Decision

It is recommended that the Corporate Director of Resources:

1. Approves the award of a contract to NCC Group for the provision of the Incident Response Retainer – Retained Cyber Incident Response Service, procured through the Crown Commercial Service G-Cloud 14 framework, Lot 3: Cloud Support.

1. Approves an initial contract term of 12 months, commencing on 1 September 2026 and expiring on 31 August 2027, with an initial estimated contract value of £80,000.

1. Approves provision within the contract for up to two further extensions of 12 months each, subject to satisfactory supplier performance, continued service need and confirmation of available budget.

1. Notes that, if both extension options are exercised, the maximum contract term will be 36 months, ending on 31 August 2029, with a maximum estimated total contract value of £240,000.

1. Delegates authority to the Assistant Director of Technology, in consultation with the relevant Procurement and Finance officers, to exercise the two optional 12-month extensions, subject to satisfactory performance, continued requirement and budget availability.