PERMANENT AWARD EVIDENCE

Supply Chain Security 2026

Department for Environment, Food, Rural Affairs · published 23 Mar 2026. This page preserves the identifiers and current held fields for one Contracts Finder release; it is not an invoice, performance assessment or complete contract history.

Contracts Finder release IDb568c972-0e1f-4edd-90f1-f69822039761-889615
Open Contracting ID (OCID)ocds-b5fd17-5e0cca7c-e0e2-408b-9450-3b117ea4cfdf
Buyer identifierGB-CFS-332606
Release typeaward
PUBLISHED COMMERCIAL FIELDS

Values stay separate.

A tender estimate and an award value answer different questions. Neither is treated as cash paid.

Award value
£269,271
award field
Tender value
£269,271
tender field
Procurement method
Call-off from a framework agreement
Category
services
CPV
48730000
Security software package
Delivery
Not stated
SW1P 4DF
PUBLISHED DESCRIPTION

What the notice says

Defra has awarded a contract to Risk Ledger, via CCS' G-Cloud 14 Framework, for the use of their supply chain security management platform to better identify the security posture and maturity of its key suppliers. This strengthens Defra's ability to detect, respond to, and prevent cyber and other security threats across its supply chain. The contract is awarded for 36 months with the option to extend for an additional 12 months. Defra Group Security's, DgS, Supply Chain Security Team requires a contract for 20 Risk Ledger user licences to support the monitoring of approximately 1,000 suppliers over a 36 month term. This contract will enable Defra to assess the organisational security posture of its suppliers, review their current security certifications, identify areas of risk, and determine whether they are suitable to provide services to Defra. Risk Ledger is a supply chain security management platform used by Defra to gain greater visibility of the security maturity of its key suppliers. Risk Ledger connects organisations into a global network, allowing them to share and analyse risk data in real time. This capability strengthens Defra's ability to detect, respond to, and prevent cyber and other security threats across its supply chain.

Tender statuscomplete
STAGE-DATE LEDGER

Reported dates, without an invented lifecycle.

The current projection contains one award release, not a verified chain of planning, tender, award, contract and modification records. Dates are shown in source-field order and are not silently repaired.

  1. 01Notice publishedPublication timestamp on the held release23 Mar 2026
  2. 02Tender period endsTender-period field as published31 Dec 2025
  3. 03Contract startsContract-period field as published30 Mar 2026
  4. 04Contract endsContract-period field as published30 Mar 2029
SUPPLIER EVIDENCE

Published names and exact identifiers

A company profile appears only when this release carries a usable company number. Name-only suppliers remain name-only.

Published name only

Risk Ledger

No legal entity is inferred from this supplier name.

SOURCE

Contracts Finder release

Published 23 Mar 2026 · held through the daily award projection · Open Government Licence v3.0.

Inspect the official JSON release ↗