Cyber Remediation Cyber Ops Delivery Partner

  • H M Revenue & Customs

F02: Contract notice

Notice reference: 2022/S 000-031141

Published 3 November 2022, 4:09pm

Section one: Contracting authority

one.1) Name and addresses

H M Revenue & Customs

Trinity Bridge House 2 Dearmans Place


M3 5BS


James Gadsby




+44 3000587701


United Kingdom

NUTS code

UK - United Kingdom

Justification for not providing organisation identifier

Not on any register

Internet address(es)

Main address


one.3) Communication

The procurement documents are available for unrestricted and full direct access, free of charge, at


Additional information can be obtained from the above-mentioned address

Tenders or requests to participate must be submitted electronically via


one.4) Type of the contracting authority

Ministry or any other national or federal authority

one.5) Main activity

General public services

Section two: Object

two.1) Scope of the procurement

two.1.1) Title

Cyber Remediation Cyber Ops Delivery Partner

Reference number


two.1.2) Main CPV code

  • 72000000 - IT services: consulting, software development, Internet and support

two.1.3) Type of contract


two.1.4) Short description

HMRC Chief Digital and Information Office (CDIO) is the internal department tasked with the provision of critical IT services, which enable billions of pounds of annual tax revenue, customer interfaces, and other UK tax operational systems.

The Enterprise Security Programme has secured investment for a three-year period which started April 2022. The investment for 2023/24 will contribute to HMRCs objectives by delivering enterprise-wide security improvements and support strategic planning and delivery activities (transformational, remediatory and enabling).

The Cyber Remediation and Cyber Operations Projects are 2 of 5 projects within the Enterprise Security Programme. Their objective is to deliver risk mitigation by remediating known vulnerabilities across our systems and services through the application of patches, configuration changes and encryption, additional access & session monitoring controls as well as strengthening networks/vulnerability assessment security controls/assurance and enhance HMRCs capability to mitigate, detect and respond to Cyber Security threats.

two.1.5) Estimated total value

Value excluding VAT: £7,500,000

two.1.6) Information about lots

This contract is divided into lots: No

two.2) Description

two.2.3) Place of performance

NUTS codes
  • UK - United Kingdom

two.2.4) Description of the procurement

Services in scope are a range of services that HMRC utilises and relies upon to deliver its duties to the UK public.

Also, significant Programme/Project Management type activities co-ordinating delivery management and assurance working with internal HMRC delivery groups and IT suppliers.

Key activities will cover the ordering and monitoring of work packages/delivery requests through from initiation to implementation, including handover of changes to the HMRC Service owner community .

This notice has been edited to remove sensitive information after publication.

two.2.5) Award criteria

Quality criterion - Name: Technical Merit / Weighting: 60%

Quality criterion - Name: Social Value / Weighting: 10%

Price - Weighting: 30%

two.2.6) Estimated value

Value excluding VAT: £7,500,000

two.2.7) Duration of the contract, framework agreement or dynamic purchasing system

Start date

3 April 2023

End date

31 March 2025

This contract is subject to renewal


two.2.10) Information about variants

Variants will be accepted: No

two.2.11) Information about options

Options: No

two.2.14) Additional information

This procurement will be conducted by way of an eSourcing event using HMRC's SAP Ariba eSourcing Portal. Please ensure you are registered with the HMRC SAP Ariba eSourcing Portal to gain access to the procurement documentation when it is released which will contain full details of the requirement.

If you are not already registered, the registration link is: http://hmrc.supplier-eu.ariba.com/ad/register/SSOActions?type=full

As part of the registration process you will receive a system generated email asking you to activate your SAP Ariba supplier account by verifying your email address. Once you have completed the activation process you will receive a further email by return confirming the 'registration process is now complete' and providing you with 'your organisation's account ID' number. If an email response from HMRC is not received within one working day of your request, please re-contact sapariba.hmrcsupport@hmrc.gov.uk (after first checking your spam in-box) notifying non-receipt and confirming when your registration request was first made.

Once you have obtained 'your organization's account ID' number, please email james.gadsby@hmrc.gov.uk and copy in e.procurement@hmrc.gov.uk and sapariba.hmrcsupport@hmrc.gov.uk with your account ID number. Once you have complied with the foregoing you will receive an e-mail confirming access to the procurement event once it is built. Further information about HMRC's procurement tool SAP Ariba, a Suppliers Guide and general information about supplying to HMRC is available on the HMRC website: www.hmrc.gov.uk/about/supplying.htm If you have already registered on SAP Ariba then you may also need to re-register on HMRC's SAP Ariba in order to be added to the event.

All clarification questions must be submitted via the SAP Ariba system messaging functionality and received by 17:00hrs 24/11/22.

Section three. Legal, economic, financial and technical information

three.1) Conditions for participation

three.1.2) Economic and financial standing

Selection criteria as stated in the procurement documents

three.1.3) Technical and professional ability

Selection criteria as stated in the procurement documents

Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Open procedure

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: No

four.2) Administrative information

four.2.2) Time limit for receipt of tenders or requests to participate


5 December 2022

Local time


four.2.4) Languages in which tenders or requests to participate may be submitted


four.2.6) Minimum time frame during which the tenderer must maintain the tender

Duration in months: 6 (from the date stated for receipt of tender)

four.2.7) Conditions for opening of tenders


5 December 2022

Local time


Section six. Complementary information

six.1) Information about recurrence

This is a recurrent procurement: No

six.2) Information about electronic workflows

Electronic ordering will be used

Electronic invoicing will be accepted

Electronic payment will be used

six.4) Procedures for review

six.4.1) Review body

HMRC Commercial Directorate

Trinity Bridge House 2 Dearmans Place


M3 5BS




+44 7815439810


United Kingdom