Government’s tax agency has kicked off an engagement process seeking to hear from potential partners that could support the department’s plans to deliver ‘critical enhancements to our security operations centre’

HM Revenue and Customs is seeking market feedback on ambitions to improve its core IT security infrastructure with the aim of better protecting “the integrity of the UK’s financial infrastructure” against emerging threats.

The tax agency has published a commercial notice alerting prospective suppliers of a request-for-information process intended to provide insights on how the department could make improvements to its security operations centre (SOC).

“This RFI seeks solution- and service-related information that would be capable of enhancing HMRC’s SOC through the deployment of advanced technological tools and expertise,” the notice says. “Ideal partners will demonstrate a clear technological roadmap aligned with HMRC’s strategic needs, show a commitment to effective communication, and provide flexible and scalable solutions. A strong focus on long-term collaboration is essential to meet our cybersecurity objectives, as outlined in the RFI documents, effectively safeguarding against the continuously changing global geopolitical and economic landscape.”

Related content

• HMRC creates £500m legacy tech and security programme after merging major projects
• HMRC reports 70% progress in moving 500-plus critical national infrastructure services to cloud
• HMRC records 60% rise in serious personal data incidents in FY24

The department is asking interested parties to respond to the RFI by 27 March. HMRC advises participating firms that “we are seeking answers to our questions… that will be essential for supporting critical enhancements to our SOC”.

The intention is ultimately to sign a three-year contract with its chosen provider beginning in December.

In the early-engagement notice, HMRC stresses the critical nature of its role in supporting government and the wider country – and the resulting need for advanced cyber protections.

“HMRC is a pivotal entity within the UK government, responsible for managing over £800bn annually and serving a broad public sector customer base of more than five million business customers and 45 million individual customers,” it says. “This RFI is initiated to enhance our SOC capabilities to safeguard against sophisticated cyberthreats, which is crucial for maintaining the integrity of the UK’s financial infrastructure and ensuring public trust.”