Scope
Description
The Department for Science, Innovation & Technology (DSIT) is seeking a supplier to conduct a comprehensive risk assessment of data centres in the UK. The assessment must systematically evaluate the sector across a range of critical risk vectors, ensuring that all relevant threats and vulnerabilities are identified and addressed. This assessment is intended to provide an evidence-based understanding of the current landscape, identifying threats and vulnerabilities that may impact the resilience and security of data centre operations. The scope of the assessment is broad, encompassing physical security, personnel security, operational technology (OT) security, business continuity, supply chain security, risk management, data centre facilities and data protection.
Whilst cyber security risks will play a part in this report (e.g. insider threat), they should not be the primary focus as DSIT can pull on an existing body of knowledge relating to the cyber vector.
The work should identify and rank all vectors by severity. This risk assessment will play a part in policy development and will be used by DSIT to help identify relevant standards and other mitigations that data centres operators could follow to minimise risk.
Total value (estimated)
- £80,000 excluding VAT
- £100,000 including VAT
Below the relevant threshold
Contract dates (estimated)
- 1 January 2026 to 31 March 2026
- 3 months
Main procurement category
Services
CPV classifications
- 71316000 - Telecommunication consultancy services
- 73110000 - Research services
- 71311300 - Infrastructure works consultancy services
Contract locations
- UK - United Kingdom
Engagement
Engagement deadline
31 December 2025
Engagement process description
If interest in supplying this contract please contact eleanor.woodfield@dsit.gov.uk. We would be keen to hear suppliers thoughts on the proposal, and any information on how you would approach this requirement.
Participation
Particular suitability
Small and medium-sized enterprises (SME)
Submission
Publication date of tender notice (estimated)
31 December 2025
Contracting authority
Department for Science, Innovation & Technology
- Public Procurement Organisation Number: PVWZ-3216-PVQL
22 Whitehall
London
SW1A 2EG
United Kingdom
Contact name: Eleanor Woodfield
Region: UKI32 - Westminster
Organisation type: Public authority - central government