---
title: "NCSC Cyber Assessment Framework (CAF) Implementation"
ocid: "ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "N H S SHARED BUSINESS SERVICES"
published: "2025-02-19"
---

# NCSC Cyber Assessment Framework (CAF) Implementation

Buyer: N H S SHARED BUSINESS SERVICES  
Current stage: Award  
OCID: ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9.json)

## Summary

The NHS Shared Business Services (NHS SBS) has concluded a procurement process titled "NCSC Cyber Assessment Framework (CAF) Implementation" within the Systems Consultancy Services industry. The contract, valued at £33,000, has been awarded to tmc3 Limited. The process involved a selective procurement method via a call-off from a framework agreement. Key dates to note include the tender period end date on 16th December 2024, the award date on 16th December 2024, and the contract period from 27th January 2025 to 31st March 2025. The project location is NHS SBS, based in London, postcode E14 4PU.

This tender represents a significant opportunity for businesses specializing in cyber security, systems consultancy, and computer support services to collaborate with NHS SBS. The requirements involve analysis and assistance with the NHS Data Security and Protection Toolkit (DSPT) and CAF for 2024-25, as well as producing a roadmap for future compliance. SMEs and voluntary, community, and social enterprises (VCSEs) are particularly encouraged to take part in similar opportunities, which can drive business expansion and increase industry presence through high-profile public sector engagements.

## Notice

The National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) provides a way of assessing the cyber risks to essential NHS functions, looking at how these are managed, and which organisation will be responsible. As part of the CAF, the NHS Counter Fraud Authority (NHSCFA) is required to submit supporting evidence for a compliant submission to the NHS DSPT-CAF return for 2024-25. NHS Counter Fraud Authority are seeking to procure support with the following requirements: * Analysis of the NHSCFA Position regarding NHS Data Security and Protection Toolkit (DSPT) and CAF requirements for 2024-25. * Assistance, alongside NHSCFA teams to collect, prepare & submit evidence required to form a compliant submission to the NHS DSPT-CAF return for 2024-25. * Produce a roadmap to improve NHSCFA position in meeting DSPT-CAF requirements for future years, initially Baseline then Enhanced CAF requirements

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/ba1c519f-cbea-4429-ab73-2ace0d2c5789 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME, VCSE |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 19 Feb 2025 |
| Submission deadline | 16 Dec 2024 |
| Future notice date | Not specified |
| Award date | 16 Dec 2024 |
| Contract period | 27 Jan 2025 - 31 Mar 2025 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £33,000 |
| Lots value | Not specified |
| Awards value | £33,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | N H S SHARED BUSINESS SERVICES |
| Locality | LONDON |
| Post town | East London |
| Postcode | E14 4PU |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI42 Tower Hamlets |
| Local authority | Tower Hamlets |
| Electoral ward | Canary Wharf |
| Westminster constituency | Poplar and Limehouse |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | TMC3 |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72246000 - Systems consultancy services
- 72610000 - Computer support services

## Release History

- 19 Feb 2025 at 07:41 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/ba1c519f-cbea-4429-ab73-2ace0d2c5789

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/ba1c519f-cbea-4429-ab73-2ace0d2c5789
  19th February 2025 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-f63cbf6d-9d5e-45e8-952f-60da52fb4da9.json.