---
title: "Cyber Third Party Risk Management Tool"
ocid: "ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "British Business Bank"
published: "2026-10-19"
---

# Cyber Third Party Risk Management Tool

Buyer: British Business Bank  
Current stage: Award  
OCID: ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35.json)

## Summary

British Business Bank PLC procured a cyber third-party risk management tool, an IT software service for automating and managing cybersecurity risks across its supply chains. The tool is intended to improve the bank’s engagement with suppliers and support compliance within those supply chains. The procurement is classified as a service, and delivery is listed in the United Kingdom. The requirement centres on software that helps the bank oversee cyber risks associated with third parties, rather than a general cybersecurity service. Small and medium-sized enterprises were considered suitable to compete. This gives software providers focused on supplier risk management, cyber-risk oversight and supply-chain compliance a clear indication of the type of capability the buyer sought.

The procurement is complete and was awarded to Softcat PLC. The award was made on 24 April 2026, with a value of £162,481.12. The contract period runs from 14 May 2026 to 13 May 2028. The buyer used a limited competitive quotation process below the procurement threshold. The tender submission deadline was 18 March 2026 at 17:00. The published procurement value was also £162,481.12. The requirement was presented as a single cyber third-party risk management tool, with no separate lots recorded. No award evaluation criteria are stated in the available process details, so the basis used to compare quotations cannot be described here.

For suppliers who did not win, this award demonstrates British Business Bank PLC’s demand for software to automate third-party cyber-risk management and strengthen supplier engagement and supply-chain compliance. A credible competitor for the same requirement would need to show that its tool can manage cybersecurity risks linked to third parties and support these supply-chain objectives. The process was run through competitive quotation below the threshold, and small and medium-sized businesses were considered suitable, indicating that this type of requirement is not confined to large suppliers. The successful award provides a concrete example of the scale of software service and the focused risk-management capability the buyer selected. Suppliers with directly relevant product capability are best placed to compete when this specific requirement next comes to market.

## Notice

Cyber TPRM (Third-Party Risk Management) Tool to automate and manage cybersecurity risks, to improve our engagement and compliance within our supply chains.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/e7b8d1ed-8270-42b8-bf46-7ce7ecd5f7d6 |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Competitive quotation (below threshold) |
| Tender suitability | SME |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 19 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 24 Apr 2026 |
| Contract period | 14 May 2026 - 13 May 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £162,481 |
| Lots value | Not specified |
| Awards value | £162,481 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | British Business Bank |
| Locality | SHEFFIELD |
| Postcode area | Sheffield |
| Postcode | S3 8NH |
| Country | England |
| ITL 1 | TLE Yorkshire and The Humber |
| ITL 2 | TLE3 South Yorkshire |
| ITL 3 | TLE32 Sheffield |
| Local authority | Sheffield |
| Electoral ward | City |
| Westminster constituency | Sheffield Central |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Softcat Plc |

## CPV Codes

### Divisions

- 48 - Software package and information systems

### Codes

- 48517000 - IT software package

## Release History

- 19 Oct 2026 at 08:17 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/e7b8d1ed-8270-42b8-bf46-7ce7ecd5f7d6

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/e7b8d1ed-8270-42b8-bf46-7ce7ecd5f7d6
  19th October 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-b7eb6274-7ff5-408b-b3d3-bf1784162f35.json.