{ "tag": [ "compiled" ], "id": "ocds-h6vhtk-06f933-2026-09-14T13:55:59+01:00", "date": "2026-09-14T13:55:59+01:00", "ocid": "ocds-h6vhtk-06f933", "initiationType": "tender", "parties": [ { "id": "GB-PPON-PDJQ-5588-HWLY", "name": "WLGA", "identifier": { "scheme": "GB-PPON", "id": "PDJQ-5588-HWLY" }, "address": { "streetAddress": "4th Floor, One Canal Parade", "locality": "Cardiff", "postalCode": "Cf10 5BF", "country": "GB", "countryName": "United Kingdom", "region": "UKL22" }, "contactPoint": { "name": "Tom Jones", "email": "tom.jones@wlga.gov.uk", "telephone": "+442922943428" }, "roles": [ "buyer" ], "details": { "url": "http://www.wlga.wales", "classifications": [ { "scheme": "UK_CA_TYPE", "id": "publicAuthoritySubCentralGovernment", "description": "Public authority - sub-central government" }, { "scheme": "UK_CA_DEVOLVED_REGULATIONS", "id": "GB-WLS", "description": "Welsh devolved regulations apply" } ] } }, { "id": "GB-PPON-PJZH-7223-JZDM", "name": "Bridewell Consulting Ltd", "identifier": { "scheme": "GB-PPON", "id": "PJZH-7223-JZDM" }, "address": { "streetAddress": "Thames Tower, Station Road,", "locality": "Reading", "postalCode": "RG1 1LX", "country": "GB", "countryName": "United Kingdom", "region": "UKJ11" }, "contactPoint": { "email": "hello@bridewell.com", "telephone": "03308285880" }, "roles": [ "supplier" ], "details": { "url": "https://www.bridewell.com/", "scale": "large", "vcse": false } } ], "buyer": { "id": "GB-PPON-PDJQ-5588-HWLY", "name": "WLGA" }, "tender": { "id": "WLGA Cyber 02", "legalBasis": { "id": "2023/54", "scheme": "UKPGA", "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents" }, "title": "Continuation of Support for cyber assessment framework in Local Government", "description": "Notice to Direct award contract for the continuation of works to support the implementation of the Cyber assessment framework (CAF) in Welsh local government, provided by Bridewell Consulting Ltd. Direct award justification - Continuation of Existing Supply Change of supplier would cause incompatibility or disproportionate technical difficulty. WLGA proposes to directly award the next phase of the Cyber Assessment Framework (CAF) support contract to Bridewell Consulting Ltd on the basis that changing supplier at this stage would create significant technical, operational and cyber security risks that outweigh any potential benefits of a competitive procurement exercise. The supplier has developed substantial programme-specific knowledge, methodologies, tooling, templates, dashboards and sector intelligence throughout delivery of the CAF programme across Welsh local authorities and Fire and Rescue Services. The supplier has supported organisations through assessment, quality review, critical system mapping, independent feedback and improvement planning activities. As a result, they now possesses a unique understanding of the sector baseline, organisational maturity positions, critical system dependencies and programme governance arrangements. Replacing the current supplier with an alternative supplier would create incompatibility with the existing programme infrastructure, methodologies and assessment approaches already embedded across participating organisations. Significant effort would be required to transfer knowledge, validate prior outputs and align a new supplier to established ways of working, creating a risk of inconsistency in assessment outcomes and reducing comparability with work already completed. This would undermine the continuity and integrity of the national programme. A change of supplier would also introduce material cyber risk. The current programme supports the cyber resilience of critical public services across Wales and provides visibility of sector-wide risks, vulnerabilities and areas requiring intervention. Any interruption to delivery, loss of organisational context or reduction in oversight during transition could weaken security visibility across the sector and delay the identification and mitigation of emerging risks. A prolonged mobilisation period would leave organisations without the level of support and assurance currently available through the programme. In addition, a transition to a new supplier would cause significant service disruption. A full procurement exercise, mobilisation period and knowledge transfer programme would delay delivery of planned activities and divert resources away from improvement work. Participating organisations would experience disruption at a critical stage in their CAF journey, potentially delaying assurance activities, improvement planning and the implementation of risk reduction measures", "status": "complete", "procurementMethod": "direct", "procurementMethodDetails": "Direct award", "procurementMethodRationale": "The supplier has developed substantial programme-specific knowledge, methodologies, tooling, templates, dashboards and sector intelligence throughout delivery of the CAF programme across Welsh local authorities and Fire and Rescue Services. The supplier has supported organisations through assessment, quality review, critical system mapping, independent feedback and improvement planning activities. As a result, they now possesses a unique understanding of the sector baseline, organisational maturity positions, critical system dependencies and programme governance arrangements. Replacing the current supplier with an alternative supplier would create incompatibility with the existing programme infrastructure, methodologies and assessment approaches already embedded across participating organisations. Significant effort would be required to transfer knowledge, validate prior outputs and align a new supplier to established ways of working, creating a risk of inconsistency in assessment outcomes and reducing comparability with work already completed. This would undermine the continuity and integrity of the national programme. A change of supplier would also introduce material cyber risk. The current programme supports the cyber resilience of critical public services across Wales and provides visibility of sector-wide risks, vulnerabilities and areas requiring intervention. Any interruption to delivery, loss of organisational context or reduction in oversight during transition could weaken security visibility across the sector and delay the identification and mitigation of emerging risks. A prolonged mobilisation period would leave organisations without the level of support and assurance currently available through the programme. In addition, a transition to a new supplier would cause significant service disruption. A full procurement exercise, mobilisation period and knowledge transfer programme would delay delivery of planned activities and divert resources away from improvement work. Participating organisations would experience disruption at a critical stage in their CAF journey, potentially delaying assurance activities, improvement planning and the implementation of risk reduction measures For these reasons, the contracting authority considers that competition is not feasible at this time without disproportionate disruption. This direct award is strictly limited to the period of the financial year 26-27, after which a review of activities and dependencies will be undertaken to allow for open market engagement in subsequent support engagements for cyber support in Welsh local government The contract duration reflects the minimum period necessary to ensure continuity within the current programme of work to avoid disruption and potential risk to cyber resilience", "lots": [ { "id": "1", "status": "complete" } ], "documents": [ { "id": "conflictOfInterest", "documentType": "conflictOfInterest", "description": "Not published" } ], "riskDetails": "Delivery timescales changing due to commitments of local government bodies not allowing for timely co0ordinatioin and delivery of work", "procurementMethodRationaleClassifications": [ { "id": "additionalRepeatExtensionPartialReplacement" } ] }, "awards": [ { "id": "1", "title": "Additional Support for the CAF programme in Welsh Local Gov", "status": "pending", "value": { "amountGross": 128520, "amount": 107100, "currency": "GBP" }, "mainProcurementCategory": "services", "aboveThreshold": true, "suppliers": [ { "id": "GB-PPON-PJZH-7223-JZDM", "name": "Bridewell Consulting Ltd" } ], "items": [ { "id": "1", "additionalClassifications": [ { "scheme": "CPV", "id": "72600000", "description": "Computer support and consultancy services" } ], "deliveryAddresses": [ { "region": "UKL", "country": "GB", "countryName": "United Kingdom" } ], "relatedLot": "1" } ], "contractPeriod": { "startDate": "2026-10-01T00:00:00+01:00", "endDate": "2027-03-31T23:59:59+01:00" }, "relatedLots": [ "1" ], "documents": [ { "id": "086890-2026", "documentType": "awardNotice", "noticeType": "UK5", "description": "Transparency notice on Find a Tender", "url": "https://www.find-tender.service.gov.uk/Notice/086890-2026", "datePublished": "2026-09-14T13:55:59+01:00", "format": "text/html" } ], "milestones": [ { "id": "1", "type": "futureSignatureDate", "dueDate": "2026-09-24T23:59:59+01:00", "status": "scheduled" } ] } ], "language": "en" }