NCSC Cyber Assessment Framework (CAF) Implementation

Contract summary

Industry

• Systems consultancy services - 72246000

• Computer support services - 72610000

Location of contract

E14 4PU

Value of contract

£33,000

Procurement reference

SBS HIS356 CFA CAF

Published date

19 February 2025

Closing date

16 December 2024

Closing time

5pm

Contract start date

27 January 2025

Contract end date

31 March 2025

Contract type

Service contract

Procedure type

Call-off from a framework agreement

Contract is suitable for SMEs?

Yes

Contract is suitable for VCSEs?

Yes

---

Description

The National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) provides a way of assessing the cyber risks to essential NHS functions, looking at how these are managed, and which organisation will be responsible.


As part of the CAF, the NHS Counter Fraud Authority (NHSCFA) is required to submit supporting evidence for a compliant submission to the NHS DSPT-CAF return for 2024-25.


NHS Counter Fraud Authority are seeking to procure support with the following requirements:


· Analysis of the NHSCFA Position regarding NHS Data Security and Protection Toolkit (DSPT) and CAF requirements for 2024-25.

· Assistance, alongside NHSCFA teams to collect, prepare & submit evidence required to form a compliant submission to the NHS DSPT-CAF return for 2024-25.

· Produce a roadmap to improve NHSCFA position in meeting DSPT-CAF requirements for future years, initially Baseline then Enhanced CAF requirements

---

Award information

Awarded date

16 December 2024

Contract start date

27 January 2025

Contract end date

31 March 2025

Total value of contract

£33,000

This contract was awarded to 1 supplier.

tmc3 Limited

---

About the buyer

Contact name

Simon Clark

Address

7th Floor, 10 South Colonnade
London
E14 4PU
England

Email

simon.clark@nhscfa.gov.uk