Security Operation Centre

Bournemouth University ("BU" or the "University") is exploring options for the provision of a co-managed Security Operations Centre (SOC) service to enhance and future-proof its cyber security operations capability. The University is seeking market feedback from experienced Managed Security Service Providers to better understand available service models, implementation approaches, commercial arrangements and indicative costs.
BU has invested significantly in its internal cyber security capability and Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Entra ID Protection, Security Copilot and related services. The University is now considering how external specialist support could complement its in-house team through a co-managed SOC operating model.
The key objectives of a future service are expected to include:
- Enhancing monitoring, detection and response capabilities through either 24/7 or out-of-hours SOC coverage.
- Improving threat detection, triage, false-positive reduction and incident response effectiveness.
- Providing additional specialist expertise, operational resilience and surge capacity during major incidents or periods of heightened risk.
- Maintaining and continuously improving detection rules, playbooks, automation and security monitoring capabilities.
- Leveraging threat intelligence, sector insight, automation and AI-enabled capabilities to strengthen cyber resilience and operational effectiveness.
- Establishing a robust governance, reporting and service management framework with clear responsibilities between BU and the supplier.
- Maximising the value of the University's existing Microsoft security investments while minimising the need for additional tooling wherever appropriate.
The University wishes to understand how the market can support these objectives, together with the costs, benefits, risks and implementation considerations associated with different service models. Supplier feedback received...