Government Picks Two Cyber Incident Response Partners for £7m Contracts

Why It Matters

The contracts give the government a ready‑to‑deploy, vetted response capability, reducing breach impact and supporting national cyber resilience.

Key Takeaways

• Deloitte and PwC win £8.1m (≈$10.4m) cyber response contracts.
• Service includes on‑site response and remote support across UK government.
• Providers must have UK Security Vetting (SC) clearance and NCSC‑assured status.
• Two‑year term with optional 12‑month extension strengthens national cyber resilience.

Pulse Analysis

The UK’s cyber threat landscape has intensified, with the National Cyber Security Centre reporting a sharp rise in nationally significant incidents. In response, the Government Cyber Coordination Centre (GC3) was created to centralise incident handling across public bodies. By securing dedicated response partners, the government aims to cut response times and limit the operational fallout of attacks that could disrupt essential services.

The contracts awarded to Deloitte and PwC total £8.1 million, roughly $10.4 million, and span two years with a possible 12‑month extension. Both firms bring extensive experience in handling state‑linked cyber events for multinational organisations, and they must field staff with UK Security Vetting (SC) clearance. The requirement for on‑site presence ensures that critical systems can be examined directly, while remote capabilities provide flexibility for incidents across the country.

Beyond immediate protection, the deals signal a broader shift toward a more resilient public‑sector cyber ecosystem. By mandating NCSC‑assured CIR scheme membership, the government sets a high bar for future suppliers, encouraging the market to develop specialised, vetted capabilities. The panel model also allows GC3 to add additional partners as threats evolve, aligning procurement with the UK’s Cyber Security Strategy and reinforcing confidence among citizens and businesses that the state can swiftly counter sophisticated cyber threats.