Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Third-Party Cyber Security Risk Management and Supply Chain Assurance Platform

The Mayor and Commonalty and Citizens of the City of London

This public procurement record has 1 release in its history.

Award

08 Oct 2026 at 13:32

UK7 - Contract Details Notice
Summary of the contracting process

The City of London Corporation procured a third-party cyber security risk management and supply-chain assurance platform. The software assesses and monitors suppliers’ security controls, keeps an auditable assurance record, manages remediation, identifies emerging threats and maps wider supply-chain dependencies, including beyond directly contracted suppliers. The service relates to software and supporting software development. Delivery is in the United Kingdom. The defined requirement depends on continuity of the established Risk Ledger network, existing supplier assurance records and connected relationships.

The procurement is complete and the contract has been awarded to Risk Ledger Ltd. The Corporation made a below-threshold direct award without competition, citing the need to maintain continuity of the established network, assurance records and connected relationships. The contract was signed on 1 October 2026 and runs from 1 October 2026 to 30 September 2030. Its value is £104,334.59 excluding VAT and £125,201.51 including VAT. There was one lot, covering the platform and associated service. The procurement was evaluated through a direct award; no separate evaluation criteria are stated.

For suppliers preparing for a future requirement from the City of London Corporation, this award indicates demand for a cyber security assurance platform that can assess and monitor third-party suppliers, track remediation and threats, and provide an auditable record of supplier controls and wider supply-chain dependencies. Credibility would depend on demonstrating that the service can support these functions and handle connected supplier relationships and assurance records at the required scale. Continuity with the buyer’s existing network and data was central to this award, so a prospective alternative would need to show how it can meet the operational requirement and address transition or continuity concerns. This is evidence of a specific platform and assurance requirement, rather than a general call for cyber security services.

How relevant is this notice?

Notice Information

Notice Title

Third-Party Cyber Security Risk Management and Supply Chain Assurance Platform

Notice Description

The software supports third-party cyber security risk management and supply-chain assurance. The service is used to assess and monitor supplier security controls, maintain an auditable assurance record, manage remediation activity, identify emerging threats and understand wider supply-chain dependencies beyond directly contracted suppliers. This is a direct award because the defined requirement includes continuity of the established Risk Ledger network, existing supplier assurance records and connected relationships, which cannot be supplied by an alternative provider.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-0783be
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/095200-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Below threshold - without competition
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support

CPV Codes

48000000 - Software package and information systems

72262000 - Software development services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£104,334 £100K-£500K

Notice Dates

Publication Date
8 Oct 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
1 Oct 2026 - 30 Sep 2030 4-5 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
The Mayor and Commonalty and Citizens of the City of London
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CITY OF LONDON
Postcode
EC2P 2EJ
Postcode Area
Central London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI4 Inner London - East
Small Region (ITL 3)
TLI43 Haringey and Islington
Delivery Location
Not specified
Local Authority
Islington
Electoral Ward
Clerkenwell
Westminster Constituency
Islington South and Finsbury

Supplier Information

Number of Suppliers
1
Supplier Name

RISK LEDGER LTD.

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...