---
title: "Cyber Incident Response Partner 2026"
ocid: "ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc.json"
source: "Contracts Finder"
current_stage: "Planning"
buyer: "DEFRA"
published: "2025-09-18"
---

# Cyber Incident Response Partner 2026

Buyer: DEFRA  
Current stage: Planning  
OCID: ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc.json)

## Summary

The Department for Environment, Food & Rural Affairs (DEFRA) is seeking a Cyber Incident Response Partner for a contract titled "Cyber Incident Response Partner 2026". This procurement process is currently in the planning stage with key dates including the issue of the Invitation to Tender (ITT) on 3rd December 2025, a tender response deadline of 7th January 2026, and an anticipated contract award date of 3rd March 2026. The location for these services encompasses the UK and its territories, with the main procurement category being IT services, specifically in the area of consultancy, software development, internet, and support. The opportunity is being executed through the RM3764.3 Cyber Security Services 3 Dynamic Purchasing System (DPS).

This tender presents a significant opportunity for businesses specialising in cyber security solutions, particularly those focusing on threat intelligence and forensic investigations. Small and medium-sized enterprises (SMEs) with capabilities in these areas are encouraged to participate as they may find this opportunity aligns well with their service offerings. The DEFRA contract is set for an initial term of three years, with the possibility of two one-year extensions, providing a potential avenue for long-term business growth and collaboration with a key governmental body. Interested parties should register on the DPS to be considered for this tender, offering a path to both immediate projects and future engagements within the public sector's cybersecurity infrastructure.

## Notice

Partnering with Defra Group to as their prime threat intelligence partner, conduct forensic investigations of cyber attacks and respond to incidents for an initial 3-years with two 1 year options to extend. This opportunity will be run through the RM3764.3 Cyber Security Services 3 DPS for enhanced cyber incident response services. *ITT issue date: 03/12/2025 *Tender Response date: 07/01/2026 *Contract Award date: 03/03/2026 * All dates are estimates and could be subject to change at the Authority's discretion. Please register on the DPS here https://supplierregistration.cabinetoffice.gov.uk/dps/RM37643?nav=0 to be considered for this opportunity.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/74f156d4-1165-4c55-a2b0-6238986183ad |
| Notice type | Market Engagement Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Not Specified |
| Procurement method details | Not specified |
| Tender suitability | SME |
| Awardee scale | Not specified |
| All stages | Planning |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 18 Sep 2025 |
| Submission deadline | Not specified |
| Future notice date | 7 Jan 2026 |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Planning |
| Lots status | Not specified |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | DEFRA |
| Locality | LONDON |
| Post town | South West London |
| Postcode | SW1P 3JR |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 18 Sep 2025 at 09:45 - Planning - Market Engagement Notice - https://www.contractsfinder.service.gov.uk/Notice/74f156d4-1165-4c55-a2b0-6238986183ad

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/74f156d4-1165-4c55-a2b0-6238986183ad
  18th September 2025 - Early engagement notice on Contracts Finder

## Notice URLs

- https://supplierregistration.cabinetoffice.gov.uk/dps/RM37643?nav=0

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-6beba183-61fe-4007-b60f-2be76f5c1fbc.json.