Cyber Assessment Framework (CAF) Review

A Tender Notice
by ENVIRONMENT AGENCY

Source
Find a Tender
Type
Contract (Services)
Duration
3 month
Value
£50K
Sector
TECHNOLOGY
Published
11 May 2026
Delivery
01 Jul 2026 to 30 Sep 2026
Deadline
29 May 2026 22:59

Related Terms

Location

United Kingdom:

Geochart for 1 buyers and 0 suppliers

1 buyer

Description

The Environment Agency is seeking to appoint a NCSC-approved supplier to undertake an independent Cyber Assessment Framework (CAF) assessment. This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF. Cyber threats continue to increase in both frequency and sophistication. In line with UK Government expectations and best practice, CAF provides the standard mechanism for assessing cyber resilience for organisations delivering essential functions. This RFQ invites NCSC-approved suppliers with demonstrable CAF and GovAssure aligned experience to propose an approach for delivering a robust, evidence based assessment and a practical roadmap for improvement. The primary objectives of this engagement are to: • Perform a comprehensive current state assessment against all relevant CAF objectives, principles, and outcomes. • Identify and clearly articulate gaps between the current state and the target CAF aligned state. • Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment. • Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.

CPV Codes

  • 72222300 - Information technology services

Other Information

** PREVIEW NOTICE, please check Find a Tender for full details. **

Reference

  • ocds-h6vhtk-069540
  • FTS 042798-2026

Domains