Published date: 4 September 2025

Awarded contract - This means that the contract has been awarded to a supplier.


Closing: 12 February 2025, 12pm

Contract summary

Industry

  • Information technology services - 72222300

Location of contract

England

Value of contract

£250,000 to £18,500,000

Procurement reference

CPD4126216/2

Published date

4 September 2025

Closing date

12 February 2025

Closing time

12pm

Contract start date

1 September 2025

Contract end date

31 August 2026

Contract type

Service contract

Procedure type

Call-off from a dynamic purchasing system

A mini-competition or direct purchase from a pre-established dynamic purchasing system.

Contract is suitable for SMEs?

No

Contract is suitable for VCSEs?

No

Description

The Ministry of Housing, Communities and Local Government (MHCLG) require a Cyber Incident Response (CIR) service to operate on behalf of the local government sector. MHCLG are looking to ensure that English local authorities receive support to respond to the most sophisticated and bespoke cyberattacks. MHCLG will use the National Cyber Security Centre's (NCSC's) framework for classifying incidents to activate the service at C3 and above, or at a lower level as MHCLG see necessary.

To align this approach with other government departments and the advice of the NCSC (that all UK organisations use an NCSC-assured Cyber Incident Response provider when dealing with cyber incidents) a NCSC Assured Service Provider (ASP) is required.

The supplier will work with MHCLG to introduce the service to local government, and we will look to integrate the service into existing incident management processes for 24/7 access.

Local authorities will report incidents to the NCSC and once the NCSC have categorised the incident and the threshold for service activation is met, or MHCLG approve a below threshold activation, local authorities will be eligible to receive incident response support.

The contract will be for one-year, with the option to extend for up to four additional years in one-yearly increments.

MHCLG will appoint two suppliers. Service activation will rotate between these. In the instance of an event impacting many local authority organisations at once, both suppliers may be deployed.

More information

Additional text

This contract is a call off from the Crown Commercial Service RM3764.3 Cyber Security Services 3 DPS.

Award information

Awarded date

29 August 2025

Contract start date

1 September 2025

Contract end date

31 August 2026

Total value of contract

£18,500,000

This contract was awarded to 1 supplier.

KPMG LLP

Address

15 Canada Square, London, E14 5GL

Reference

Companies House number: OC301540

Supplier is SME?

No

Supplier is VCSE?

No

About the buyer

Address

2 Marsham Street
LONDON
SW1P4DF
England

Email

commercialtenders@communities.gov.uk