ProcuraAxisBeta
Sign inCreate Free Account
Home / Opportunities / Opportunity
PROCUREMENT OPPORTUNITY

Managed Service Provider (MSP) & Security Operations Centre (SOC) / SEIM Provider

Waste & Resources Action Programme · Tender notice on Find a Tender

Tender information last checkedLast checked 30 Sept 2026, 00:16.

Opportunity overview

WRAP is seeking to procure support across two (2) distinct service packages: •Service Package 1: Managed Service Provider (MSP) •Service Package 2: Security Operations Centre (SOC) / SIEM Provider Bidders may submit a proposal for one or both packages. WRAP may award a single contract covering both service areas or award separate contracts for each service package, depending on the quality and value for money of the responses. Service Package 1: Managed Service Provider (MSP) The primary objective of this package is to supplement WRAP’s internal IT function with a scalable, flexible and proactive Managed IT Services Partner. The MSP will enhance WRAP’s operational resilience, ensure efficient ticket management, maintain high system performance and align IT service delivery with WRAP’s evolving organisational needs and cybersecurity posture. Service Package 1: Security Operations Centre (SOC) / SIEM Provider The objective of this package is to secure WRAP’s IT environment by delivering robust, around-the-clock cybersecurity monitoring, rapid incident response, and advanced threat intelligence services. The selected provider will strengthen WRAP’s security posture and support regulatory compliance. To submit a Bid, register for free on: https://www.delta-esourcing.com/ Access Code (to find the opportunity): XU66K63TY7 For more information about this opportunity, please visit the Delta eSourcing portal at: https://www.delta-esourcing.com/tenders/UK-UK-Banbury:-IT-services:-consulting%2C-software-development%2C-Internet-and-support./XU66K63TY7 To respond to this opportunity, please click here: https://www.delta-esourcing.com/respond/XU66K63TY7

Classification

  • CPV72000000 — IT services: consulting, software development, Internet and support

Lots

  • Managed Service Provider (MSP)£120k · Including VAT
  • Security Operations Centre (SOC) / SIEM Provider£60k · Including VAT

Documents and notices

Published notice details

Additional information from the published procurement release. Fields appear only when supplied by the source; check the original notice and tender documents before acting.

Scope, procedure and submissions

Id
ocds-h6vhtk-0506cc
Status
active
Above Threshold
No
Procurement Method
open
Main Procurement Category
services
Procurement Method Details
Below threshold - open competition

Legal basis

Id
2023/54
Scheme
UKPGA

Tender Period

Ends
21 May 2025, 00:45

Enquiry period

Ends
21 May 2025, 00:45

Submission terms

Electronic Submission Policy
allowed

Lots and requirements

Entry 1
Id
Package 1
Title
Managed Service Provider (MSP)
Status
active
Has Renewal
Yes
Description
The primary objective of this package is to supplement WRAP’s internal IT function with a scalable, flexible and proactive Managed IT Services Partner. The MSP will enhance WRAP’s operational resilience, ensure efficient ticket management, maintain high system performance and align IT service delivery with WRAP’s evolving organisational needs and cybersecurity posture. Services required are as follows: Server Monitoring & Reporting Provide 24/7 real-time monitoring of WRAP's Azure-based virtual servers. Detect and report on performance degradation, downtime, system anomalies, and security issues. Deliver automated and manual alerts for potential threats or service failures. Generate monthly reports covering server health, uptime, patching status, capacity utilisation, and threat logs. IT Support Escalation, Overflow and Flexible Support Provide Tier 2 and Tier 3 support, acting as an escalation point for complex IT incidents. Respond to overflow tickets exceeding internal team capacity (i.e., 20+ tickets/month). Ensure tight integration with WRAP’s ITSM system (Freshservice) for ticket visibility and lifecycle updates. Be able to scale up support provision within 24 hours, as needed for peak periods or critical events. Ability to attend WRAP Offices for to supplement on-site IT presence. Full Helpdesk Coverage Provide full-service first line and second-line helpdesk support when WRAP’s internal team is unavailable (e.g., holidays, absences). Deliver end-user support (remote or on-site if necessary), including troubleshooting, password resets, software/hardware issues, and user onboarding/offboarding. Liaise with third-party vendors and escalate incidents to manufacturers or cloud providers as required. Project Support Contribute a minimum of 2 hours per month to support WRAP's digital projects (e.g., migrations, software rollouts, endpoint configuration). Allow unused support hours to roll over for future use to enable flexibility in project delivery. Knowledge Management Maintain and update WRAP’s internal knowledge base to reflect new system configurations, known issues, and support resolutions. Ensure regular documentation updates within Freshservice, enabling WRAP's internal team to access up-to-date self-help and procedural guides. Compliance & Cybersecurity Ensure all services comply with relevant data protection laws and certifications, including GDPR, Cyber Essentials, and ISO 27001. Implement and maintain baseline cybersecurity hygiene (e.g., patching, MFA enforcement, basic security hardening). Review & Collaboration Attend monthly service review meetings to report performance against SLAs, review incidents, and discuss ongoing improvements. Participate in quarterly strategic reviews to align services with WRAP’s IT roadmap and business goals. Identifying industry trends and insights to help WRAP stay current. Working Hours Provide core services during UK business hours (08:00 – 17:00 GMT/BST, Monday to Friday), with capacity for out-of-hours escalation in urgent situations if needed.

Value

Currency
GBP
Including VAT
120,000

Renewal

Description
Optional 1 year extension, if deemed necessary.

Suitability

Sme
Yes
Vcse
Yes

Award criteria

Criteria

Criterion 1
Name
Price
Type
price
Description
Long criteria description

Numbers

Entry 1
Number
35
Weight
percentageExact
Criterion 2
Name
Quality
Type
quality
Description
Long criteria description

Numbers

Entry 1
Number
65
Weight
percentageExact

Contract period

Ends
9 Jun 2027, 00:59
Starts
9 Jun 2025, 01:00
Max Extent Date
9 Jun 2028, 00:59
Entry 2
Id
Package 2
Title
Security Operations Centre (SOC) / SIEM Provider
Status
active
Has Renewal
Yes
Description
The objective of this package is to secure WRAP’s IT environment by delivering robust, around-the-clock cybersecurity monitoring, rapid incident response, and advanced threat intelligence services. The selected provider will strengthen WRAP’s security posture and support regulatory compliance. Services required are as follows: 24/7 Security Monitoring Provide continuous monitoring through a mature SIEM solution, capturing logs from cloud and on-prem environments. Detect known and unknown threats using automated correlation engines and behaviour analytics. Alert WRAP to critical incidents, providing actionable context and remediation suggestions. Incident Response & Remediation Provide hands-on containment, investigation, and remediation support for security incidents. Respond in accordance with defined SLAs (e.g., critical threat response within 15 minutes). Hold NCSC-assured service provider status or equivalent (e.g., CREST, CIR Level 2+ certification). Threat Intelligence & Hunting Conduct proactive threat hunting activities based on emerging indicators of compromise (IOCs) and known tactics, techniques, and procedures (TTPs). Ingest and apply global threat intelligence feeds, adapting detection rules accordingly. Compliance & Regulatory Support Ensure ongoing compliance with ISO 27001, Cyber Essentials Plus, and other UK regulatory standards. Enable auditable log retention, forensic readiness, and transparent record-keeping. Integration with WRAP’s Security Stack Seamlessly integrate with Microsoft 365 Defender, Azure Security Centre, EDR/XDR tools, and WRAP’s firewalls and network infrastructure. Provide visibility across multi-cloud and hybrid environments, including integration with third-party security tools. Custom Detection Rules Build and maintain custom detection rules and workflows tailored to WRAP’s use cases and risk profile. Collaborate with WRAP’s internal teams to ensure detections reflect evolving business and technical contexts. Global Incident Coordination Provide “follow-the-sun” support, ensuring continuous coverage and coordination with WRAP’s global operations (if applicable). Leverage regional SOC teams to respond to threats in real-time regardless of time zone. Real-Time Reporting Offer live dashboards and periodic reporting (e.g., weekly/monthly) on incidents, threat trends, vulnerabilities, and system health. Include executive-level summaries and technical deep-dives where appropriate. Collaboration Work closely with WRAP’s internal cybersecurity and IT teams. Participate in incident response tabletop exercises, scenario planning, and quarterly joint reviews. Required Capabilities (applicable to both packages) are as follows: Demonstrated experience supporting public or non-profit organisations, preferably within the UK or global NGO sector. Evidence of supporting hybrid environments, particularly Azure and Microsoft 365 (or equivalent). Flexible, transparent pricing models that suit WRAP’s operating needs and enable scaling of services. Data handling practices compliant with UK GDPR, Data Protection Act 2018, and relevant international data laws (or equivalent).

Value

Currency
GBP
Including VAT
60,000

Renewal

Description
Optional 1 year extension, if necessary.

Suitability

Sme
Yes
Vcse
Yes

Award criteria

Criteria

Criterion 1
Name
Price
Type
price
Description
Long criteria description

Numbers

Entry 1
Number
35
Weight
percentageExact
Criterion 2
Name
Quality
Type
quality
Description
Long criteria description

Numbers

Entry 1
Number
65
Weight
percentageExact

Contract period

Ends
9 Jun 2027, 00:59
Starts
9 Jun 2025, 01:00
Max Extent Date
9 Jun 2028, 00:59

Items and delivery

Item 1
Id
Package 1
Related Lot
Package 1

Delivery locations

Entry 1
Region
UK
Country
GB
Country Name
United Kingdom

Additional Classifications

Entry 1
Id
72000000
Scheme
CPV
Description
IT services: consulting, software development, Internet and support
Item 2
Id
Package 2
Related Lot
Package 2

Delivery locations

Entry 1
Region
UK
Country
GB
Country Name
United Kingdom

Additional Classifications

Entry 1
Id
72000000
Scheme
CPV
Description
IT services: consulting, software development, Internet and support

Published documents

Entry 1
Id
A-943641447
Description
Invitation to Tender (ITT)
Document Type
biddingDocuments
Entry 2
Id
A-943641467
Description
Conditions of Contract
Document Type
biddingDocuments
Entry 3
Id
A-943641765
Description
Quotation & Rates Schedule (Excel Format)
Document Type
biddingDocuments
Entry 4
Id
016706-2025
Format
text/html
Notice Type
UK4
Description
Tender notice on Find a Tender
Document Type
tenderNotice
Published
24 Apr 2025, 10:52

Buyer, suppliers and contacts

Organisation 1
Id
GB-PPON-PCTJ-5948-ZJZV
Name
Waste & Resources Action Programme

Roles

buyer

Address

Region
UKJ14
Country
GB
Locality
Banbury
Postal Code
OX16 5BH
Country Name
United Kingdom
Street Address
Second Floor, Blenheim Court, 19 George Street

Details

Classifications

Entry 1
Id
publicAuthoritySubCentralGovernment
Scheme
UK_CA_TYPE
Description
Public authority - sub-central government

Identifier

Id
PCTJ-5948-ZJZV
Scheme
GB-PPON

Contact

Name
Procurement Lead
Telephone
01295 584100

Recorded locations

  • Buyer location · Banbury · UKJ14 · OX16 5BH · United Kingdom
  • Delivery location · UK · United Kingdom

Notice and amendment history

1 published notice version reviewed by ProcuraAxis.

1 VERSION
  1. ocds-h6vhtk-0506cc-2025-04-24T10:52:04+01:00Tender notice on Find a Tender ·