Cyber Security
Tenders

SCC - Cyber Security Consultancy

Description: Cyber Security Consultancy Contract

Summary: Surrey County Council, operating as a public authority within the sub-central government sector, recently concluded a procurement process for a cyber security consultancy contract, titled "SCC - Cyber Security Consultancy". The contract, which falls under the services industry category, was awarded on 20th November 2025 and is set to conclude by 22nd May 2026. The procurement process, identified under the legal basis of UKPGA 2023/54, was conducted via a below-threshold method, though specifics are unspecified. The contract, with a gross value of £153,600, was awarded to GLOBAL RESOURCING LTD, a small-to-medium enterprise based in Watford, UK, confirming the completion status of this tender. The services will be delivered primarily in the UK's South East region, offering critical technological support and consultation to enhance cyber security measures. Key procurement documents were published on 8th January 2026.

Cyber Security Services - RM1557.14-001

Description: Wavenet Group, G-Cloud Call Off Contract Framework Agreement Cyber Security Services - RM1557.14-001

Summary: The procurement process by Humber Teaching NHS Foundation Trust, identified under buyer ID GB-NHS-RV9, involves a complete tender titled "Cyber Security Services - RM1557.14-001". This contract falls under the services industry category, specifically facilities management services for computer systems development, with the location being the East Riding of Yorkshire, United Kingdom (region UKE). Initiated as a tender on 2026-06-25, the procurement stage is currently in the award phase having been completed. The contracting process was governed by the legal basis of UKPGA 2023/54, utilising a procurement method classed as "Below threshold - unknown". The contract period spans from 29 May 2026 to 31 March 2027, with a gross contract value of £55,824. The awarded supplier is Wavenet UK, an organisation known for its large scale operations located in Solihull, UK.

Cyber Security Services

Description: LFRS require 24/7 cyber security services. LFRS wish to continue their Security Operations Centre (SOC) service from Quorum Cyber to ensure the organisation maintains effective, round-the-clock monitoring, detection, and response to cyber security threats. This capability is essential to protecting critical systems, sensitive data, and service availability in an increasingly complex and hostile cyber threat landscape.

Summary: The Lancashire Combined Fire Authority awarded a contract for "Cyber Security Services" to QUORUM CYBER SECURITY LIMITED. This procurement, identified by the tender ID LFRS 220, falls under the industry category of IT services, specifically targeting consulting, software development, and support. The contract ensures round-the-clock cyber security services essential for safeguarding critical systems and sensitive data. Located in Preston, the Lancashire Fire and Rescue Service seeks to maintain its Security Operations Centre (SOC) effectively. The procurement method was direct, below threshold, and without competition, making the award stage evident with the contract active from 1st April 2026 to 31st March 2027. The legal framework guiding this process is laid out in the UK legislation 2023/54.

Provision of Cyber Security Services

Description: Cyber security consultancy to provide guidance and delivery support for transformation of naval base cyber security following vulnerability assessment and system implementation against insider threat.

Summary: The Submarine Delivery Agency has completed a procurement process for the provision of cyber security services, with the contract awarded to Blacksmiths Group Consulting Ltd. The project focuses on transforming naval base cyber security systems in Plymouth following a vulnerability assessment. The process was a direct award due to previous issues with limited bids in earlier tenders. The procurement falls under the defence security operational category, aligned with UK legislation 2023/54, ensuring resilience against insider threats. The contract was signed on 30th April 2026 and will run until 29th April 2027, with a total contract value of GBP 345,600.

MSc Cyber Security

Description: Postgraduate level learning in cyber security, including secure systems, threat detection and risk management. Skills to design, implement and evaluate secure digital systems in practice. Application of security principles aligned to DDaT standards, including secure by design and risk mitigation. Prepared for specialist cyber security roles, supported by a BCS accredited postgraduate qualification. Processed by SSCL

Summary: The procurement process was initiated by the Department for Work & Pensions (DWP) located in London, United Kingdom, under the project titled "MSc Cyber Security." This tender falls under the services category, specifically staff training services, and covers multiple regions across the UK. As of the latest update, the procurement stage reached the award phase with the contract status marked as complete. The contract, signed on 29th May 2026, is set to run from 15th September 2026 to 15th September 2028, and involved a procurement method without competition, valuing the contract at £13,461. The process was conducted directly due to being below the threshold.

BLC-0201 - Cyber Security Services Framework

Description: BlueLight Commercial are establishing a multi-supplier Open Framework for the provision of Cyber Security Services. The Framework Agreement will be available for use by all UK Police Forces and all other agencies named in the documentation. The Framework is intended to have a total term of eight (8) years and will provide a route to market for the following Cyber Security Services: Lot 1 - Penetration Testing and Vulnerability Management Scanning Services Lot 2 - Cyber Security Incident Response and Planning Services Lot 3 - Cyber Resilience Audit Services Lot 4 - Cyber Security Training Services The Authority plans to be re-open this framework no later than 21/05/2029 to run for a further 3 years. It will then be re-opened no later than 21/05/2032 (read more...)

Summary: BlueLight Commercial Limited has initiated the "BLC-0201 - Cyber Security Services Framework" to establish a multi-supplier open framework for cyber security services accessible to all UK Police Forces and related agencies. Based in London, BlueLight Commercial is a public authority under sub-central government classification. The procurement process is complete as of recent updates, with awards pending since 28 April 2026. They are deploying an open procurement method involving lots for services such as Penetration Testing, Incident Response, Cyber Resilience Audits, and Security Training, designed to run over an 8-year framework period and potentially re-opened for expansions until at least 2034. The procurement emphasizes transparency and efficiency, as seen through competitive awards, a focus on IT consultancy and support within the UK and its territories, and a structured plan to evolve alongside cyber security needs.

ESCC Cyber Security & Penetration Testing

Description: Cyber Security & Penetration Testing Services. Further competition held under CCS RM37643 Cyber Security DPS

Summary: East Sussex County Council has completed a procurement process titled "ESCC Cyber Security & Penetration Testing", focusing on IT services, including consulting, software development, and support, particularly within the cyber security domain. The procurement took place under a selective method as a call-off from the CCS RM37643 Cyber Security DPS. The contract, valued at £28,340, is set for a two-year period from 7th October 2025 until 6th October 2027. The services will be delivered in the South East region of the United Kingdom. The procurement stage has reached the award phase, with the contract officially awarded on 7th October 2025.

Cyber Security Awareness Training

Description: Provision of corporate-wide Cyber Security awareness training platform, which offers a training and awareness content. Additional information: This contract was direct awarded via GCloud-14 CCS Framework

Summary: The public procurement process for the "Cyber Security Awareness Training" contract, managed by Bournemouth Christchurch and Poole Council, has concluded with an award status. The process involved an open procedure for acquiring services within the security software development category, specifically for a corporate-wide awareness training platform. This contract, directly awarded via the GCloud-14 CCS Framework, promises a contract duration from 31 December 2025 to 30 December 2028 in the South West region of the United Kingdom. The contract has a value of £94,614.15, and the supplier, MetaCompliance Ltd, is identified as an SME. The tender period concluded on 10 November 2025.

Research on Cyber Security in Supplier Management and Procurement

Description: Provision for Research on Cyber Security in Supplier Management and Procurement

Summary: The Department for Science, Innovation and Technology (DSIT), located in London, has completed a public procurement process titled "Research on Cyber Security in Supplier Management and Procurement," falling under the industry category of computer-related professional services. This contract, valued at GBP 64,900, follows a call-off from a framework agreement using a selective procurement method. The contract was awarded on 1st October 2025 and commenced on 7th October 2025, lasting until 31st March 2026. The tender process ended on 22nd September 2025, marking the closure of the tendering period. The primary procurement category was services, and the tender was specific to locations within the United Kingdom, particularly targeting regions in London.

BHCC DH Skills Bootcamps Wave 7 - Lot 2 Cyber Security Practices

Description: Provision of Skills Bootcamps Wave 7 programme for Cyber Security Practices

Summary: Brighton & Hove City Council has completed the procurement process for the "BHCC DH Skills Bootcamps Wave 7 - Lot 2 Cyber Security Practices" contract. This tender, with a focus on education and training services in the cyber security sector, was conducted through a selective procurement method as a call-off from a dynamic purchasing system. The procurement covered the South East region of the United Kingdom and had a total contract value of £87,500. The contract period runs from 1st June 2026 to 31st August 2027. The tender process ended on 24th April 2026, and the award was activated on 13th May 2026.