NCSC Cyber Assessment Framework
Certification & assessment schemes · awarded by NCSC · serves: Cyber security consultants
- Notices demanding it
- 30
- a floor
- Said “must”
- 1
- explicit obligation
- Open right now
- 0
- Value gated
- £23m
- a floor
Published values on the notices that demand it — a floor, not a total.
The demand curve
Notices demanding it per 10,000 published, by year — rate-normalised so corpus growth never masquerades as demand. Complete years only.
The pale bars are 2025 onward. The Procurement Act went live on 24 February 2025 and changed how notices are written, so the step across that date is partly a change in convention and not only a change in demand. We have not measured how much of it is which, so please do not read this as a trend.
The receipts
Notices that demand it, and the sentence each demand was found in. Nothing is counted here without one.
Wales & West Utilities
As an Operator of Essential Services (OES), Wales & West Utilities (WWU) is required to comply with the requirements of the NCSC Cyber Assessment Framework (CAF).
UK Research and Innovation
This procurement is for the delivery of facilitated workshops focused on the UK National Cyber Security Centre's (NCSC) Cyber Assessment Framework (CAF), designed to enhance cyber security awareness, capability, and compliance across STFC.
Environment Agency
Cyber Assessment Framework (CAF) Review
Business Services Organisation (BSO) Procurement and Logistics Service (PaLS)
The Compliance Audit will use the (NCSC) Cyber Assessment Framework (CAF) which determines the minimum standard expected from the OES.
UK Health Security Agency
…al Workplace (TODW) programme, UKHSA is implementing a secure and standardised macOS operating system build to ensure Apple Mac devices are compliant with DSPT Cyber Assessment Framework (CAF) requirements and aligned with UKHSA's wider cyber security and endpoint management strategy.…
Ministry of Housing, Communities and Local Government
Cyber Assessment Framework (CAF) Assurance
Department for Culture, Media and Sport
Assurance of DCMS GovAssure Cyber Assessment Framework
GOVERNMENT DIGITAL SERVICE
DSIT (GDS) needs to procure a GovAssure Independent Assurance Review (IAR) against the Notify and Emergency Alerts services as part of our Cyber Assessment Framework (CAF).
DESNZ
PS25351 - Cyber Assessment Framework
Homes England (the name adopted by the Homes and Communities Agency)
Homes England requires an independent assurance review under GovAssure for its critical system, Microsoft 365 Copilot, against the Cyber Assessment Framework (CAF) Baseline profile.
Ministry of Housing, Communities and Local Government (MCHLG)
Cyber Assessment Framework (CAF) Assurance for Local Authorities (Interim)
OFFICE FOR STANDARDS IN EDUCATION, CHILDRENS SERVICES AND SKILLS
The GovAssure programme mandates that government departments undergo independent assessments of their cyber security posture against the NCSC Cyber Assessment Framework (CAF).
See it live
No open tenders demand it at this moment — the list updates continuously.
Browse the tenders →Tell us what you already hold and we will show you which of these notices you were already eligible for — and what one more certificate would open.
Get set up free →Method: Every count here is a floor. We match the text of the notice, and a notice description is a summary — most tender packs demand things it never mentions.“Said must” counts only explicit obligation language in the matched sentence itself; anything ambiguous is counted as a mention, never as mandatory. Trend compares rates per 10,000 notices per complete calendar year.