Purpose

Risk Ledger is an online platform that helps organisations, understand and manage cyber and information security risks across their supply chain. It allows suppliers to answer a standard set of questions about how they protect information and systems, and to share those responses securely with their customers.

Decision

To procure the Risk Ledger software solution for an initial period of 2 years with 2 optional 1-year extensions.

Alternative options considered

This is used by around 40 local authorities, and has a strategic partnership with the Ministry of Housing, Communities and Local Government (MHCLG), therefore other software options considered were rejected in favour of this one.