✓Tender information last checkedLast checked 8 Oct 2026, 12:21.
Opportunity overview
The British Film Institute (BFI) is looking for a supplier to provide a Hybrid Security Operations Centre (SOC) on a 1+1+1 year basis.
It will consist a 24/7 for 365 days SOC with a Hybrid SOC Service Design for a new Hybrid SOC Operating Model by end of BFI’s financial year end Q4-2027, 31 March 2027.
At the end of the first contracted year, the Supplier shall have established a demonstrable operational capability that enables BFI to:
- Continuously monitor agreed critical systems;
- Detect priority cyber threats;
- Investigate security events;
- Respond to P1/P2 incidents;
- Undertake proactive threat hunting;
- Maintain protected security logs;
- Demonstrate appropriate incident escalation;
- Provide management-level security reporting; and
- Identify and remediate material monitoring gaps.
To take part in this tender, please visit our website, at https://in-tendhost.co.uk/bfi/aspx/Tenders/Current , where you will need to register, if you haven’t already, and express an interest in this opportunity to access the relevant documents. Please note expressions of interest will only be accepted via the portal.
Classification
CPV48730000 — Security software package
CPV72000000 — IT services: consulting, software development, Internet and support
CPV72212730 — Security software development services
Lots
Lot 1AED 150k · Source currency differs from tender
Additional information from the published procurement release. Fields appear only when supplied by the source; check the original notice and tender documents before acting.
Buyer location · LONDON · UKI31 · W1T 1LN · United Kingdom
Delivery location · UKI · United Kingdom
Notice and amendment history
1 published notice version reviewed by ProcuraAxis.
1 VERSION
1
095088-2026Tender notice on Find a Tender ·
PROCURAAXIS ANALYSIS
ProcuraAxis Analysis
Our approved analysis of the opportunity appears below the official tender information.
ANALYSIS PREVIEW
Opportunity intelligence at a glance
British Film Institute seeks a supplier to deliver a hybrid Security Operations Centre service for an initial year, with two possible further one-year periods (1+1+1). The service must operate 24/7/365 and design a hybrid SOC operating model by 31 March 2027. By the end of year one, the supplier must be able to monitor critical systems, detect and investigate cyber threats, respond to P1/P2 incidents, threat hunt, protect logs, escalate incidents, report to management and remediate monitoring gaps.
Who this may suit
Suitable for managed security service providers and cyber-security firms with 24/7 SOC, incident response, threat-hunting, security monitoring and SOC transformation capabilities.
Key points identified
SOC availability24/7, 365 days per yearEvidence: "It will consist a 24/7 for 365 days SOC"
Hybrid SOC designProvide a Hybrid SOC Service Design for a new Hybrid SOC Operating Model by 31 March 2027Evidence: "Hybrid SOC Service Design for a new Hybrid SOC Operating Model by end of BFI’s financial year end Q4-2027, 31 March 2027."
Year-one operational capabilityDemonstrable capability to monitor critical systems, detect priority threats, investigate events, respond to P1/P2 incidents, conduct threat hunting, maintain protected logs, escalate incidents, report to management, and remediate monitoring gapsEvidence: "At the end of the first contracted year, the Supplier shall have established a demonstrable operational capability" followed by the listed capabilities.
93% approved-analysis confidence4 supplier criteria identified2 risks or unknowns
ProcuraAxis structures information found in published procurement records, checks the result for consistency and publishes only approved analysis. Confidence describes the completeness and consistency of the available source information; it is not a guarantee of eligibility or contract award.
British Film Institute seeks a supplier to deliver a hybrid Security Operations Centre service for an initial year, with two possible further one-year periods (1+1+1). The service must operate 24/7/365 and design a hybrid SOC operating model by 31 March 2027. By the end of year one, the supplier must be able to monitor critical systems, detect and investigate cyber threats, respond to P1/P2 incidents, threat hunt, protect logs, escalate incidents, report to management and remediate monitoring gaps.
Who this may suit
Suitable for managed security service providers and cyber-security firms with 24/7 SOC, incident response, threat-hunting, security monitoring and SOC transformation capabilities.
Key deliverables
24/7/365 SOC service
Hybrid SOC service design and operating model by 31 March 2027
Continuous monitoring of agreed critical systems
Cyber-threat detection, investigation and P1/P2 incident response
Proactive threat hunting and protected security-log management
Incident escalation and management-level security reporting
Identification and remediation of material monitoring gaps
SUPPLIER REQUIREMENTS
4 criteria identified
SOC availability
99% confidence
24/7, 365 days per year
View supporting evidence
"It will consist a 24/7 for 365 days SOC"
Hybrid SOC design
98% confidence
Provide a Hybrid SOC Service Design for a new Hybrid SOC Operating Model by 31 March 2027
View supporting evidence
"Hybrid SOC Service Design for a new Hybrid SOC Operating Model by end of BFI’s financial year end Q4-2027, 31 March 2027."
Year-one operational capability
99% confidence
Demonstrable capability to monitor critical systems, detect priority threats, investigate events, respond to P1/P2 incidents, conduct threat hunting, maintain protected logs, escalate incidents, report to management, and remediate monitoring gaps
View supporting evidence
"At the end of the first contracted year, the Supplier shall have established a demonstrable operational capability" followed by the listed capabilities.
Supplier eligibility conditions
90% confidence
Unknown; access tender documents through the BFI portal for full conditions.
View supporting evidence
The notice directs suppliers to register and express interest through the portal to access relevant documents.
COMMERCIAL AND DELIVERY
Contract intelligence
Commercial
Contract term
98% confidence
1+1+1 years
View supporting evidence
"on a 1+1+1 year basis"
Maximum stated process value
83% confidence
£150,000
View supporting evidence
Process value_max is 150000 with currency GBP.
Lot value currency
95% confidence
AED 150,000
View supporting evidence
Lot 1 value_amount is 150000 with currency AED.
Commercial terms
95% confidence
Unknown; obtain tender documents through the BFI portal.
View supporting evidence
No pricing, payment or renewal exercise terms are stated in the supplied notice text.
Delivery
Delivery location
90% confidence
United Kingdom, London region (UKI)
View supporting evidence
Delivery location region is "UKI", United Kingdom; buyer location is London.
Service deadline
98% confidence
Hybrid SOC operating model design due by 31 March 2027
View supporting evidence
"by end of BFI’s financial year end Q4-2027, 31 March 2027."
PROCEDURE
How to respond
Procurement method
99% confidence
Below-threshold open competition
View supporting evidence
procurement_method_details: "Below threshold - open competition".
Opportunity status
99% confidence
Open tender
View supporting evidence
display_status is "open" and source_status is "active".
Submission deadline
99% confidence
2 November 2026, 12:00 UTC
View supporting evidence
submission_deadline: "2026-11-02T12:00:00+00:00".
Access and expression of interest
99% confidence
Register and express interest via the BFI In-Tend portal; expressions of interest are accepted only through that portal.
View supporting evidence
"you will need to register... and express an interest... Please note expressions of interest will only be accepted via the portal."
RISKS AND UNKNOWNS
Points requiring attention
Value currency inconsistency
99% confidence
The process-level maximum value is stated in GBP, while Lot 1 is stated in AED; confirm the contract value and currency in the tender documents.
Full technical, selection, contractual and commercial requirements are not included in the supplied notice and must be obtained through the portal.
View supporting evidence
The notice states that suppliers must express interest via the portal to access the relevant documents.
ProcuraAxis analysis supplements, but does not replace, the original notice and tender documents. Always verify eligibility, deadlines and commercial terms with the issuing authority.
Continue in your ProcuraAxis workspaceFree account · Full approved analysis