---
title: "Third-Party Cyber Security Risk Management and Supply Chain Assurance Platform"
ocid: "ocds-h6vhtk-0783be"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0783be"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0783be.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0783be.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "The Mayor and Commonalty and Citizens of the City of London"
published: "2026-10-08"
---

# Third-Party Cyber Security Risk Management and Supply Chain Assurance Platform

Buyer: The Mayor and Commonalty and Citizens of the City of London  
Current stage: Award  
OCID: ocds-h6vhtk-0783be

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0783be)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0783be.json)

## Summary

The City of London Corporation procured a third-party cyber security risk management and supply-chain assurance platform. The software assesses and monitors suppliers’ security controls, keeps an auditable assurance record, manages remediation, identifies emerging threats and maps wider supply-chain dependencies, including beyond directly contracted suppliers. The service relates to software and supporting software development. Delivery is in the United Kingdom. The defined requirement depends on continuity of the established Risk Ledger network, existing supplier assurance records and connected relationships.

The procurement is complete and the contract has been awarded to Risk Ledger Ltd. The Corporation made a below-threshold direct award without competition, citing the need to maintain continuity of the established network, assurance records and connected relationships. The contract was signed on 1 October 2026 and runs from 1 October 2026 to 30 September 2030. Its value is £104,334.59 excluding VAT and £125,201.51 including VAT. There was one lot, covering the platform and associated service. The procurement was evaluated through a direct award; no separate evaluation criteria are stated.

For suppliers preparing for a future requirement from the City of London Corporation, this award indicates demand for a cyber security assurance platform that can assess and monitor third-party suppliers, track remediation and threats, and provide an auditable record of supplier controls and wider supply-chain dependencies. Credibility would depend on demonstrating that the service can support these functions and handle connected supplier relationships and assurance records at the required scale. Continuity with the buyer’s existing network and data was central to this award, so a prospective alternative would need to show how it can meet the operational requirement and address transition or continuity concerns. This is evidence of a specific platform and assurance requirement, rather than a general call for cyber security services.

## Notice

The software supports third-party cyber security risk management and supply-chain assurance. The service is used to assess and monitor supplier security controls, maintain an auditable assurance record, manage remediation activity, identify emerging threats and understand wider supply-chain dependencies beyond directly contracted suppliers. This is a direct award because the defined requirement includes continuity of the established Risk Ledger network, existing supplier assurance records and connected relationships, which cannot be supplied by an alternative provider.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/095200-2026 |
| Notice type | UK7 - Contract Details Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Below threshold - without competition |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 8 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 1 Oct 2026 - 30 Sep 2030 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £104,334 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | The Mayor and Commonalty and Citizens of the City of London |
| Locality | CITY OF LONDON |
| Postcode area | Central London |
| Postcode | EC2P 2EJ |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI43 Haringey and Islington |
| Local authority | Islington |
| Electoral ward | Clerkenwell |
| Westminster constituency | Islington South and Finsbury |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | RISK LEDGER LTD. |

## CPV Codes

### Divisions

- 48 - Software package and information systems
- 72 - IT services: consulting, software development, Internet and support

### Codes

- 48000000 - Software package and information systems
- 72262000 - Software development services

## Release History

- 8 Oct 2026 at 13:32 - Award - UK7 - Contract Details Notice - https://www.find-tender.service.gov.uk/Notice/095200-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/095200-2026
  8th October 2026 - Contract details notice on Find a Tender

## Notice URLs

- https://www.cityoflondon.gov.uk
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0783be. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0783be.json.