Source: https://tendernation.io/opportunities/01a13bdd-b3d7-7114-b3fe-184708bb7965/cyber-assessment-framework-caf-review awarded GB open procedure Suitable for SMEs # Cyber Assessment Framework (CAF) Review [Environment Agency](https://tendernation.io/buyers/environment-agency) Estimated value £50,000 Published 30 Jun 2026 Deadline Closed 29 May 2026 ## Who can bid - Buyer says suitable for SMEs The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid. - Buyer says suitable for VCSEs The buyer ticked “suitable for voluntary, community and social enterprises” on the notice. - Below-threshold contract Buyers cannot shortlist bidders on suitability before tenders are in, so everyone gets to submit a bid (except some larger works contracts). [Procurement Act 2023, section 85](https://www.legislation.gov.uk/ukpga/2023/54/section/85) - Sets up a framework Winning a place does not guarantee work: contracts are awarded later as call-offs, and the list usually stays closed for years. - Open procedure Anyone can submit a full tender; there is no shortlisting stage. [More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses) ## About this tender The Environment Agency is appointing a NCSC-approved supplier to undertake an independent Cyber Assessment Framework (CAF) assessment. This engagement will establish a clear current state view of our cyber resilience and identify the security, governance, and operational gaps that must be addressed to achieve full alignment with CAF. Cyber threats continue to increase in both frequency and sophistication. In line with UK Government expectations and best practice, CAF provides the standard mechanism for assessing cyber resilience for organisations delivering essential functions. The primary objectives of this engagement are to: - Perform a comprehensive current state assessment against all relevant CAF objectives, principles, and outcomes. - Identify and clearly articulate gaps between the current state and the target CAF aligned state. - Provide a structured, prioritised set of recommendations and actions required to achieve full CAF alignment. - Support senior stakeholders by presenting findings in a clear, defensible, and audit ready format.e contract's subject matter ## CPV classification Information technology services Source Find a Tender (UK) · Notice ocds-h6vhtk-069540-2026-06-30T11:44:43+01:00 [View official notice](https://www.find-tender.service.gov.uk/Notice/ocds-h6vhtk-069540-2026-06-30T11:44:43+01:00) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile Environment Agency: past awards and live tenders](https://tendernation.io/buyers/environment-agency) [Sector More IT services tenders](https://tendernation.io/sectors/it-services) ## More tenders like this [Computer facilities management services – IT-tjänster · Kalmar Läns Museum · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-8774-723e-83a8-af2cae60c2ed/sweden-computer-facilities-management-services-it-tjanster) [Software implementation services – DNS - Metada Platform - licence a související implementační, konzultační, analytické a školicí služby · DIAMO, státní podnik · 36 days left · 23 Nov 2026](https://tendernation.io/opportunities/01a15183-8989-719a-85fd-f036dc09b9df/czechia-software-implementation-services-dns-metada-platform-licence-a-s) [IT services: consulting, software development, Internet and support – Integrale ICT-dienstverlening · Stichting TWijs · 42 days left · 30 Nov 2026](https://tendernation.io/opportunities/01a15183-8078-70d7-8df3-40f25f4d83c5/netherlands-it-services-consulting-software-development-internet-and-suppor) [Software supply services – CRE\_2026\_092 Renouvellement des licences Varonis · CREOS Luxembourg S.A. · 27 days left · 15 Nov 2026](https://tendernation.io/opportunities/01a15183-411c-7086-9da9-540c2fa32c64/luxembourg-software-supply-services-cre-2026-092-renouvellement-des-licences) [Software supply services – Vergabe zur Ablösung der bestehenden SAP-Lösung im Bereich Personal · Westfälische Verkehrsgesellschaft mbH · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-0636-71ff-ab09-9dda4a94f77c/germany-software-supply-services-vergabe-zur-ablosung-der-bestehenden-sap-lo) [IT services: consulting, software development, Internet and support – L-Bank - Europaweite Vergabe einer KI-gestützten Lösung zur Verarbeitung von Elterngeldanträgen und Nachweisen im Verhandlungsverfahren mit Teilnahmewettbewerb nach VgV · Landeskreditbank Baden-Württemberg - Förderbank - (L-Bank) · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-95b1-7144-aa3a-6e4de7a75864/germany-it-services-consulting-software-development-internet-and-support)