Cyber Security Services 3

A flexible commercial agreement that offers an extensive range of cyber security services to help improve cyber resilience.


There are two routes to finding suppliers.


The first route offers services that have been assured by the National Cyber Security Centre (NCSC). All suppliers on this route have cyber security expertise in services that have been independently assessed against the NCSC standards of what “good” should look like for each particular area of cyber security.

The second route also offers services without NCSC assurance. It is the Buyers responsibility to determine whether the service offered is fit for purpose.

Read more information about NCSC certification.


  • New suppliers and services (within scope) can be added during the life of the agreement
  • Flexible 1 or 2 stage tender process, providing the option of a capability assessment to qualify a short-list of suitable suppliers
  • Expedient process with tenders only needing to be in the supply market for 10 days
  • Fully compliant with public sector contract legislation

Products and suppliers

Please read the 'How to buy' tab below for detailed instructions on how to find out which suppliers are on this agreement.

Lot 1: Cyber Security Services 3


How to buy

  1. Register as a buyer. Note: although pages are headed ‘Supplier registration’ this is also where you can register as a buyer
  2. Navigate to the Cyber Security Services 3 DPS and log in with your username and password, click on ‘confirm’ at the bottom of the text, and agree to the terms of use
  3. on your ‘Manage your DPS Category Exports’ page you now have 2 options (in the bottom right-hand corner of the page):
    1. view appointed suppliers
    2. click on the link to create a new category export, this is how you filter the suppliers that can meet your needs
  4. use the filtering tool to specify your needs, this will create a list of capable suppliers
  5. save your filtered list of capable suppliers by clicking the ‘Save Category’ option
    1. from your ‘Manage your Category Exports’ page you can then export the list of suppliers and contact details (export is to an Excel spreadsheet)
  6. log out of the DPS
  7. Use the list to run a further competition. Invite the suppliers identified by the DPS to bid against your detailed specification and evaluation criteria.
    1. The list is valid for 2 working days only, from the date of its creation, because new suppliers may be applying to join at any point. If your further competition excludes eligible suppliers it potentially breaches procurement regulations. Obtain a fresh supplier list (steps 3.2 to 5) if you don’t use your list within 2 working days by clicking the ‘Search Again’ option for your export
    2. you can use your own eSourcing tool or the CCS eSourcing tool to run a further competition. The CCS eSourcing tool is free to use for public sector buyers
  8. evaluate responses and award contract

Detailed buyer guidance is available in the documents section. Additionally, you can watch the How to use the Cyber Security Services 3 Dynamic Purchasing System video.