredited Security Operations Centre (SOC) Service to protect and monitor its next-generation estate.\nThe SOC will be implemented on the next generation estate only, there is no requirement for SOC services on the legacy estate which is mainly greenfield and as such there is no history of security logs, events or incidents for the applications in scope.\nIt will include multiple SaaS-based services, a data integration platform, connection to third-party services (which may provide log feeds), and potentially other IaaS/PaaS cloud based services, for which the service shall be capable of onboarding and monitoring.\nMultiple third parties work with the Buyer to deliver technology and business services and have access to the Buyer\u0027s information and systems. End point, network and other supporting services (email and productivity tools for example) are provided to the Buyer and monitored by the Home Office and as such are out of scope of the SOC Service;\nDBS holds information that is highly sensitive and must not be subject to compromise.  It depends on real-time, accurate transactions, any compromise to the integrity of such data could lead to significant losses;\nDBS collects, stores and manages Personal Data (including sensitive Personal Data); and\nDBS services provide evidence to legal bodies that require full audit and visibility of data creation, manipulation and access as part of legislative and regulatory requirements.\nDBS require a supplier to design, build and maintain the SOC that is compliant with / aligned to the NCSC guide on building a SOC encompassing: the operating model; onboarding; detection; threat intelligence; and Security Incident response and management.\nThe SOC must be available and operate 24 hours a day, 7 days a week (at all times).  \nMore information about DBS and its operations can be found at: Disclosure and Barring Service - GOV.UK (www.gov.uk).",
    "documents": [
      {
        "description": "Not published",
        "documentType": "conflictOfInterest",
        "id": "conflictOfInterest"
      },
      {
        "accessDetails": "- Conflicts of Interest, Ethical Wall Agreement, and Non-Disclosure Agreement  \n- Conditions of Participation\n- Invitation to Tender Documents",
        "documentType": "biddingDocuments",
        "id": "future"
      },
      {
        "datePublished": "2025-11-11T15:41:31Z",
        "description": "Tender notice on Find a Tender",
        "documentType": "tenderNotice",
        "format": "text/html",
        "id": "072909-2025",
        "noticeType": "UK4",
        "url": "https://www.find-tender.service.gov.uk/Notice/072909-2025"
      }
    ],
    "id": "C26340",
    "items": [
      {
        "additionalClassifications": [
          {
            "description": "IT services: consulting, software development, Internet and support",
            "id": "72000000",
            "scheme": "CPV"
          },
          {
            "description": "Information technology services",
            "id": "72222300",
            "scheme": "CPV"
          },
          {
            "description": "Security software development services",
            "id": "72212730",
            "scheme": "CPV"
          },
          {
            "description": "Computer-related services",
            "id": "72500000",
            "scheme": "CPV"
          },
          {
            "description": "Networking, Internet and intranet software package",
            "id": "48200000",
            "scheme": "CPV"
          },
          {
            "description": "Software-related services",
            "id": "72260000",
            "scheme": "CPV"
          },
          {
            "description": "Security services",
            "id": "79710000",
            "scheme": "CPV"
          }
        ],
        "deliveryAddresses": [
          {
            "country": "GB",
            "countryName": "United Kingdom",
            "region": "UK"
          }
        ],
        "id": "1",
        "relatedLot": "1"
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "scheme": "UKPGA",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
    },
    "lots": [
      {
        "awardCriteria": {
          "criteria": [
            {
              "name": "Technical",
              "numbers": [
                {
                  "number": 60,
                  "weight": "percentageExact"
                }
              ],
              "type": "quality"
            },
            {
              "name": "Price",
              "numbers": [
                {
                  "number": 30,
                  "weight": "percentageExact"
                }
              ],
              "type": "price"
            },
            {
              "name": "Social Value",
              "numbers": [
                {
                  "number": 10,
                  "weight": "percentageExact"
                }
              ],
              "type": "quality"
            }
          ]
        },
        "contractPeriod": {
          "endDate": "2029-07-05T23:59:59+01:00",
          "maxExtentDate": "2031-07-05T23:59:59+01:00",
          "startDate": "2026-07-06T00:00:00+01:00"
        },
        "hasRenewal": true,
        "id": "1",
        "renewal": {
          "description": "The contract will have an initial term of three (3) years, with the option to extend for two (2) additional periods of twelve (12) months each  . Any decision to apply an extension will be made in accordance with the terms and conditions of the contract and applicable procurement legislation."
        },
        "selectionCriteria": {
          "criteria": [
            {
              "description": "Details can be found in the PSQ",
              "type": "economic"
            },
            {
              "description": "Details can be found in the PSQ",
              "type": "technical"
            }
          ]
        },
        "status": "active",
        "suitability": {
          "sme": true
        },
        "value": {
          "amount": 9400000,
          "amountGross": 11200000,
          "currency": "GBP"
        }
      }
    ],
    "mainProcurementCategory": "services",
    "procedure": {
      "features": "The procurement  will follow a Competitive Flexible Procedure. This will be a single stage procurement where Bidders are asked to submit a response to the PSQ and ITT on the same date. Only bidders that pass the PSQ will have their tender response evaluated. No additional steps will be used.\nFollowing publication of this Tender Notice, bidders will be required to complete a Conflict of Interest (CoI) declaration, an Ethical Wall Agreement (EWA) and Non-Disclosure Agreement (NDA) before receiving access to the Invitation to Tender (ITT). Completion of these will be a gateway requirement for access to the ITT, and bidders must submit their completed documents within the timescales set out in this Tender Notice. Following confirmation of compliance, the ITT will be released simultaneously to all eligible bidders in early December 2025.\nIndicative procurement timeline (which is subject to change at DBS\u0027s discretion):\n\u2022\tTender Notice publication: 11/11/2025\n\u2022\tAccess provided to CoI / EWA / NDA documents: 11/11/2025\n\u2022\tDeadline for submission of CoI / EWA / NDA documents: 21/11/2025 at 1700\n\u2022\tPSQ and ITT issued to all eligible bidders (see below): early December 2025\n\u2022\tClarification question period deadline: late January 2026\n\u2022\tFinal clarification question log issued: late January 2026\n\u2022\tPSQ and ITT submission deadline: early February 2026\nEligible bidders are bidders who have received confirmation from DBS that their submitted CoI / EWA / NDA documents have been counter-signed. Please allow approximately four (4) working days   for DBS to process your submission and confirm eligibility.\nDBS may consider allowing late submission of CoI / EWA / NDA documents, however in no circumstances can bidders submit this documentation after 05/01/2026 at 1700. Bidders who are late to submit their CoI / EWA / NDA documents will be required to submit their PSQ and ITT responses on the same date as bidders who submit their CoI / EWA / NDA documents on time.\nThe PSQ will be assessed on a pass/fail basis covering legal, financial and technical requirements. Case studies demonstrating relevant SOC delivery experience will also be assessed on a pass/fail basis within the PSQ. Tenders from bidders that pass all PSQ criteria will then be evaluated. Bidders who fail the PSQ will be excluded and will not have their tenders evaluated. \nA clarification process will operate during the PSQ and ITT period to enable bidders to seek clarification from DBS. There will be no dialogue, validation, or negotiation stages included in the process.\nDue diligence will be undertaken by DBS prior to Contract Award to provide assurance that there are no material risks that could prevent contract signature i.e. if a Supplier bidding for the contract no longer meets the minimum standards required, and their Tender is rejected as a result, DBS reserves the right to award the Contract to the next highest scoring Supplier.\nPlease note DBS reserves the right at any stage of the procurement to abandon the competition and not award a contract. DBS also reserves the right to make minor amendments to the procurement documentation (for example, to clarify or refine requirements), provided such changes are not substantial and do not distort competition. If amendments are made, DBS will consider whether any corresponding tender deadlines require revision and will issue updated documentation or notices where appropriate."
    },
    "procurementMethod": "open",
    "procurementMethodDetails": "Competitive flexible procedure",
    "status": "active",
    "submissionMethodDetails": "The procurement will be conducted electronically via the eSourcing Portal (Jaggaer). All communication and document exchange for this procurement will take place through this portal.\nRegistration:\nTo participate, suppliers must first be registered on the Jaggaer eSourcing Portal. Registration can be completed online at https://homeoffice.app.jaggaer.com by selecting \u2018To register click here\u2019. Suppliers must have a valid DUNS number (issued by Dun \u0026 Bradstreet) for the organisation that would enter into contract with DBS.\nAccess to procurement documents:\nTo obtain access to the procurement documentation, suppliers must first request access to the Conflict of Interest (CoI), Ethical Wall Agreement (EWA) and Non-Disclosure Agreement (NDA) documents by emailing DBSTenders@dbs.gov.uk. Your email must clearly state the exact organisation name used when registering on the Jaggaer portal.\nOnce your organisation has been validated, the DBS Procurement Team will enable access to the procurement event within Jaggaer.\nPre-qualification requirement:\nCompletion and submission of the CoI, EWA and NDA documentation is a mandatory precondition for access to the PSQ and ITT. DBS will review submitted documents and confirm eligibility.\nPlease see the \u201cCompetitive Flexible Procedure Description\u201d section for further details.\nSupport:  \nFor any technical issues with the eSourcing Portal, please contact the Jaggaer Supplier Helpdesk: customersupport@jaggaer.com, 0800 069 8630 (08:00 \u2013 18:00, Monday to Friday)\nGovernment Central Digital Platform:\nAll bidders must be registered on the Government\u2019s Central Digital Platform for Supplier Registration before their tender can be accepted by DBS, available at https://supplierregistration.cabinetoffice.gov.uk/. Registration is mandatory under the Procurement Act 2023.",
    "submissionTerms": {
      "electronicSubmissionPolicy": "allowed",
      "languages": [
        "en"
      ]
    },
    "tenderPeriod": {
      "endDate": "2026-02-04T17:00:00+00:00"
    },
    "title": "DBS Security Operations Centre (SOC) Service",
    "value": {
      "amount": 9400000,
      "amountGross": 11200000,
      "currency": "GBP"
    }
  }
}