---
title: "Cyber Incident Response Partner Service"
ocid: "ocds-h6vhtk-05d0ba"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-05d0ba"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-05d0ba.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-05d0ba.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "DEPARTMENT FOR ENVIRONMENT, FOOD AND RURAL AFFAIRS"
published: "2026-04-01"
---

# Cyber Incident Response Partner Service

Buyer: DEPARTMENT FOR ENVIRONMENT, FOOD AND RURAL AFFAIRS  
Current stage: Award  
OCID: ocds-h6vhtk-05d0ba

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-05d0ba)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-05d0ba.json)

## Summary

The Department for Environment, Food and Rural Affairs (Defra) has completed the contracting process for the provision of Cyber Incident Response Partner Services, with KPMG LLP being awarded the contract. Located in London, and aimed at the information technology services industry, this contract seeks to enhance Defra's capabilities in responding to significant cybersecurity incidents through expert-level reactive support. Initially initiated under a tender process, the procurement followed a selective, restricted procedure, with technical quality accounting for 70% of the award criteria and cost 30%. Key stages included the contract signing on 3rd March 2026. Although the award stage is completed, there had been an earlier planning stage for a similar service with planned issue dates set for December 2025, including a tender response deadline on 7th January 2026, and options for post-incident reviews and staff development strategies.

This procurement process offers substantial opportunities for businesses specialising in cybersecurity and information technology services, particularly those that can meet the enhanced assurance level required by the National Cyber Security Centre (NCSC). Companies that possess strengths in forensic investigations, threat intelligence, and cybersecurity incident response would be well-suited to compete for such tenders. The structured procurement process via the RM3764.3 Cyber Security Services 3 DPS, combined with the DPS registration requirement, presents a streamlined route for qualified suppliers to offer their expertise. With the substantial contract value of £350,000 allocated for the planned process, business growth prospects are significant for firms capable of executing comprehensive cybersecurity strategies and services for governmental bodies such as Defra.

## Notice

To enable Defra Group to secure an NCSC assured (to the enhanced level) Cyber Incident Response (CIR) Partner capable of delivering expert-level reactive support in the event of a significant cyber security incident.

### Lot Information

Lot 1

Call-off Contract awarded via RM3764.3 Cyber Security Services 3 DPS and run through the Authority's eProcurement System.

Options: 1. Post-incident policy review or procedural recommendations
2. Staff Development based on Lessons Learned
3. Playbook reviews
4. Scenario based testing or simulation exercises
5. Threat workshops 
6. Configuration reviews
7. Pre-mortems and risk stress testing
8. PAN testing
9. Cyber exercising

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/030301-2026 |
| Notice type | Planning Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Restricted procedure |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Planning, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 1 Apr 2026 |
| Submission deadline | Not specified |
| Future notice date | 24 Mar 2026 |
| Award date | 3 Mar 2026 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £350,000 |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £96,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | DEPARTMENT FOR ENVIRONMENT, FOOD AND RURAL AFFAIRS |
| Additional buyers | DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS |
| Locality | LONDON |
| Post town | South West London |
| Postcode | SW1P 4DF |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | TLI32 Westminster |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | KPMG |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services

## Release History

- 1 Apr 2026 at 11:09 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/030301-2026
- 21 Oct 2025 at 12:41 - Planning - Planning Notice - https://www.find-tender.service.gov.uk/Notice/067105-2025

## Notice URLs

- https://defra-family.force.com/s/Welcome
- https://kpmg.com/uk/en.html
- https://www.gov.uk/government/organisations/department-for-environment-food-rural-affairs

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-05d0ba. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-05d0ba.json.