Framework Description
RM3764.3 Cyber Security Services 3 is a dynamic purchasing system run by the Government Commercial Agency (GCA, formerly Crown Commercial Service). It offers cyber security services to help public sector organisations strengthen their resilience and security posture. It is a single-lot DPS available until 13 February 2029, and suppliers can apply to join at any time until then.
Context & Use Case
Central government departments, wider public sector bodies and charities use it to shortlist suppliers with a set of filters and then run a further competition. It is an official route to NCSC assured services, including CHECK penetration testing and IT health checks. GCA is designing the next iteration, RM3764.4 Cyber Security 4.
Scope of Services
Consultancy and advice, including risk, audit, architecture and strategy Penetration testing, including NCSC assured CHECK and IT health checks Incident response, threat intelligence and disaster recovery Data destruction and IT sanitisation Managed security services, including SOC and managed detection and response
Lots
Single lot
Who Can Apply
Suits cyber security consultancies, penetration testers, incident response specialists and managed security providers that meet the entry requirements. As a live DPS, it accepts new suppliers throughout its term, so firms can apply to join now.
Buyer Benefits
Public bodies face constant cyber threats and must meet government security standards. They value NCSC assured providers, filters that find the right specialism quickly, and the speed of competing among pre-qualified firms when an incident or audit deadline looms. A growing pool also keeps prices keen.
Next Steps
Read the DPS entry requirements on the RM3764.3 page and submit an application by the route GCA sets out there. Set your capability filters accurately so you appear in buyer shortlists, and keep them up to date. Follow GCA's engagement on RM3764.4 so you are ready for the next iteration.
How Athena Can Help
Athena's DPS admission service prepares your RM3764.3 application, including selection answers, certifications and the capability filters that decide which shortlists you appear in.
Once you are admitted, our cyber bid writers help you win further competitions with clear methodology and win themes, and our public sector bid guidance helps you prepare early for RM3764.4. We also offer a Bid Health Check on draft responses and model your likely score against rival cyber firms, so you can see where to improve before submitting.



