Award GB CF

PS23398 - Energy Supply Chains Cyber Security Standards

BEIS

What the buyer published

This procurement is being concluded following a mini competition under the CCS RM3764 Cyber Security Services 3 DPS. Brief Description of Requirement

The global nature of the supply chain means that companies are often complying

with various standards, many with limited assurance frameworks and clear

procedures to allow suppliers to demonstrate compliance. Even where suppliers are

complying with existing frameworks, customers often issue bespoke requirements

leading to increased fragmentation and bureaucratic burdens. The Cyber Supply Chain Code of Practice & Partnership (Cyber COPP) - an industry

forum supported by DESNZ and led by suppliers and energy sector operators

identified the development of baseline minimum standards for suppliers as a

possible option in addressing competing standards. To see if this is viable the group

needs to first understand the scope of existing standards in the international supply

chain.

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date 5 Feb 2024, expected

Judged against the rules we publish. How we decide.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.