Security Operations Centre (SOC) and Security Information and Event Management (SIEM) Services

Provision of a managed Security Operations Centre (SOC) and Security Information and Event Management (SIEM) service: supporting continuous security monitoring, threat detection, incident analysis, alert triage, incident response, escalation management, compliance assurance, service reporting, and ongoing service improvement. The service includes the provision, operation, management, and continuous enhancement of security monitoring and incident management capabilities, including support for Microsoft Sentinel as the current SIEM platform. The supplier must also be capable of supporting alternative SIEM technologies and monitoring and managing security event sources across both Microsoft and non-Microsoft technologies, including platforms that do not natively integrate with Microsoft Sentinel. The scope includes managed cybersecurity operations, threat detection and analysis, incident management and response, security platform support, threat intelligence, governance and reporting, and the provision of suitably qualified cybersecurity personnel.

Tender documents

Additional details