Planned procurement · Notice 085261-2026
Enhanced Security Operations Managed Service
- Value
- Value not stated
- Stage
- Early notice
- Where
- UK-wide
- Lots
- 1
- Suitable for SMEs
- Yes, says the buyer
- Contract
- 14 Apr 2028 – 30 Apr 2030
In plain English
The Student Loans Company is talking to the market ahead of retendering its Enhanced Security Operations Managed Service, covering managed detection and response, vulnerability management, breach attack simulation, threat intelligence, incident response retainer and security architecture support. The replacement contract would run from April 2028 to April 2030, and suppliers may be allowed to bid for one or all of the six requirements.
Good fit for: Managed security service providers and cyber consultancies working with Microsoft Sentinel, Defender, Rapid7 and similar tooling.
- 24x7x365 monitoring is required for the detection and response element
- PCI compliance reporting is expected as part of vulnerability management
- Supplier must work with the buyer's existing tooling (Microsoft Sentinel, Defender for Endpoint, Rapid7, Jira, Power BI, AttackIQ or similar)
Written with AI from the official notice. Check the notice before relying on it.
What the buyer says
The Student Loans company (SLC) have an agreement for Enhanced Security Operations Managed Service expiring April 2028. In order to provision for a retender of the agreement SLC are undertaking pre-market engagement with regards to the provision of the following: • Requirement A: Enhanced Security Operations Managed Service - MXDR Service (2026-TR-0109a) • Requirement B: Enhanced Security Operations Managed Service - Vulnerability Management (VM) Service (2026-TR-0109b) • Requirement C: Enhanced Security Operations Managed Service - Breach Attack Simulation (BAS) Service (2026-TR-0109c) • Requirement D: Enhanced Security Operations Managed Service - Cyber Threat Intelligence (CTI) Service (2026-TR-0109d) • Requirement E: Enhanced Security Operations Managed Service - Digital Forensics and Incident Response (DFIR) Retainer Service (2026-TR-0109e) • Requirement F: Enhanced Security Operations Managed Service - Security Architecture and Engineering Support Services (2026-TR-0109f) SLC is considering an approach to the market to give the suppliers an option to bid for one or ALL of the contractual requirements. Requirement A Enhanced Security Operations Managed Service - MXDR Service The Supplier will provide a Managed Extended Detection and Response (MXDR) capability operating on a hybrid customer/supplier model. MXDR Service The Supplier will provide: • 24x7x365 monitoring of SLC security telemetry. • L1 and L2 Security Operations Centre capability (SLC retain L3). • Incident identification, triage and investigation. • Security use-case monitoring and tuning. • Management of Microsoft Sentinel detections. • SOAR playbook execution and optimisation. • Escalation management. • Alert enrichment. • Threat hunting capability. • Malicious activity investigation. • Service gove…
What happens next
This is an early notice: the buyer is planning a tender, and its documents come when the tender is published. Read the official notice for the details.
Procedure: not stated. Published 9 Sep 2026.
Similar open tenders
- Network Operating System (Cisco) · East Riding of Yorkshire Council · closes 11 Nov
- Company Information Database Subscription · Competition and Markets Authority · closes 11 Nov
- Theatre Event Management Software · Surrey Heath Borough Council · closes 11 Nov
- ICT Data Platform Consultancy Services · Ayrshire College · closes 11 Nov
- "Your Education Technology" An Open Framework (PA 2023) for the provision of ICT products, services, and solutions. · Nexus Multi Academy Trust · closes 11 Nov
Want tenders like this, matched to your firm?
Winnable emails the few new tenders that fit you each weekday, with the catch spelled out. £29/month after a 14-day free trial (no card needed).