Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

CS0853 2026 Red Team Exercise

Pension Protection Fund

This public procurement record has 2 releases in its history.

AwardUpdate

08 Oct 2026 at 11:34

Award Notice
Award

08 Oct 2026 at 11:30

Award Notice
Summary of the contracting process

The Pension Protection Fund (PPF) bought a red team cyber security assessment: a simulated cyber attack designed to test its security controls, processes and incident response capabilities. The work covers both the PPF’s virtual and physical estate and supports its requirement for an annual assessment. This is a specialist cyber security testing and computer audit service, delivered for the PPF in Croydon, Surrey. The contract is for the 2026 assessment, rather than a general cyber security support service. Its focus is adversarial testing of the organisation’s defences and response arrangements, giving relevant suppliers a clear indication of the technical scope and the buyer’s recurring requirement.

The procurement has been awarded to CYBERCX UK LTD. The PPF used a selective call-off from the GCA G Cloud 14 framework, with a one-year contract and an option for a further year. The award was made on 16 September 2026 for £194,400; the estimated procurement value was £195,000. The contract period runs from 6 October 2026 to 5 October 2027. The assessment was scheduled to commence in October 2026, and the tender submission deadline was 9 September 2026. The process is complete. The award data does not state the evaluation criteria, so the basis on which bids were compared cannot be described.

For cyber security firms, this award demonstrates recurring demand from the PPF for a focused red team assessment, rather than routine security monitoring or general consultancy. A credible competitor would need to plan and execute a simulated attack across both virtual and physical environments, assess controls and processes, and test incident response capability. The work calls for expertise spanning technical security testing and the organisation’s operational response to an incident. The PPF identified the opportunity as suitable for SMEs, so smaller specialist providers may be relevant competitors. The framework call-off route is also significant: suppliers seeking similar PPF work would need to be positioned to compete through the relevant G Cloud framework. The requirement is specifically an annual assessment of the PPF’s own estate.

How relevant is this notice?

Notice Information

Notice Title

CS0853 2026 Red Team Exercise

Notice Description

A 1+1 contract via the GCA G Cloud 14 (RM1557.14) framework. The PPF requires an annual Red Team Assessment to test its cyber security controls, processes and incident response capabilities through a simulated cyber attack against both its virtual and physical estate. The 2026 assessment is scheduled to commence in October 2026.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/51c1790b-5fe0-46d3-9b55-e935d1585b79
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
£195,000 £100K-£500K
Lots Value
Not specified
Awards Value
£194,400 £100K-£500K
Contracts Value
Not specified

Notice Dates

Publication Date
8 Oct 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
16 Sep 20261 months ago
Contract Period
6 Oct 2026 - 5 Oct 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Pension Protection Fund
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CROYDON, SURREY
Postcode
CR0 2NA
Postcode Area
Croydon
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI6 Outer London - South
Small Region (ITL 3)
TLI62 Croydon
Delivery Location
TLJ South East (England)
Local Authority
Croydon
Electoral Ward
Fairfield
Westminster Constituency
Croydon West

Supplier Information

Number of Suppliers
1
Supplier Name

CYBERCX UK LTD

Further Information

Notice Documents

Notice URLs

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...