Cyber Security 4 (RM3764.4)

Summary
Requirements / Scope
Key Information

GCA is developing Cyber Security 4 (RM3764.4), the successor to Cyber Security Services 3. It is intended to create a new route into government cyber security work, potentially covering NCSC-assured services, consultancy, penetration testing, incident response and managed security. The GCA pipeline estimates an ITT around 18 October 2027. Supplier applications are not yet open, and the final lot structure remains unconfirmed.

Crown Partners helps cyber security providers assess which capabilities and accreditations will be relevant, strengthen technical evidence and prepare for the procurement when the confirmed tender is published.

Talk to us about this framework
What it covers
Possible scope under consultation: NCSC-assured services, cyber consultancy, penetration testing, incident response and managed security. GCA has not decided the final lot structure or whether the route will be an open or closed framework.
Lot structure / supplier categories
Final lot structure and purchasing route unconfirmed
Suitable supplier profile
Relevant experience in these services, capacity to deliver to public bodies and clear evidence of client outcomes.
How Crown Partners can help
We track the developing framework and its requirements, assess your security credentials and delivery evidence, and prepare your organisation to bid when the tender and final lots are released.
Important distinction
Final lots, eligibility and award criteria remain dependent on published tender documents.
Procurement Body
Government Commercial Agency
Framework Reference
RM3764.4
Procurement Route
Planned successor
Procurement Stage
Pre-tender supplier engagement, with further events planned November and December 2026.
ITT / Application Date
18 October 2027 estimated (GCA pipeline). ITT has not yet been issued.
Scope / Lot Structure
Final lots and procurement route unconfirmed
Estimated Spend
Not published
Supplier Requirements
Refer to the official application criteria and technical specifications
Award / Go-live
Expected award spring 2028 and go-live 28 April 2028 (GCA pipeline estimates).
View official procurement informationCheck the latest procurement documents before applying.