# Provision of a Cyber Security Governance Risk & Compliance Solution

> Contract award record from UK public-sector procurement sources.

## Key facts

- Public buyer: [Crown Commercial Service](/buyers/crown-commercial-service/contract-awards)
- Contract winner: [PHOENIX SOFTWARE LIMITED](/contract-winners/phoenix-software/public-sector-contract-awards)
- Award value: £320,000
- Tender value: £320,000
- Award date: 27 October 2025
- Published: 13 November 2025
- Contract start: 27 October 2025
- Contract end: 26 October 2027
- Stage: awarded
- Procurement category: services
- Notice ID: 9da76c70-7ced-42de-9d21-6ed49d5479fa-871954
- OCID: ocds-b5fd17-bc9432df-f245-45ea-bdd1-7c8d845abfb9

## Description

The Cabinet Office requires a Governance, Risk, and Compliance \(GRC\) tool to enhance its cyber risks and compliance requirements\. The tool will enable clear tracking of governance activities, risks and ensure alignment with departmental objectives\. Ultimately, this will promote more efficient and well-managed digital services across the department\. Overarching requirements: Centralised management: Must provide a single platform to record, track, and manage governance activities, risks, and compliance tasks\. While the immediate focus is on cyber risks, the ability to serve as a consolidated enterprise risk management tool is also highly valued\. Self- service reporting: Should offer dashboards and reports for up-to-date visibility for stakeholders and senior management\. service reporting: Should offer dashboards and reports for up-to-date visibility for stakeholders and senior management\. Risk Assessment and Tracking: Ability to identify, assess, and monitor risks as well as controls with options for categorisation and prioritisation\. Policy and Compliance Monitoring: Support for capturing and auditing compliance with relevant policies, regulations, and standards\.

## Related contract awards

- [Construction Professional Services](/contracts/ocds-b5fd17-ef9d53d6-d412-4bf4-a5cc-856df493e69d): Crown Commercial Service
- [Audit and Assurance Services Two \(A&AS2\)](/contracts/ocds-b5fd17-134ddb7b-5d67-4256-819f-96af62f09e23): Crown Commercial Service
- [The Provision of Workday Licences](/contracts/ocds-b5fd17-bf5442b9-cd6a-45f9-8b27-72a80f29e560): Crown Commercial Service
- [Renew 24 Hour Security Operations Centre \(SOC\) and Cyber Monitoring Service](/contracts/ocds-b5fd17-a09e4005-0fee-4442-8da8-492b9553a524): TORBAY COUNCIL
- [Further Competition RM6098 Tepas 2 Lot 3 - Microsoft Licensing](/contracts/ocds-b5fd17-1077d209-9c04-4187-87e3-40bc80e356b1): Rotherham Doncaster and South Humber NHS Foundation Trust
- [Microsoft Enterprise subscription agreement](/contracts/ocds-b5fd17-040b2294-34db-4a32-bf2a-ddec878107ca): Ipswich Borough Council

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/9da76c70-7ced-42de-9d21-6ed49d5479fa-871954)