--- title: "CS0853 2026 Red Team Exercise" ocid: "ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a" markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a.md" json_url: "https://d3tenders.com/contract/ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a.json" source: "Contracts Finder" current_stage: "Award" buyer: "Pension Protection Fund" published: "2026-10-08" --- # CS0853 2026 Red Team Exercise Buyer: Pension Protection Fund Current stage: Award OCID: ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a) [Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a.json) ## Summary The Pension Protection Fund (PPF) bought a red team cyber security assessment: a simulated cyber attack designed to test its security controls, processes and incident response capabilities. The work covers both the PPF’s virtual and physical estate and supports its requirement for an annual assessment. This is a specialist cyber security testing and computer audit service, delivered for the PPF in Croydon, Surrey. The contract is for the 2026 assessment, rather than a general cyber security support service. Its focus is adversarial testing of the organisation’s defences and response arrangements, giving relevant suppliers a clear indication of the technical scope and the buyer’s recurring requirement. The procurement has been awarded to CYBERCX UK LTD. The PPF used a selective call-off from the GCA G Cloud 14 framework, with a one-year contract and an option for a further year. The award was made on 16 September 2026 for £194,400; the estimated procurement value was £195,000. The contract period runs from 6 October 2026 to 5 October 2027. The assessment was scheduled to commence in October 2026, and the tender submission deadline was 9 September 2026. The process is complete. The award data does not state the evaluation criteria, so the basis on which bids were compared cannot be described. For cyber security firms, this award demonstrates recurring demand from the PPF for a focused red team assessment, rather than routine security monitoring or general consultancy. A credible competitor would need to plan and execute a simulated attack across both virtual and physical environments, assess controls and processes, and test incident response capability. The work calls for expertise spanning technical security testing and the organisation’s operational response to an incident. The PPF identified the opportunity as suitable for SMEs, so smaller specialist providers may be relevant competitors. The framework call-off route is also significant: suppliers seeking similar PPF work would need to be positioned to compete through the relevant G Cloud framework. The requirement is specifically an annual assessment of the PPF’s own estate. ## Notice A 1+1 contract via the GCA G Cloud 14 (RM1557.14) framework. The PPF requires an annual Red Team Assessment to test its cyber security controls, processes and incident response capabilities through a simulated cyber attack against both its virtual and physical estate. The 2026 assessment is scheduled to commence in October 2026. ## Key Details | Field | Value | | --- | --- | | Publication source | Contracts Finder | | Latest notice | https://www.contractsfinder.service.gov.uk/Notice/51c1790b-5fe0-46d3-9b55-e935d1585b79 | | Notice type | Award Notice | | Procurement type | Framework | | Procurement category | Services | | Procurement method | Selective | | Procurement method details | Call-off from a framework agreement | | Tender suitability | SME | | Awardee scale | Large | | All stages | Award | ## Dates | Field | Value | | --- | --- | | Publication date | 8 Oct 2026 | | Submission deadline | Not specified | | Future notice date | Not specified | | Award date | 16 Sep 2026 | | Contract period | 6 Oct 2026 - 5 Oct 2027 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £195,000 | | Lots value | Not specified | | Awards value | £194,400 | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Complete | | Lots status | Not specified | | Awards status | Active | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | Pension Protection Fund | | Locality | CROYDON, SURREY | | Postcode area | Croydon | | Postcode | CR0 2NA | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI6 Outer London - South | | ITL 3 | TLI62 Croydon | | Local authority | Croydon | | Electoral ward | Fairfield | | Westminster constituency | Croydon West | | Delivery location | TLJ South East (England) | ## Supplier | Field | Value | | --- | --- | | Number of suppliers | 1 | | Supplier names | CYBERCX UK LTD | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72800000 - Computer audit and testing services ## Release History - 8 Oct 2026 at 11:34 - AwardUpdate - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/51c1790b-5fe0-46d3-9b55-e935d1585b79 - 8 Oct 2026 at 11:30 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/51c1790b-5fe0-46d3-9b55-e935d1585b79 ## Documents - https://www.contractsfinder.service.gov.uk/Notice/51c1790b-5fe0-46d3-9b55-e935d1585b79 8th October 2026 - Awarded contract notice on Contracts Finder ## Notice URLs - https://www.ppf.co.uk ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-01b23618-d711-456b-a083-221243e16c4a.json.