Tender

Cyber Assessment Framework (CAF) Review

ENVIRONMENT AGENCY

This public procurement record has 1 release in its history.

Tender

11 May 2026 at 08:17

UK4 - Tender Notice
Summary of the contracting process

The Environment Agency is inviting tenders for a "Cyber Assessment Framework (CAF) Review" as part of an active procurement process. This opportunity falls within the information technology services industry and is part of the central public authority category under the UK Government. The procurement method being employed is an open competition, specifically intended for a below-threshold procurement process. The project aims to appoint an NCSC-approved supplier to assess and enhance the agency's cyber resilience through a structured framework. The contract is valued at £50,000, with a gross amount of £60,000, and requires completion between 1st July 2026 and 30th September 2026. Key dates include the submission deadline on 29th May 2026 and the end of the enquiry period on 22nd May 2026. The location is the United Kingdom, with the agency based in London.

This tender presents substantial opportunities for businesses specialising in cyber security, particularly those approved by the National Cyber Security Centre (NCSC) and experienced with the Cyber Assessment Framework and GovAssure. This is an excellent opportunity for SMEs and VCSEs due to its suitability provisions and financial scope. The contract offers businesses the chance to contribute to a crucial area of national infrastructure, enhancing cyber resilience for a major government agency. Companies with a robust approach to security assessments and the ability to articulate practical improvement plans are well-placed to benefit from this engagement by strengthening their credentials and expanding their presence in public sector projects.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Information

Notice Title

Cyber Assessment Framework (CAF) Review

Notice Description

The Environment Agency is seeking to appoint a NCSC-approved supplier to undertake an independent Cyber Assessment Framework (CAF) assessment. This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF. Cyber threats continue to increase in both frequency and sophistication. In line with UK Government expectations and best practice, CAF provides the standard mechanism for assessing cyber resilience for organisations delivering essential functions. This RFQ invites NCSC-approved suppliers with demonstrable CAF and GovAssure aligned experience to propose an approach for delivering a robust, evidence based assessment and a practical roadmap for improvement. The primary objectives of this engagement are to: * Perform a comprehensive current state assessment against all relevant CAF objectives, principles, and outcomes. * Identify and clearly articulate gaps between the current state and the target CAF aligned state. * Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment. * Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-069540
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/042798-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Below threshold - open competition
Tender Suitability
SME, VCSE
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72222300 - Information technology services

Notice Value(s)

Tender Value
£50,000 Under £100K
Lots Value
£50,000 Under £100K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
11 May 20263 days ago
Submission Deadline
29 May 20263 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
30 Jun 2026 - 30 Sep 2026 1-6 months
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
ENVIRONMENT AGENCY
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1P 4DF
Post Town
South West London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified
Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-069540-2026-05-11T09:17:03+01:00",
    "date": "2026-05-11T09:17:03+01:00",
    "ocid": "ocds-h6vhtk-069540",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PNWW-1475-NYLN",
            "name": "Environment Agency",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PNWW-1475-NYLN"
            },
            "address": {
                "streetAddress": "Seacole Building, 2 Marsham Street",
                "locality": "London",
                "postalCode": "SW1P 4DF",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI32"
            },
            "contactPoint": {
                "email": "procurement@defra.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PNWW-1475-NYLN",
        "name": "Environment Agency"
    },
    "tender": {
        "id": "ocds-h6vhtk-069540",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Cyber Assessment Framework (CAF) Review",
        "description": "The Environment Agency is seeking to appoint a NCSC-approved supplier to undertake an independent Cyber Assessment Framework (CAF) assessment. This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF. Cyber threats continue to increase in both frequency and sophistication. In line with UK Government expectations and best practice, CAF provides the standard mechanism for assessing cyber resilience for organisations delivering essential functions. This RFQ invites NCSC-approved suppliers with demonstrable CAF and GovAssure aligned experience to propose an approach for delivering a robust, evidence based assessment and a practical roadmap for improvement. The primary objectives of this engagement are to: * Perform a comprehensive current state assessment against all relevant CAF objectives, principles, and outcomes. * Identify and clearly articulate gaps between the current state and the target CAF aligned state. * Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment. * Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.",
        "status": "active",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72222300",
                        "description": "Information technology services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 60000,
            "amount": 50000,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Below threshold - open competition",
        "mainProcurementCategory": "services",
        "aboveThreshold": false,
        "submissionMethodDetails": "Please confirm by email, receipt of these documents and whether you intend to submit a quote or not. Your response should be returned to the following email address by the date and time specified: Email: digital_IT@environment-agency.gov.uk Date: 29th May 2026 Time: 11:59pm",
        "submissionTerms": {
            "electronicSubmissionPolicy": "notAllowed"
        },
        "tenderPeriod": {
            "endDate": "2026-05-29T23:59:59+01:00"
        },
        "enquiryPeriod": {
            "endDate": "2026-05-22T23:59:59+01:00"
        },
        "lots": [
            {
                "id": "1",
                "status": "active",
                "value": {
                    "amountGross": 60000,
                    "amount": 50000,
                    "currency": "GBP"
                },
                "suitability": {
                    "sme": true,
                    "vcse": true
                },
                "contractPeriod": {
                    "startDate": "2026-07-01T00:00:00+01:00",
                    "endDate": "2026-09-30T23:59:59+01:00"
                },
                "awardCriteria": {
                    "description": "Please see the attached documentation"
                }
            }
        ],
        "documents": [
            {
                "id": "A-15956",
                "documentType": "biddingDocuments",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-15956",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "042798-2026",
                "documentType": "tenderNotice",
                "noticeType": "UK4",
                "description": "Tender notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/042798-2026",
                "datePublished": "2026-05-11T09:17:03+01:00",
                "format": "text/html"
            }
        ]
    },
    "language": "en"
}