Cyber Assessment Framework (CAF) Review
Environment Agency · London
Key facts
- Estimated value
- £50,000
- Closing date
- 29 May 2026
- Contract ends
- 30 Sep 2026
- Procedure
- Below threshold - open competition
- Buyer type
- Central government
- Source
- Find a Tender
Description
The Environment Agency is seeking to appoint a NCSC-approved supplier to undertake an independent Cyber Assessment Framework (CAF) assessment. This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF. Cyber threats continue to increase in both frequency and sophistication. In line with UK Government expectations and best practice, CAF provides the standard mechanism for assessing cyber resilience for organisations delivering essential functions. This RFQ invites NCSC-approved suppliers with demonstrable CAF and GovAssure aligned experience to propose an approach for delivering a robust, evidence based assessment and a practical roadmap for improvement. The primary objectives of this engagement are to: • Perform a comprehensive current state assessment against all relevant CAF objectives, principles, and outcomes. • Identify and clearly articulate gaps between the current state and the target CAF aligned state. • Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment. • Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.
Categories (CPV)
- 72222300 Information technology services
Similar open tenders
EMMS Cyber Security SME Support Programme
Location: Yorkshire and the HumberBuyer: Lincolnshire County Council
Open tenderCloses 18 Nov, 202614 daysValue £65.00kSource Find a TenderIndustrial Cyber Security pilot programme aimed at improving cyber resilience readiness within SME manufacturing businesses. This exercise is being led by the LCC on behalf of Leicestershire, Nottinghamshire, Derbyshire, Northamptonshire, and Greater Lincolnshire.
Digital Connectivity Programme - 1gb Broadband Install and Service Delivery
Location: ScotlandBuyer: North Lanarkshire Council
Open tenderCloses 8 Dec, 202634 daysValue £85.45mSource Find a TenderNorth Lanarkshire Council (the “Council”) is undertaking a major digital transformation programme to deliver gigabit capable broadband connectivity to approximately 37,000 Council owned social housing properties across the authority area. The programme is a core component of the Council’s Digital Connectivity Masterpla
The Spencer Academy Trusts Microsoft Licensing & Support Services
Location: East MidlandsBuyer: THE SPENCER ACADEMIES TRUST
Open tenderCloses 23 Nov, 202619 daysValue £525.00kSource Find a TenderSpencer Academies Trust is seeking a suitably qualified supplier to provide Microsoft Licensing and Support Services. The contract will include the provision, management and support of the Trust's Microsoft licensing estate, including Microsoft 365 A3 and Microsoft 365 A5 licensing, licence administration, subscription
ICT Network Support Services for Tailte Éireann
Location: IrelandBuyer: Tailte Éireann
Open tenderCloses 8 Dec, 202634 daysValue €800.00KSource TEDThe provision of Network maintenance, software and related services to support Tailte Éireanns network infrastructure. The network equipment and services the subject of this tender consists of Cisco and Dell switches and routers and any attached equipment such as GBIC’s etc
Contract for Education and Outreach Programme Management Services
Location: IrelandBuyer: Department of Culture Communications Sport
Open tenderCloses 11 Dec, 202637 daysValue €320.00KSource TEDThe National Archives has been very successful in recent years in broadening the understanding of our role as the keeper of the records of the State amongst the general public. This enhanced public engagement has seen more people visit the National Archives online and in person(outside of the usual academics and resear
Single Party Framework Agreement for the supply of Atlassian Cloud Services and Associated Products
Location: IrelandBuyer: Gambling Regulatory Authority of Ireland
Open tenderCloses 3 Dec, 202629 daysValue €400.00KSource TEDSingle Party Framework Agreement for the supply of Atlassian Cloud Services and Associated Products