Planning

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Cyber Security 4

Crown Commercial Service

This public procurement record has 3 releases in its history.

PlanningUpdate

14 Aug 2026 at 14:18

UK2 - Preliminary Market Engagement Notice
Planning

10 Jul 2026 at 11:52

UK2 - Preliminary Market Engagement Notice
Planning

07 Jul 2026 at 10:20

UK1 - Pipeline Notice
Summary of the contracting process

The Government Commercial Agency plans to establish Cyber Security 4, a central government framework giving contracting authorities access to cyber security services. The scope covers IT consulting, software development, internet and support services, including the specialist cyber security expertise needed by public sector organisations. The arrangement is intended to replace the existing Cyber Security Services 3 dynamic purchasing system. Services will be supplied to contracting authorities using the framework; the procurement data does not identify a single delivery location. The buying organisation is the Government Commercial Agency, a central government public authority based in Liverpool. This is a services procurement under the Procurement Act 2023, aimed at suppliers operating across cyber security and related IT service disciplines.

This procurement is at the planning stage: the buyer has announced its intention to procure, but has not issued an invitation to tender. The expected method is a framework agreement, with one planned lot and a contract period from 12 April 2028 to 11 April 2036. The estimated value is £3,000,000,000 excluding VAT, or £3,600,000,000 including VAT. Pre-market engagement is scheduled to take place before the invitation to tender is released, with relevant information expected by 1 October 2027. The buyer expects the next notice to be published by 13 October 2027. The procurement is above the relevant threshold, and the planned lot is identified as suitable for small and medium-sized enterprises.

This procurement is likely to suit established cyber security providers and IT consultancies able to deliver services across cyber security, software development, internet services and technical support for public sector customers. Suppliers with broad technical capability may be well placed because the planned framework is intended to give multiple contracting authorities access to cyber security services rather than serving one individual organisation. Small and medium-sized enterprises are expressly considered suitable for the planned lot, so specialist firms as well as larger providers should prepare to assess the requirements. Businesses should use the pre-market engagement phase to understand the buyer’s priorities, shape the eventual specification and prepare evidence of relevant cyber security delivery capability, service capacity and public sector support experience. It cannot be bid for yet.

How relevant is this notice?

Notice Information

Notice Title

Cyber Security 4

Notice Description

This RM3764.4 Cyber Security 4 let under Procurement Act 2023 gives contracting authorities access to cyber security services. It will replace the existing Cyber Security Services 3 DPS - https://www.gca.gov.uk/agreements/RM3764.3. When contacting GCA regarding this agreement, please ensure that you reference the agreement details in all correspondence.

Planning Information

Pre-market engagement will take place prior to the ITT release. All relevant information will be published on GCA website https://www.gca.gov.uk/agreements/RM3764.4

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06c4da
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/077724-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£3,000,000,000 £1B-£10B
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
14 Aug 20261 months ago
Submission Deadline
Not specified
Future Notice Date
13 Oct 20272 years to go
Award Date
Not specified
Contract Period
12 Apr 2028 - 11 Apr 2036 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Planned
Lots Status
Planned
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Crown Commercial Service
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LIVERPOOL
Postcode
L3 9PP
Postcode Area
Liverpool
Country
England
Major Region (ITL 1)
TLD North West (England)
Basic Region (ITL 2)
TLD7 Merseyside
Small Region (ITL 3)
TLD72 Liverpool
Delivery Location
Not specified
Local Authority
Liverpool
Electoral Ward
City Centre North
Westminster Constituency
Liverpool Riverside

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...