← Back to opportunities

Protective Monitoring Transition and Exit

Home Office

Buyer Contact Info

Buyer Name: Home Office

Buyer Address: 2 Marsham Street, London, UKI32, SW1P 4DF, United Kingdom

Contact Email: collaborativeprocurement@homeoffice.gov.uk

Status
complete
Procedure
direct
Value
216000.0 GBP
Published
09 Dec 2025, 17:20
Deadline
n/a
Contract Start
01 Jan 2026, 00:00
Contract End
30 May 2026, 22:59
Category
n/a
CPV
72212732 - Data security software development services
Region
n/a
Awarded To
IBM UK Ltd
Official Source
Open Find a Tender

Description

The 2-month continuation (plus 1-month contingency) of the current protective monitoring service using IBM QRadar for on-premises and AWS-based Buyer-owned infrastructure and applications, to allow for transition to the in-house, long-term replacement solution. An operational support team monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) provides analysis of alerts, carries out triage and investigation of any potential security event, and alerts the Buyer. The monitoring service will be delivered from January 1st 2026 until March 31st 2026. An operational support team shall monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) shall provide analysis of alerts, carries out triage and investigation of any potential security event, and alert the Buyer. The replacement in-house, long-term replacement solution is in the final stages of development and governance with an anticipated go-live of Jan/Feb 2026 with the current IBM QRadar contract terminating on 31st Decmeber 2025 with no further extensions available, this short-term continuation contract is required to support transition.

Linked Documents

No linked documents found for this notice.

Opportunity Context

Lots

Lot 1 Status: complete

Raw Notice JSON

Expand raw payload
{
  "awards": [
    {
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2026-05-30T23:59:59+01:00",
        "startDate": "2026-01-01T00:00:00+00:00"
      },
      "date": "2025-12-02T00:00:00+00:00",
      "documents": [
        {
          "datePublished": "2025-12-09T17:20:31Z",
          "description": "Contract award notice on Find a Tender",
          "documentType": "awardNotice",
          "format": "text/html",
          "id": "081235-2025",
          "noticeType": "UK6",
          "url": "https://www.find-tender.service.gov.uk/Notice/081235-2025"
        }
      ],
      "id": "1",
      "items": [
        {
          "additionalClassifications": [
            {
              "description": "Data security software development services",
              "id": "72212732",
              "scheme": "CPV"
            }
          ],
          "id": "1",
          "relatedLot": "1"
        }
      ],
      "mainProcurementCategory": "services",
      "milestones": [
        {
          "dueDate": "2025-12-23T23:59:59+00:00",
          "id": "1",
          "status": "scheduled",
          "type": "futureSignatureDate"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "standstillPeriod": {
        "endDate": "2025-12-18T23:59:59+00:00"
      },
      "status": "pending",
      "suppliers": [
        {
          "id": "GB-COH-01503908",
          "name": "IBM UK Ltd"
        }
      ],
      "value": {
        "amount": 216000,
        "amountGross": 313200,
        "currency": "GBP"
      }
    }
  ],
  "buyer": {
    "id": "GB-PPON-PWGC-6513-PQLZ",
    "name": "Home Office"
  },
  "date": "2025-12-09T17:20:31Z",
  "id": "081235-2025",
  "initiationType": "tender",
  "language": "en",
  "ocid": "ocds-h6vhtk-05f22c",
  "parties": [
    {
      "address": {
        "country": "GB",
        "countryName": "United Kingdom",
        "locality": "London",
        "postalCode": "SW1P 4DF",
        "region": "UKI32",
        "streetAddress": "2 Marsham Street"
      },
      "contactPoint": {
        "email": "collaborativeprocurement@homeoffice.gov.uk"
      },
      "details": {
        "classifications": [
          {
            "description": "Public authority - central government",
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE"
          }
        ]
      },
      "id": "GB-PPON-PWGC-6513-PQLZ",
      "identifier": {
        "id": "PWGC-6513-PQLZ",
        "scheme": "GB-PPON"
      },
      "name": "Home Office",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "country": "GB",
        "countryName": "United Kingdom",
        "locality": "Winchester",
        "postalCode": "SO21 2JN",
        "region": "UKJ36",
        "streetAddress": "Building C, IBM Hursley Office"
      },
      "contactPoint": {
        "email": "jzillessen@uk.ibm.com"
      },
      "details": {
        "publicServiceMissionOrganization": false,
        "scale": "large",
        "shelteredWorkshop": false,
        "vcse": false
      },
      "id": "GB-COH-01503908",
      "identifier": {
        "id": "01503908",
        "scheme": "GB-COH"
      },
      "name": "IBM UK Ltd",
      "roles": [
        "supplier"
      ]
    }
  ],
  "tag": [
    "award",
    "contract"
  ],
  "tender": {
    "description": "The 2-month continuation (plus 1-month contingency) of the current protective monitoring service using IBM QRadar for on-premises and AWS-based Buyer-owned infrastructure and applications, to allow for transition to the in-house, long-term replacement solution. An operational support team monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) provides analysis of alerts, carries out triage and investigation of any potential security event, and alerts the Buyer.\nThe monitoring service will be delivered from January 1st 2026 until March 31st 2026. An operational support team shall monitor, support and patch the Protective Monitoring service and QRadar components including onboarding of new log sources. A Security Operations Centre (SOC) shall provide analysis of alerts, carries out triage and investigation of any potential security event, and alert the Buyer.  \nThe replacement in-house, long-term replacement solution is in the final stages of development and governance with an anticipated go-live of Jan/Feb 2026 with the current IBM QRadar contract terminating on 31st Decmeber 2025 with no further extensions available, this short-term continuation contract is required to support transition.",
    "id": "P_19864",
    "legalBasis": {
      "id": "2023/54",
      "scheme": "UKPGA",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
    },
    "lots": [
      {
        "id": "1",
        "status": "complete"
      }
    ],
    "procurementMethod": "direct",
    "procurementMethodDetails": "Direct award",
    "status": "complete",
    "title": "Protective Monitoring Transition and Exit"
  }
}