Defence Cyber Security Patch Management Service

This is a managed service contract for the Defence Out of Bounds Update Service (DOBUS), which handles the acquisition, assurance, hosting and distribution of software and firmware patches and updates across Defence networks. The successful supplier will operate and maintain a secure, accredited platform that acquires, verifies and distributes patches to Defence systems. Key responsibilities include: secure hosting and repository management; 24/7 service desk and out-of-hours support; performance monitoring and reporting; governance and security compliance management; change control; and continuous service improvement. The service must support Defence systems classified at OFFICIAL and SECRET levels, ensuring rapid and reliable access to trusted patch content to maintain cyber resilience and enable timely vulnerability remediation. The supplier must deliver high availability and maintain accreditation standards throughout the contract term. This requirement is intended for Direct Award and further details will be published via the UK5 Transparency Notice.