Cyber Assessment Framework (CAF) Review
Framework ceiling £49,956 — the most the agreement may spend across all suppliers and call-offs, not a contract value.
This is a contract result notice, not an open opportunity. Details from the official award data.
The procurement contact named on the official notice.
The Environment Agency is appointing a NCSC-approved supplier to undertake an independent Cyber Assessment Framework (CAF) assessment.
This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF.
Cyber threats continue to increase in both frequency and sophistication.
In line with UK Government expectations and best practice, CAF provides the standard mechanism for assessing cyber resilience for organisations delivering essential functions.
The primary objectives of this engagement are to: • Perform a comprehensive current state assessment against all relevant CAF objectives, principles, and outcomes. • Identify and clearly articulate gaps between the current state and the target CAF aligned state. • Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment. • Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.e contract's subject matter
What the notice asks for
This engagement will establish a clear current
This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF.
Provide a structured, prioritised set of recommendations
Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment.
Support senior stakeholders by presenting findings in
Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.e contract's subject matter.
Sentences from the notice that state an obligation, surfaced automatically and shown in the order they appear. Not an exhaustive list — always confirm against the tender documents.
What this notice demands of you
1 named, none in explicit obligation language. Each one is quoted from the notice.
Cyber Assessment Framework (CAF) Review
Matched against the notice text, so this is a floor — the tender pack will demand things the notice never mentions. “Says must” means the quoted sentence itself used obligation language; anything ambiguous is left as a mention.
Skills, tools & certifications
Detected from the notice — the capabilities and credentials this bid calls for. Click one to see who wins that work.
Make the case to bid
Reveal who to approach at Environment Agency, and generate a go-to-market strategy from their news, accounts and people.
Free to start. Named contacts come from published notices; the strategy is generated from the buyer’s news, accounts and people.
- OCID
- ocds-h6vhtk-069540
- Stage
- award · Awarded
- Source
- Find a Tender
- Buyer ref
- 061147-2026
Contains public sector information licensed under the Open Government Licence v3.0. Source data © Crown copyright.
Who wins this kind of work
The suppliers and buyers around this opportunity — drawn from official award data. Drag to orbit; click a node to explore.
Top suppliers & buyers in IT Services
Environment Agency’s tender network