Award GB CF

NCSC Cyber Assessment Framework (CAF) Implementation

N H S Shared Business Services

Stage: Award

the latest stage the buyer has published
Buyer: N H S Shared Business Services
Supplier: tmc3 Limited

named in the award notice
Value: £33K

net · GBP
Awarded: 16 Dec 2024

the award date on the notice
End date: 31 Mar 2025

expected
First published: 19 Feb 2025

last seen 19 Feb 2025

What the buyer published

The National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) provides a way of assessing the cyber risks to essential NHS functions, looking at how these are managed, and which organisation will be responsible. As part of the CAF, the NHS Counter Fraud Authority (NHSCFA) is required to submit supporting evidence for a compliant submission to the NHS DSPT-CAF return for 2024-25. NHS Counter Fraud Authority are seeking to procure support with the following requirements:

Analysis of the NHSCFA Position regarding NHS Data Security and Protection Toolkit (DSPT) and CAF requirements for 2024-25. · Assistance, alongside NHSCFA teams to collect, prepare & submit evidence required to form a compliant submission to the NHS DSPT-CAF return for 2024-25. · Produce a roadmap to improve NHSCFA position in meeting DSPT-CAF requirements for future years, initially Baseline then Enhanced CAF requirements

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date 31 Mar 2025, expected

Why we call this Governance, risk and audit

Judged against the rules we publish. How we decide.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.