Cyber Security 4
Summary
This agreement, let under the Procurement Act 2023, gives all public sector organisations access to cyber security services.
Description
RM3764.4 will give all public sector organisations a way to buy cyber security services. It will replace the existing RM3764.3 Cyber Security Services 3 DPS.
It will likely include services such as:
- NCSC assured services
- consultancy and advice
- penetration testing
- incident response
- managed security services
We are conducting pre-market engagement to define the agreement’s scope and requirements. This includes:
- competition tendering procedure: open or flexible
- contract type: open or closed framework
- exact scope of services
Benefits
Benefits will be determined by the outcome of pre-market engagement:
- alignment with key cyber security policies
Routes to market
Routes to market will be determined by the outcome of pre-market engagement.
Product types
Product types will be determined based on market engagement.
Customer engagement
On 23 July, GCA hosted a virtual webinar on Cyber Security Services 3 to gather feedback for the design of Cyber Security 4. Review the feedback summary.
We are planning the following webinars with customers:
- On 16 September at 2pm to 3.30pm, GCA will host a virtual webinar on Cyber Security 4. The session will discuss our early thoughts, objectives and pre-market engagement strategy. Please register your interest to receive an invitation.
- On 11 November at 10am to 11.30am, GCA will host a virtual webinar on Cyber Security 4’s PA23 mechanisms, such as open/closed framework/dynamic market and award without competition. Please register your interest to receive an invitation.
- On 18 November at 10am to 11.30am, GCA will host a virtual webinar on Cyber Security 4’s framework requirements, including applicable policies such as social value and PPNs. Please register your interest to receive an invitation.
We will publish dates for future customer engagement sessions when they are available. To receive invites and communications about Cyber Security 4, please register your interest in future events.
Supplier engagement
On 22 July, GCA and techUK hosted a virtual webinar on Cyber Security Services 3. This event was used to gather feedback for the future design of Cyber Security 4. Review the feedback summary.
We are planning the following events with suppliers:
| Date and time | Subject | Link to register |
| 16 September at 10am to 11.30am | Joint virtual webinar with techUK. Covers early thoughts, objectives and pre-market engagement strategy. | Register for the event on the techUK website. |
| Sometime in the week 12 to 16 October | In-person event, including two sessions to discuss the future scope, lotting structure, and framework requirements. | Register your interest to receive an invitation. Places allocated on a first-come first-serve basis, with only 1 participant from each supplier. |
| 19 October at 2pm to 3.30pm | Joint virtual webinar with techUK. Covers PA23 mechanisms, such as open and closed frameworks, dynamic markets and award without competition. | Register for the event on the techUK website. |
| 5 November at 10am to 11.30am | Joint virtual webinar with techUK. Covers Cyber Security 4’s terms and conditions. | Register for the event on the techUK website. |
| 26 November at 2pm to 3.30pm | Joint virtual webinar with techUK. Update on the progress of Cyber Security 4’s scope and PA23 mechanisms. | Register for the event on the techUK website. |
| 2 December at 10am to 11.30am | Joint virtual webinar with techUK. Update on the progress of Cyber Security 4’s framework requirements and terms and conditions. | Register for the event on the techUK website. |
| 8 December at 10am to 11.30am | Joint virtual webinar with techUK. An update for SMEs on the progress of Cyber Security 4’s design. This will be an opportunity for SMEs to contribute their views and thoughts. | Register for the event on the techUK website. |
We will publish dates for future supplier engagement sessions when they are available. To receive invites and communications about Cyber Security 4, please register your interest in future events.
Important links
| Pipeline notice | Read pipeline notice |
| Preliminary market engagement notice | Read preliminary market engagement notice |
| Planned procurement notice | Not available yet |
| Contract notice in Find a Tender (FTS) | Not available yet |
| Tender documents | Not available yet |
Timeline
| Activity | Estimated dates |
| Pre-market engagement | July 2026 to December 2026 |
| Drafting of procurement documentation | January 2027 to September 2027 |
| Publication of find a tender (FTS) notice | Autumn 2027 |
| Framework award | Spring 2028 |