External Security Incident and Event Management (SIEM) & Security Operations Centre (SOC) Support Monitoring Service

Ofwat currently operates an internal Security Operations Centre (SOC) within its security team, responsible for monitoring the organisation's SIEM (Security Incident and Event Management) platform. The internal SOC operates during business hours Monday to Friday 9-5pm. To strengthen resilience and deliver comprehensive round-the-clock coverage, enabling full 24/7 security operations, Ofwat now requires a Managed external SIEM and SOC capability to deliver threat detection, analysis, and incident response. This service will operate as an extension of Ofwat's internal security team, offering advanced analytics, threat intelligence, and compliance reporting.