002621 - Preliminary Market Engagement (PME) for Extended Detection and Response (XDR) Solution for Endpoint and Email Protection with 24/7 Security Operations Centre (SOC) Services

Description

As a local authority, we have a duty to protect sensitive citizen and staff data, maintain critical services, and demonstrate compliance with national standards and regulations. Cyber threats continue to increase in scale and sophistication, and our existing controls need to be enhanced to reduce risk, improve detection, and shorten response times. We are therefore seeking to engage with the market to understand current capabilities in delivering Extended Detection and Response (XDR) solutions, focused on endpoint and email protection, supported by 24/7 managed Security Operations Centre (SOC) services. Scope of Requirement Suppliers are invited to share details of their solutions and services that can deliver: • An XDR platform capable of detecting and correlating threats across endpoint devices and email systems (e.g. phishing, malware, ransomware, and advanced persistent threats). • Integration with widely used local government environments (e.g. Microsoft 365, Windows-based estate, iOS, Android). • Real-time monitoring, alerting, and response, with automated containment where feasible. • Access to a 24/7 SOC service, including: o Continuous monitoring and triage of alerts o Threat intelligence integration, ideally aligned to UK government/NCSC guidance o Incident response and clear escalation pathways o Regular reporting, dashboards, and compliance outputs to support audits (e.g. PSN, PCI-DSS, Cyber Essentials Plus, ISO27001)