External Security Incident and Event Management (SIEM) & Security Operations Centre (SOC) Support Monitoring Service

{
  "awards": [
    {
      "contractPeriod": {
        "endDate": "2027-01-31T23:59:59Z",
        "startDate": "2026-02-01T00:00:00Z"
      },
      "date": "2025-12-05T00:00:00Z",
      "datePublished": "2026-01-28T10:47:03Z",
      "documents": [
        {
          "datePublished": "2026-01-28T10:47:03Z",
          "description": "Awarded contract notice on Contracts Finder",
          "documentType": "awardNotice",
          "format": "text/html",
          "id": "1",
          "language": "en",
          "url": "https://www.contractsfinder.service.gov.uk/Notice/9b0ad156-a66c-4028-907e-35ab54c4c969"
        }
      ],
      "id": "ocds-b5fd17-4698dc31-b7df-4c55-b769-c3ce83556e86-1",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-02548628",
          "name": "Phoenix Software Limited"
        }
      ],
      "value": {
        "amount": 95390.95,
        "currency": "GBP"
      }
    }
  ],
  "buyer": {
    "id": "GB-GOR-D240",
    "name": "O F W A T"
  },
  "date": "2026-01-28T10:47:04Z",
  "id": "9b0ad156-a66c-4028-907e-35ab54c4c969-881055",
  "initiationType": "tender",
  "language": "en",
  "ocid": "ocds-b5fd17-4698dc31-b7df-4c55-b769-c3ce83556e86",
  "parties": [
    {
      "address": {
        "countryName": "England",
        "locality": "BIRMINGHAM",
        "postalCode": "B54UA",
        "streetAddress": "7 Hill Street"
      },
      "contactPoint": {
        "email": "procurement@ofwat.gov.uk",
        "name": "The Procurement Team"
      },
      "id": "GB-GOR-D240",
      "identifier": {
        "id": "D240",
        "legalName": "O F W A T",
        "scheme": "GB-GOR"
      },
      "name": "O F W A T",
      "roles": [
        "buyer"
      ]
    },
    {
      "address": {
        "streetAddress": "Blenheim House, \r\nYork Road, Pocklington, \r\nYork. \r\nYO42 1NS"
      },
      "details": {
        "scale": "large",
        "vcse": false
      },
      "id": "GB-COH-02548628",
      "identifier": {
        "id": "02548628",
        "legalName": "Phoenix Software Limited",
        "scheme": "GB-COH"
      },
      "name": "Phoenix Software Limited",
      "roles": [
        "supplier"
      ]
    }
  ],
  "tag": [
    "award"
  ],
  "tender": {
    "classification": {
      "description": "Information technology services",
      "id": "72222300",
      "scheme": "CPV"
    },
    "contractPeriod": {
      "endDate": "2027-01-31T23:59:59Z",
      "startDate": "2026-02-01T00:00:00Z"
    },
    "description": "Ofwat currently operates an internal Security Operations Centre (SOC) within its security team, responsible for monitoring the organisation\u0027s SIEM (Security Incident and Event Management) platform. The internal SOC operates during business hours Monday to Friday 9-5pm.  \r\n\r\nTo strengthen resilience and deliver comprehensive round-the-clock coverage, enabling full 24/7 security operations, Ofwat now requires a Managed external SIEM and SOC capability to deliver threat detection, analysis, and incident response. \r\n\r\nThis service will operate as an extension of Ofwat\u0027s internal security team, offering advanced analytics, threat intelligence, and compliance reporting.",
    "id": "PROC.0205",
    "items": [
      {
        "deliveryAddresses": [
          {
            "postalCode": "B5 4UA"
          }
        ],
        "id": "1"
      }
    ],
    "mainProcurementCategory": "services",
    "procurementMethod": "limited",
    "procurementMethodDetails": "Competitive quotation (below threshold)",
    "status": "complete",
    "suitability": {
      "sme": true,
      "vcse": false
    },
    "tenderPeriod": {
      "endDate": "2025-12-02T17:00:00Z"
    },
    "title": "External Security Incident and Event Management  (SIEM) \u0026 Security Operations Centre (SOC)  Support Monitoring Service"
  }
}