Enhanced Security Operations Managed Service

The Student Loans company (SLC) have an agreement for Enhanced Security Operations Managed Service expiring April 2028. In order to provision for a retender of the agreement SLC are undertaking pre-market engagement with regards to the provision of the following:
• Requirement A: Enhanced Security Operations Managed Service - MXDR Service (2026-TR-0109a)
• Requirement B: Enhanced Security Operations Managed Service - Vulnerability Management (VM) Service (2026-TR-0109b)
• Requirement C: Enhanced Security Operations Managed Service - Breach Attack Simulation (BAS) Service (2026-TR-0109c)
• Requirement D: Enhanced Security Operations Managed Service - Cyber Threat Intelligence (CTI) Service (2026-TR-0109d)
• Requirement E: Enhanced Security Operations Managed Service - Digital Forensics and Incident Response (DFIR) Retainer Service (2026-TR-0109e)
• Requirement F: Enhanced Security Operations Managed Service - Security Architecture and Engineering Support Services (2026-TR-0109f)
SLC is considering an approach to the market to give the suppliers an option to bid for one or ALL of the contractual requirements.
Requirement A
Enhanced Security Operations Managed Service - MXDR Service
The Supplier will provide a Managed Extended Detection and Response (MXDR) capability operating on a hybrid customer/supplier model.
MXDR Service
The Supplier will provide:
• 24x7x365 monitoring of SLC security telemetry.
• L1 and L2 Security Operations Centre capability (SLC retain L3).
• Incident identification, triage and investigation.
• Security use-case monitoring and tuning.
• Management of Microsoft Sentinel detections.
• SOAR playbook execution and optimisation.
• Escalation management.
• Alert enrichment.
• Threat hunting capability.
• Malicious activity investigation.
• Service governance and performance management.
• Security reporting at operational, tactical and strategic levels.
Security Engineering (Operational)
The Supplier shall provide:
• L3 Engineering support for...