Security Managed Detection and Response Service
Framework Description
This is Lincolnshire County Council's requirement for a Security Managed Detection and Response (MDR) service, bought through Crown Commercial Service's Cyber Security Services 3 DPS (RM3764.3). It is a single call-off contract under that DPS rather than a framework the council runs itself. The aim is to protect council services and residents' personal data from cyber threats.
Context & Use Case
Lincolnshire County Council holds personal data on its residents and runs services that depend on secure systems. It used the CCS DPS so that it could run a competition among suppliers already admitted for cyber security services, rather than a full open tender. The requirement was published on Find a Tender in 2024 (notice 024945-2024).
Scope of Services
Expert monitoring and response to security threats Security incident and event management and analysis Monitoring of online exposure and risk Digital forensics and incident response Optional network intrusion detection
Lots
See framework link
Who Can Apply
Managed security service providers offering MDR, security incident and event management, digital forensics and incident response. Only suppliers admitted to the Cyber Security Services 3 DPS (RM3764.3) could bid. That DPS is listed as running until 13 February 2029, so suppliers can still apply to join it for future council requirements.
Buyer Benefits
Using a CCS DPS gives councils pre-checked cyber suppliers and standard terms, so a specialist service can be bought faster than through an open tender. An MDR model gives expert monitoring of and response to threats, with forensics available when an incident happens, without the cost of building that capability in-house.
Next Steps
Check the Government Commercial Agency's page for Cyber Security Services 3 (RM3764.3); the agency took over from CCS on 1 April 2026. If you are not admitted, apply to join before 13 February 2029. Prepare MDR service descriptions, incident response case studies, relevant cyber accreditations and evidence of security-cleared staff, so you can respond quickly when councils run competitions.
How Athena Can Help
Cyber security call-offs like this go only to suppliers already on the right agreements. Athena's framework and DPS applications service prepares your application to join RM3764.3 and identifies other cyber routes worth being on.
When councils run a competition, our technical bid writers translate your MDR service into answers evaluators can score, and our pricing support for public bids helps you price managed services to win and still make a profit. We also check bids for compliance before submission.
