Cytundeb Fframwaith CymruSOC 2.0 CymruSOC 2.0 Framework Agreement

Procurement reference

CS/MTCBC/SOC/002

Procurement description

Bydd CymruSOC 2.0 yn darparu fframwaith SOC a reolir cenedlaethol sy'n cynnwys gwasanaeth SOC craidd a reolir a Gwasanaethau Ychwanegol a archebir ar wahân. Rhaid i'r gwasanaeth gynnal parhad canlyniadau gofynnol CymruSOC 1.0, gan gefnogi gwelliant rheoledig, cyfranogiad ehangach ac amgylcheddau technegol amrywiol y Cyfranogwyr.

Rhaid i'r gwasanaeth barhau i fod yn annibynnol ar unrhyw SIEM penodol a rhaid iddo gefnogi trefniadau SIEM ac offer diogelwch eraill sydd naill ai'n eiddo i Gyfranogwyr neu'n drefniadau amgen a gymeradwywyd, lle gellir cyflawni'r canlyniadau gofynnol o ran diogelwch, monitro, rhannu gwybodaeth, rhyngweithrededd a sicrwydd.

Mae rhagor o wybodaeth fanwl ar gael yn y Datganiad o'r Gofynion, a ddarperir fel atodiad yng Ngham 1 ar eDendroCymru.

Mae hwn yn gaffaeliad cydweithredol sy'n cael ei gynnal gan Gyngor Bwrdeistref Sirol Merthyr Tudful (yr Awdurdod Contractio) mewn partneriaeth â Llywodraeth Cymru, a bydd yn ceisio sefydlu Cytundeb Fframwaith un lot gydag un cyflenwr er mwyn galluogi awdurdodau sy'n cymryd rhan i alw i lawr a chreu contractau ar gyfer y gwasanaethau sydd eu hangen arnynt.

Bydd yn ofynnol i'r tendrwr llwyddiannus ymrwymo i Gytundeb Fframwaith gyda'r Awdurdod Contractio ac, wedi hynny, ymrwymo i gontractau unigol gan ddefnyddio templed contract galw i lawr gydag awdurdodau sy'n cymryd rhan drwy'r weithdrefn galw i lawr.

Er budd tryloywder ac er mwyn rhoi gwybod i ddarpar dendrwyr cyn gynted â phosibl, mae'r contractwr presennol wedi nodi y bydd TUPE yn berthnasol i'r caffaeliad hwn. Yn unol â'r rheoliadau, rhaid i'r contractwr presennol a'r contractwr newydd a ddyfernir i'r Fframwaith o ganlyniad i'r caffaeliad hwn gydymffurfio â rheoliadau TUPE lle maent yn berthnasol.

Bydd gwybodaeth TUPE yn cael ei darparu i dendrwyr ar y rhestr fer yng Ngham 3.

CymruSOC 2.0 will provide a national managed SOC framework comprising a Core managed SOC service and separately ordered Plus Services. The service must preserve continuity of the required CymruSOC 1.0 outcomes while supporting controlled improvement, wider participation and different Participant technical environments.

The service must remain SIEM-agnostic and must support approved Participant-owned and alternative SIEM and security tooling arrangements where the required security, monitoring, information-sharing, interoperability and assurance outcomes can be achieved.

Further detailed information can be located in the Statement of Requirements which is provided as an attachment within Stage 1 on eTenderWales.

This is a collaborative procurement being conducted by Merthyr Tydfil County Borough Council (the Contracting Authority) in partnership with Welsh Government and will seek to put in place a single-Lot single supplier Framework Agreement for participating authorities to be able to call off and create contracts for the services they require.

The successful tenderer will be required to enter into a Framework Agreement with the Contracting Authority and subsequently enter into individual contracts, using a call off contract template, with participating authorities via the call off procedure.

In the interests of transparency and to make potential tenderers aware at the earliest stage, the incumbent contractor has indicated TUPE will apply to this procurement. As per the regulations, the incumbent contractor and new contractor awarded to the Framework as a result of this procurement must adhere to the TUPE regulations where they may apply.

TUPE information will be provided to shortlisted tenderers in Stage 3.

Main category

Services

Delivery regions

• UKL - Wales

Total value (estimated, excluding VAT)

90000000.00 GBP to 90000000.00GBP

Contract dates (estimated)

01 April 2027, 00:00AM to 31 March 2034, 23:59PM

Is a framework being established?

Yes

Merthyr Tydfil County Borough Council

Procedure type

Competitive flexible procedure

Is the total value above threshold?

Above threshold

Trade agreements

Government Procurement Agreement (GPA)

Further information about fees

Bydd ardoll y Fframwaith yn daladwy gan gontractwr y Fframwaith i'r Awdurdod Contractio, a bydd gwybodaeth ynghylch hyn yn cael ei darparu i dendrwyr ar y rhestr fer yng Ngham 3 y broses.

A framework levy will be payable by the framework contractor to the contracting authority and this information will be provided to shortlisted tenderers in Stage 3 of the process.

Percentage fee charged to suppliers

0%

Maximum number of suppliers

1

Award method when using the framework

Without reopening competition

Justification for framework term

The contracting authority considers that a 7 year term is required due to the nature of the Security Operations Centre (SOC) services being procured. The requirement includes onboarding a new provider, offboarding the incumbent, migrating security data, and consolidating existing tools into a hybrid SIEM environment. These activities involve significant supplier investment and multi year maturity cycles that cannot be efficiently delivered or recovered within a 4 year term.

A 7 year duration ensures continuity of monitoring and incident response, reduces the operational risk associated with repeated supplier transitions, and aligns with recognised SOC and SIEM technology lifecycles. Accordingly, the authority considers that the nature of the requirement necessitates a 7 year framework under Section 47(3) of the Procurement Act 2023.

Contracting authority locations

• UKL

Contracting authorities that may use the framework

Bydd y Fframwaith ar gael i holl gyrff y Sector Cyhoeddus yng Nghymru ac i sefydliadau sy'n darparu, cefnogi neu alluogi gwasanaethau a asesir yn hanfodol i weithrediad a gwytnwch Cymru.

The Framework will be available to all Public Sector in Wales and organisations that provide, support or enable services assessed as essential to the functioning and resilience of Wales.

Framework operation description

Bydd contractau yn cael eu dyfarnu gan awdurdodau sy'n cymryd rhan drwy ffurfio contract galw i lawr gyda chontractwr y Fframwaith, drwy gwblhau templed contract galw i lawr/ffurflen archebu.

Contracts will be awarded by participating authorities forming a call off contract with the framework contractor via a call off contract template/order form being completed.

CPV classifications

• 72000000 - IT services: consulting, software development, Internet and support

Delivery regions

• UKL - Wales

Lot value (estimated)

90000000.00 GBP Excluding VAT

108000000.00 GBP Including VAT

Criteria used to select suppliers to tender for this lot

true

Sustainability

Small and medium-sized enterprises (SME)

Contract start date (estimated)

01 April 2027, 00:00AM

Contract end date (estimated)

31 March 2034, 23:59PM

Participation

Award criteria

Expression of interest deadline

16 October 2026, 12:00PM

Enquiry deadline

14 October 2026, 12:00PM

Date of award of contract

26 March 2027, 23:59PM

Submission address and any special instructions

Mae’r broses gaffael gyfan yn cael ei chynnal drwy borth e-dendro’r Awdurdod Contractio:https://etenderwales.ukp.app.jaggaer.com/Gellir dod o hyd i Asesiad Gallu Cam 1 drwy chwilio am y rhif cyfeirnod canlynol ar borth eDendroCymru:pqq_33922.The entire procurement process is being conducted on the contracting authority's e-tendering portal:https://etenderwales.ukp.app.jaggaer.com/The Stage 1 Capability Assessment can be found by searching for the following reference number on the eTenderWales portal:pqq_33922

Minimum number of suppliers to be invited to tender

1

Maximum number of suppliers to be invited to tender

6

May tenders be submitted electronically?

Yes

Languages that may be used for submission

• English

Document type

Bydd pob dogfen ar gael drwy borth eDendroCymru yn unig.

Bydd dogfennau ategol yn cael eu darparu ar gamau perthnasol y broses gaffael. Bydd y dogfennau hyn naill ai wedi'u lleoli yn yr adran atodiadau neu o fewn cwestiynau penodol ar eDendroCymru. Gweler isod am fanylion:

Cam 1

Dogfen ITP

Datganiad Drafft o'r Gofynion

Pecyn sleidiau Digwyddiad Ymgysylltu â Chyflenwyr a Chwestiynau ac Atebion (C&A)

Cam 2

Dogfen ITP wedi'i diweddaru

Datganiad Drafft o'r Gofynion

Pecyn sleidiau Digwyddiad Ymgysylltu â Chyflenwyr a Chwestiynau ac Atebion (C&A)

Cam 3

Dogfen Wybodaeth ITT

Dogfennau tendro megis yr Atodlen Brisio

Datganiad o'r Gofynion

Gwybodaeth TUPE (ar ôl derbyn Ffurflen Ymrwymiadau Cyfrinachedd wedi'i chyflwyno)

Cytundeb Fframwaith Drafft

Dogfen Contract Galw i Lawr Drafft

NODYN i dendrwyr: Bwriedir i'r contract galw i lawr ddefnyddio contract Canolradd Swyddfa'r Cabinet (Cabinet Office Mid-Tier Contract (Mid-Tier Contract - GOV.UK)) fel sail ar gyfer creu templed contract galw i lawr CymruSOC 2.0 i'w ddefnyddio gan awdurdodau sy'n cymryd rhan.

All documents will be provided on the eTenderWales portal only.

Supporting documents will be provided at relevant stages of the procurement. These documents will be located either in the attachments area or within specific questions on eTenderWales. See below for details:

Stage 1 ITP Document

draft Statement of Requirements

Supplier Engagement Event slide deck and Q&A

Stage 2 Updated ITP Document

draft Statement of Requirements

Supplier Engagement Event slide deck and Q&A

Stage 3 ITT Information Document

Tender documents such as Pricing Schedule

Statement of Requirements

TUPE information (upon receipt of a submitted Confidentiality Undertakings Form)

draft Framework Agreement

draft Call Off Contract document

NOTE to tenderers: it is intended the call off contract will use the The Cabinet Office Mid-Tier Contract (Mid-Tier Contract - GOV.UK) form of contract as a basis to create the CymruSOC 2.0 call off contract template for use by participating authorities