--- title: "BLC-0201 - Cyber Security Services Framework" ocid: "ocds-h6vhtk-0553a6" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0553a6" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0553a6.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0553a6.json" source: "Find A Tender Service" current_stage: "Award" buyer: "BLUELIGHT COMMERCIAL LIMITED" published: "2026-05-07" --- # BLC-0201 - Cyber Security Services Framework Buyer: BLUELIGHT COMMERCIAL LIMITED Current stage: Award OCID: ocds-h6vhtk-0553a6 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0553a6) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0553a6.json) ## Summary BlueLight Commercial Limited has initiated the "BLC-0201 - Cyber Security Services Framework" to establish a multi-supplier open framework for cyber security services accessible to all UK Police Forces and related agencies. Based in London, BlueLight Commercial is a public authority under sub-central government classification. The procurement process is complete as of recent updates, with awards pending since 28 April 2026. They are deploying an open procurement method involving lots for services such as Penetration Testing, Incident Response, Cyber Resilience Audits, and Security Training, designed to run over an 8-year framework period and potentially re-opened for expansions until at least 2034. The procurement emphasizes transparency and efficiency, as seen through competitive awards, a focus on IT consultancy and support within the UK and its territories, and a structured plan to evolve alongside cyber security needs. This tender provides opportunities for diverse businesses, particularly those specializing in cyber security services like consulting, vulnerability management, training, and audit services. With its broad scope and plans for extensive use within UK public sectors, companies of varying sizes, from SMEs to large-scale organizations, can leverage this framework for growth. The framework’s emphasis on re-opening bids every couple of years ensures continuous entry points for businesses to engage, adapt to updates in cyber security standards, and develop long-term relationships with public sector entities. ## Notice BlueLight Commercial are establishing a multi-supplier Open Framework for the provision of Cyber Security Services. The Framework Agreement will be available for use by all UK Police Forces and all other agencies named in the documentation. The Framework is intended to have a total term of eight (8) years and will provide a route to market for the following Cyber Security Services: Lot 1 - Penetration Testing and Vulnerability Management Scanning Services Lot 2 - Cyber Security Incident Response and Planning Services Lot 3 - Cyber Resilience Audit Services Lot 4 - Cyber Security Training Services The Authority plans to be re-open this framework no later than 21/05/2029 to run for a further 3 years. It will then be re-opened no later than 21/05/2032 to run for a further two years. ### Lot Information Penetration Testing & Vulnerability Management Scanning Services Renewal: 3+5 Open Framework Incident Planning and Response Services Renewal: 3+5 Open Framework Cyber Resilience Audit Services Renewal: 3+5 Open Framework Cyber Security Training Services Renewal: 3+5 Open Framework ### Planning Information Market Engagement session, to be held on Microsoft Teams. Open to all Cyber Security suppliers including those who deliver Cyber Security Services, including IT Health Checks, Cyber Security Training, Cyber Security Incident Response and Planning, Cyber Resilience Audit and vulnerability management scanning. During the session BLC will present their proposed activity in relation to a future Cyber Security Services framework and seek feedback from suppliers. ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/041785-2026 | | Notice type | UK6 - Contract Award Notice | | Procurement type | Framework | | Procurement category | Services | | Procurement method | Open | | Procurement method details | Open procedure | | Tender suitability | SME | | Awardee scale | Large, SME | | All stages | Planning, Tender, Award | ## Dates | Field | Value | | --- | --- | | Publication date | 7 May 2026 | | Submission deadline | 31 Oct 2025 | | Future notice date | 18 Aug 2025 | | Award date | 13 Mar 2026 | | Contract period | 21 May 2026 - 21 May 2034 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £59,000,000 | | Lots value | £58,000,000 | | Awards value | £50,000,000 | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Complete | | Lots status | Complete | | Awards status | Active, Cancelled, Pending | | Contracts status | Cancelled | ## Buyer | Field | Value | | --- | --- | | Main buyer | BLUELIGHT COMMERCIAL LIMITED | | Additional buyers | Missing | | Locality | LONDON | | Post town | South West London | | Postcode | SW1P 3JS | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI3 Inner London - West | | ITL 3 | TLI35 Westminster and City of London | | Local authority | Westminster | | Electoral ward | St James's | | Westminster constituency | Cities of London and Westminster | | Delivery location | Not specified | ## Supplier | Field | Value | | --- | --- | | Number of suppliers | 25 | | Supplier names | ACTICA CONSULTING; AMENTUM CLEAN ENERGY; AMETHYST RISK MANAGEMENT; ARCANUM INFORMATION SECURITY; ARISTI; BAE SYSTEMS APPLIED INTELLIGENCE; CLARANET; CY4OR LEGAL; CYPFER; DELOITTE; DIGITALXRAID; DIONACH; GOACO GROUP; LEONARDO; LIVERPOOL UNIVERSITY HOSPITAL NHS FT - TRADING AS MIAA; MTI TECHNOLOGY; NCC GROUP SECURITY SERVICES; NETTITUDE; PRISM INFOSEC; ROC TECHNOLOGIES; RUPTURA INFOSECURITY; SALUS DIGITAL SECURITY; SUDOCYBER; TELEFÓNICA TECH NORTHERN IRELAND; TNMA CONSULTING | ## CPV Codes ### Divisions - 48 - Software package and information systems - 72 - IT services: consulting, software development, Internet and support - 80 - Education and training services ### Codes - 48931000 - Training software package - 72000000 - IT services: consulting, software development, Internet and support - 72150000 - Computer audit consultancy and hardware consultancy services - 72220000 - Systems and technical consultancy services - 72222000 - Information systems or technology strategic review and planning services - 72222100 - Information systems or technology strategic review services - 72222300 - Information technology services - 72223000 - Information technology requirements review services - 72224200 - System quality assurance planning services - 72225000 - System quality assurance assessment and review services - 72246000 - Systems consultancy services - 72254000 - Software testing - 72254100 - Systems testing services - 72590000 - Computer-related professional services - 72610000 - Computer support services - 72611000 - Technical computer support services - 72800000 - Computer audit and testing services - 72810000 - Computer audit services - 72820000 - Computer testing services - 80500000 - Training services ## Release History - 7 May 2026 at 09:37 - Award - UK6 - Contract Award Notice - https://www.find-tender.service.gov.uk/Notice/041785-2026 - 6 May 2026 at 08:33 - TenderCancellation - UK12 - Procurement Termination Notice - https://www.find-tender.service.gov.uk/Notice/041336-2026 - 2 Apr 2026 at 16:31 - Award - UK6 - Contract Award Notice - https://www.find-tender.service.gov.uk/Notice/031155-2026 - 1 Apr 2026 at 08:24 - TenderCancellation - UK12 - Procurement Termination Notice - https://www.find-tender.service.gov.uk/Notice/030108-2026 - 23 Mar 2026 at 13:07 - Award - UK6 - Contract Award Notice - https://www.find-tender.service.gov.uk/Notice/026259-2026 - 8 Oct 2025 at 15:13 - TenderUpdate - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/063425-2025 - 22 Sep 2025 at 07:45 - TenderUpdate - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/058321-2025 - 19 Sep 2025 at 11:49 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/058109-2025 - 26 Jun 2025 at 10:17 - PlanningUpdate - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/035333-2025 - 25 Jun 2025 at 15:17 - Planning - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/035182-2025 ## Documents - https://www.find-tender.service.gov.uk/Notice/041785-2026 7th May 2026 - Contract award notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/041336-2026 6th May 2026 - Procurement termination notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/031155-2026 2nd April 2026 - Contract award notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/030108-2026 1st April 2026 - Procurement termination notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/026259-2026 23rd March 2026 - Contract award notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/063425-2025 8th October 2025 - Tender notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/058321-2025 22nd September 2025 - Tender notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/058109-2025 19th September 2025 - Tender notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/035333-2025 26th June 2025 - Preliminary market engagement notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/035182-2025 25th June 2025 - Preliminary market engagement notice on Find a Tender - https://sell2.in-tend.co.uk/blpd/home ## Notice URLs - http://KPMG.CO.UK - http://Softcat.com - http://advania.co.uk - http://dxc.com - http://ejnlabs.com/ - http://wavenet.co.uk/ - http://www.actica.co.uk - http://www.amentum.com - http://www.aristi.co.uk - http://www.bluelightcommercial.police.uk/ - http://www.bridewell.com - http://www.bsigroup.com - http://www.cyberfortgroup.com - http://www.cyfor.co.uk - http://www.cypfer.com - http://www.goaco.com/ - http://www.kocho.co.uk/ - http://www.nccgroup.com/ - http://www.resillion.com/ - http://www.roctechnologies.com - http://www.sapphire.net - http://www.telefonicatech.uk - http://www.trustmarque.com - http://www.uk.leonardo.com/ - https://arcanum-cyber.com - https://csacyber.com/ - https://instil.co - https://mti.com/ - https://prisminfosec.com - https://ruptura-infosec.com/ - https://saluscyber.com/ - https://secquest.co.uk - https://sudocyber.net - https://www.6dg.co.uk/ - https://www.amethystrisk.com/ - https://www.baesystems.com/en/digital/home - https://www.cclsolutionsgroup.com/ - https://www.claranet.com/uk/ - https://www.codasecurity.co.uk - https://www.cyberis.com/ - https://www.d2na.com - https://www.deloitte.com/uk/en.html - https://www.digitalxraid.com - https://www.dionach.com - https://www.grcsolutions.io - https://www.legislation.gov.uk/ukpga/2023/54/contents - https://www.lrqa.com/en-gb/cyber-security-services/ - https://www.miaa.nhs.uk/ - https://www.modux.co.uk/ - https://www.rootshellsecurity.net/ - https://www.tnma.co.uk/ ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0553a6. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0553a6.json.