715884522 - DOBUS Core Contract

Quick Actions

As a subscriber you can save this tender or set notifications for updates.

Description

Provision of the Defence Out of Bounds Update Service (DOBUS), a managed cyber security patch acquisition, assurance, hosting and distribution service for Defence. The requirement includes the operation and maintenance of a secure and accredited platform for the acquisition, verification and distribution of software and firmware patches and updates across Defence networks. Services include secure hosting, repository management, service desk support, out-of-hours assistance, performance reporting, governance, security compliance, change management and continuous service improvement. The Supplier shall provide a highly available service supporting Defence systems operating at OFFICIAL and SECRET classifications, ensuring timely access to trusted patch content to support cyber resilience and vulnerability remediation across Defence.

Award Detail

CPV Codes

• None found

Legal Justification

1. Legal Basis This contract will be awarded in accordance with Section 41 of the Procurement Act 2023 (Direct Award in Special Cases), relying on Schedule 5, Paragraph 20. The Authority is satisfied that this is a defence authority contract and a defence and security contract within the meaning of Section 7 of the Procurement Act 2023. The requirement supports the maintenance and ongoing operation of Defence systems through the provision, assurance and distribution of security updates and patches and is considered to fall within Section 7(1)(c) as services necessary for the maintenance of military and/or sensitive equipment. The Authority is satisfied that direct award is necessary to maintain and enhance the operational capability, effectiveness, readiness, safety and security of the Armed Forces during the contract period. 2. Justification The Authority considers that continuation of the service is necessary to maintain operational effectiveness and support the ongoing management of cyber security risks. A sustained reduction in the service would increase operational risk and reduce the efficiency and resilience of Defence digital and information systems. The contract includes the continued sustainment and enhancement of the existing service to ensure it continues to meet Defence requirements. The Authority has therefore determined that a direct award is necessary and proportionate to maintain the operational effectiveness, resilience and security of this Defence capability while future requirements and procurement options are considered. DOBUS is a Defence cyber security service that supports the provision of software and firmware security updates across Defence systems and contributes to the security and resilience of Defence digital services. DOBUS supports the provision of software and firmware updates across Defence systems and contributes to the effective operation and resilience of Defence digital services. The Authority considers that continuation of the service is necessary to maintain operational effectiveness and ensure continuity of service delivery. This capability supports the ongoing management and distribution of software updates across the Defence estate and remains a critical component of wider Defence digital services. The current capability has been established within Defence infrastructure, processes and technical environments over an extended period. The Authority has identified significant interoperability, transition and delivery considerations associated with introducing alternative arrangements within the required timescales. Consequently, further work is required to assess future technical options, undertake market engagement and develop an informed approach to any future procurement activity. The contract includes sustainment and enhancement activities essential to support the continued operation and development of the service while this work is undertaken. The Authority has therefore determined that a direct award is necessary and proportionate to maintain service continuity and operational effectiveness whilst future requirements and procurement options are developed and assessed. In addition to the grounds relied upon under Schedule 5, Paragraph 20 and Section 7(1)(c) of the Procurement Act 2023, the Authority also considers that technical reasons support the direct award. The services are necessary for the maintenance and ongoing operation of military and sensitive equipment and systems. The capability is closely integrated within Defence technical environments and processes, and any disruption, compromise or unplanned transition would present risks to operational capability, service continuity and security. 3. Reasons for Duration The contract term of 3 years (01 Aug 2026 to 31 July 2029), with break points at the end of Years 1 and 2, represents the period required to maintain continuity of this cyber security capability whilst undertaking service sustainment activities, reviewing longer-term requirements, and assessing future procurement options. The contract duration balances operational necessity with the Authority's intention to consider future competitive procurement arrangements and longer-term capability requirements. 4. Future Procurement During the contract term, the Authority intends to undertake additional market engagement, technical assessment and option analysis to inform the long-term Enterprise Patching strategy. Subject to the outcome of this activity and future approvals, the Authority may undertake a future competitive procurement for the enduring capability.

Other Information

** PREVIEW NOTICE, please check Find a Tender for full details. **

Reference

• ocds-h6vhtk-06cbff
• FTS 071185-2026

Domains

• find-tender.service.gov.uk
• legislation.gov.uk
• gov.uk
• boxxe.com
• mod.gov.uk