View notice - Sell2Wales

Summary

OCID:: ocds-h6vhtk-04efe9
Published by:: Development Bank of Wales
Authority ID:: AA0555
Publication date:: 08 July 2025
Deadline date:: -
Notice type:: UK6
Has documents:: No
Has SPD:: No
Has Carbon Reduction Plan:: N/A

Abstract

This notice is to notify the market of the Development Bank of Wales' intention to award a contract for the IT security services.The Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. his transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security posture caused by the fragmentation of tools and services.Currently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate.The Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on-going management of the platform, and providing proactive advice and recommendations to improve the security of our Microsoft estate, drawing on Microsoft’s insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.

Full notice text

Scope

Procurement reference

DBW00105

Procurement description

This notice is to notify the market of the Development Bank of Wales' intention to award a contract for the IT security services.

The Development Bank of Wales currently operate a security operation model that is split across multiple providers and technologies. To help reduce the complexity of this approach and improve our ability to effectively monitor, respond to, and mitigate security threats, the Banc are investigating the feasibility of implementing a unified Microsoft security operations platform, the day-to-day management of which would be supported by a single provider. his transition will not only streamline our processes and technology, but also increase the efficiency of our incident response efforts and reduce the potential for gaps in our security posture caused by the fragmentation of tools and services.

Currently, our Azure services are handled by Service Provider A, which focuses on optimising our cloud infrastructure. Service Provider B is responsible for managing our Microsoft 365 environment and on-premises infrastructure, ensuring that both are configured and maintained to meet our operational needs. Additionally, our managed detection and response (MDR) services are provided by Service Provider C, which utilises their own proprietary platform to deliver continuous monitoring, threat detection, and incident response across our IT estate.

The Banc is investigating replacing Service Provider C with a new Service Provider that will take over the managed detection and response function, utilising the Microsoft unified security platform. They will be responsible for the implementation, configuration and on-going management of the platform, and providing proactive advice and recommendations to improve the security of our Microsoft estate, drawing on Microsoft’s insights, but will not be responsible for any configuration outside of the security platform. The new provider will collaborate closely with Service Providers A and B to align security practices ensuring that our entire IT environment remains protected against emerging threats.

Contracting authority

Development Bank of Wales

Identification register:

GB-PPON

Address 1: Development Bank of Wales plc

Town/City: Cardiff

Postcode: CF10 4BZ

Country: United Kingdom

Website: http://www.developmentbank.wales

Public Procurement Organisation Number: PCWM-6438-QYVP

Contact name: Leanne Millard

Email: procurement@developmentbank.wales

Telephone: +442920801715

Organisation type: Public authority - central government

Devolved regulations that apply: Wales

Supplier

Wavenet Limited

Identification register:

GB-PPON

Address 1: Second Floor One Central Boulevard, Central Boulevard

Town/City: Solihull

Postcode: B90 8BG

Country: United Kingdom

Public Procurement Organisation Number: PGGC-2348-BVLG

Email: shekul.islam@wavenet.co.uk

Type:

Large

Connected people/organisations

Venetia Copper

Philip Grannum

Stewart Motler

At One Central Boulevard, Solihull, B90 8BG

Thetis Parentco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD

Thetis Midco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD

Wn Corporate Limited - Second Floor One Central Boulevard, Central Boulevard Blythe Valley Park, Shirley, Solihull B90 8BG

William Dawson - One Central Boulevard, Solihull B90 8BG

Macquarie Group Limited - 1 Elizabeth Street, Sydney AU-NSW 2000

Thetis Bidco Limited - Second Floor One Central Boulevard, Central Boulevard Blythe Valley Park, Shirley, Solihull B90 8BG

Thetis Topco Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD

Mprc Europe Ltd - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD

Macquarie Principal Finance UK Limited - Ropemaker Place, 28 Ropemaker Street, London EC2Y 9HD

Procedure

Procedure type

Competitive flexible procedure

Contract

IT Security Services

ID: 1

Status: Pending

Related lots

Date the contract will be signed (estimated)

21 July 2025, 23:59PM

Can this contract be extended?: Yes

Value

1500000 GBP Excluding VAT

1800000 GBP Including VAT

Main category

Services

CPV classifications

72000000 - IT services: consulting, software development, Internet and support

Delivery regions

UK - United Kingdom

Is the total value above threshold?

Above threshold

Contract dates (estimated)

22 July 2025, 00:00AM to 17 July 2030, 23:59PM

Extension end date (if all the extensions are used): 17 July 2033

Suppliers

GB-PPON-PGGC-2348-BVLG

Coding

Commodity categories

ID	Title	Parent category
There are no commodity categories for this notice.

Delivery locations

ID	Description
1000	WALES

Document family

Notice details
MAR503773: IT Security Services Publication date: 20 March 2025 Deadline date: 09 June 2025 12:00 Notice type: UK4 Version: 1 Authority name: Development Bank of Wales
JUL525360: Award of IT Security Sevices Publication date: 08 July 2025 Deadline date: Notice type: UK6 Version: 1 Authority name: Development Bank of Wales
JUL531345: IT Security Services Publication date: 31 July 2025 Deadline date: Notice type: UK7 Version: 1 Authority name: Development Bank of Wales

About the buyer

Main contact:: n/a
Admin contact:: n/a
Technical contact:: n/a
Other contact:: n/a

Further information

Date	Details

Award of IT Security Sevices

Contents