Planning

Cyber Incident Response Partner 2026

DEFRA

This public procurement record has 1 release in its history.

Planning

18 Sep 2025 at 09:45

Summary of the contracting process

The Department for Environment, Food & Rural Affairs (DEFRA) is seeking a Cyber Incident Response Partner for a contract titled "Cyber Incident Response Partner 2026". This procurement process is currently in the planning stage with key dates including the issue of the Invitation to Tender (ITT) on 3rd December 2025, a tender response deadline of 7th January 2026, and an anticipated contract award date of 3rd March 2026. The location for these services encompasses the UK and its territories, with the main procurement category being IT services, specifically in the area of consultancy, software development, internet, and support. The opportunity is being executed through the RM3764.3 Cyber Security Services 3 Dynamic Purchasing System (DPS).

This tender presents a significant opportunity for businesses specialising in cyber security solutions, particularly those focusing on threat intelligence and forensic investigations. Small and medium-sized enterprises (SMEs) with capabilities in these areas are encouraged to participate as they may find this opportunity aligns well with their service offerings. The DEFRA contract is set for an initial term of three years, with the possibility of two one-year extensions, providing a potential avenue for long-term business growth and collaboration with a key governmental body. Interested parties should register on the DPS to be considered for this tender, offering a path to both immediate projects and future engagements within the public sector's cybersecurity infrastructure.

How relevant is this notice?

Notice Information

Notice Title

Cyber Incident Response Partner 2026

Notice Description

Partnering with Defra Group to as their prime threat intelligence partner, conduct forensic investigations of cyber attacks and respond to incidents for an initial 3-years with two 1 year options to extend. This opportunity will be run through the RM3764.3 Cyber Security Services 3 DPS for enhanced cyber incident response services. *ITT issue date: 03/12/2025 *Tender Response date: 07/01/2026 *Contract Award date: 03/03/2026 * All dates are estimates and could be subject to change at the Authority's discretion. Please register on the DPS here https://supplierregistration.cabinetoffice.gov.uk/dps/RM37643?nav=0 to be considered for this opportunity.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/74f156d4-1165-4c55-a2b0-6238986183ad
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
18 Sep 20252 months ago
Submission Deadline
Not specified
Future Notice Date
7 Jan 20262 months to go
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Not Specified
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
DEFRA
Contact Name
Sara Bevan
Contact Email
network.procurement@defra.gov.uk
Contact Phone
020 7270 3000

Buyer Location

Locality
LONDON
Postcode
SW1P 3JR
Post Town
South West London
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified

Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc-2025-09-18T10:45:36+01:00",
    "date": "2025-09-18T10:45:36+01:00",
    "ocid": "ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc",
    "language": "en",
    "initiationType": "tender",
    "title": "Cyber Incident Response Partner 2026",
    "planning": {
        "milestones": [
            {
                "id": "1",
                "title": "Engagement end date",
                "type": "engagement",
                "dueDate": "2026-01-07T23:59:59Z"
            }
        ],
        "documents": [
            {
                "id": "1",
                "documentType": "marketEngagementNotice",
                "description": "Early engagement notice on Contracts Finder",
                "url": "https://www.contractsfinder.service.gov.uk/Notice/74f156d4-1165-4c55-a2b0-6238986183ad",
                "datePublished": "2025-09-18T10:45:36+01:00",
                "format": "text/html",
                "language": "en"
            }
        ]
    },
    "tender": {
        "id": "CF-0537800D8d000003VQwdEAG",
        "title": "Cyber Incident Response Partner 2026",
        "description": "Partnering with Defra Group to as their prime threat intelligence partner, conduct forensic investigations of cyber attacks and respond to incidents for an initial 3-years with two 1 year options to extend. This opportunity will be run through the RM3764.3 Cyber Security Services 3 DPS for enhanced cyber incident response services. *ITT issue date: 03/12/2025 *Tender Response date: 07/01/2026 *Contract Award date: 03/03/2026 * All dates are estimates and could be subject to change at the Authority's discretion. Please register on the DPS here https://supplierregistration.cabinetoffice.gov.uk/dps/RM37643?nav=0 to be considered for this opportunity.",
        "status": "planning",
        "classification": {
            "scheme": "CPV",
            "id": "72000000",
            "description": "IT services: consulting, software development, Internet and support"
        },
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "postalCode": "SW1P 3JR"
                    },
                    {
                        "countryName": "British Oversea Territories"
                    },
                    {
                        "countryName": "Channel Islands"
                    },
                    {
                        "countryName": "Europe"
                    },
                    {
                        "countryName": "Isle of Man"
                    },
                    {
                        "countryName": "Rest of the World"
                    },
                    {
                        "countryName": "United Kingdom"
                    }
                ]
            }
        ],
        "suitability": {
            "sme": true,
            "vcse": false
        },
        "mainProcurementCategory": "services"
    },
    "parties": [
        {
            "id": "GB-CFS-225022",
            "name": "DEFRA",
            "identifier": {
                "legalName": "DEFRA"
            },
            "address": {
                "streetAddress": "17 Smith Square",
                "locality": "London",
                "postalCode": "SW1P 3JR",
                "countryName": "UK"
            },
            "contactPoint": {
                "name": "Sara Bevan",
                "email": "network.procurement@defra.gov.uk",
                "telephone": "020 7270 3000"
            },
            "roles": [
                "buyer"
            ]
        }
    ],
    "buyer": {
        "id": "GB-CFS-225022",
        "name": "DEFRA"
    }
}