HMRC Security Capability Optimisation

Official notice

Authority: HM Revenue & Customs (Central government)

ServicesAbove threshold

Sectors: IT Services & Software (72) Delivery: UK

Planned pipeline valueValue not publishedpipeline notice, not a live tender

Tender notice expected Date not publishedfrom the planned procurement notice

Contract term 3 yrsends 31 Dec 2028 · starts 1 Jan 2026

What is being bought

Published requirement description

HMRC holds vast amounts of sensitive data and underpins critical national services, making it an attractive target for cybercriminals, espionage actors, and insider threats.

Cyber risk remains a fundamental pillar of national security, economic stability, and public trust.

Protecting HMRC's critical assets-both physical and digital-remains central to upholding public confidence and safeguarding our operations.

We face sophisticated, evolving threats that require a more agile, resilient approach to security and as such, we're exploring shifting the balance in service delivery, to increase flexibility and sustainability.

The project remains at feasibility stage only. Assessing options and opportunities to build security capability.

CPV: IT services: consulting, software development, Internet and support

The lotProcurement structure

single lot · no lot value published

Lot #1Planned 3 yrs

Contract period: 1 Jan 2026 – 31 Dec 2028 (3 yrs)

Delivery: UK

72000000 IT services: consulting, software development, Internet and support

Procedure terms & legal framework

From the official record

Legal basis: UKPGA · 2023/54 Procurement Act 2023
Procurement category: Services
Notice status: Past planning notice
Procurement threshold: Above threshold (FTS publication)
Regulatory regime: Standard
Commercial structure: Stand-alone contract (no framework)
Competition type: Competitive procedure
GPA / WTO covered: Unspecified in notice
Recurring procurement: Unspecified in notice
First published: 3 Apr 2025, 14:29 BST
Last source update: 3 Apr 2025, 14:29 BST
Authority reference: SR1933000995
FTS notice number: 2025/S 000-012837
Latest notice: Preliminary market engagement notice (UK2)
Classification (CPV): IT services: consulting, software development, Internet and support
Delivery area: UK
Official registry OCID: ocds-h6vhtk-04fcbf Find a Tender

How it was run

Official notice

Submission deadline: —

Timeline

3 Apr 2025 → 1 Jan 2026 · 3 dates

Planning notice published
3 Apr 2025, 14:29 BST
Market engagement
4 Apr 2025, 23:59 BST
A preliminary market engagement webinar will be hosted by techUK on Monday 7th April 2025, from 15:00 - 16:30.
Interested parties wishing to attend the webinar must contact annie.collings@techuk.org to register.
The deadline to register is 17:00 on Friday 4th April.
Contract starts300 days ago
1 Jan 2026

Notice history

1 event · 1 release on Find a Tender

Preliminary market engagement notice published
3 Apr 2025, 14:29 BST
UK2

Commercial outcome & contract awards

Pipeline notice

Awards (0): No award published
Contracts (0): No contract published
Bid statistics: No aggregate bid statistics published

Contracting authority & participating public bodies

HM Revenue & Customs

Contracting authorityPublic authority - central government GB-PPON: PVMW-8599-JZNJ 100 Parliament Street, London, London, SW1A 2BQContact name, email

Official documents & specifications (1)

Official links; attachments are not copied

Notices published for this procedure

Preliminary market engagement notice planningPreliminary market engagement noticeUK2Preliminary market engagement notice on Find a Tender3 Apr 2025, 14:29 BST