Programme delivery for cyber and cloud contracts
Won the contract? We'll help you deliver it.
For consultancies and primes that have won public sector cyber, cloud migration or data centre exit work and need senior delivery capacity under their own contract.
Programme and project management
Plans, milestones, the RAID log, dependency and supplier management, and reporting to your client's programme board across the workstreams you've won.
Setting up and running a PMO
Governance cadence, reporting packs, change control, and risk, issue and milestone tracking. Set up and handed to your team, or run for the life of the contract.
Running the security and assurance workstream
The risk register, the controls and the evidence an assurance board asks for, aligned to ISO 27001 and NCSC guidance, plus supplier assurance including Cyber Essentials and DCC.
How the work runs
Subcontract under your framework: You hold the call-off and your client sees one supplier: you. Where a framework requires key subcontractors to be approved, as G-Cloud does, we provide what's needed for that approval.
A statement of work with deliverables: Each engagement is a statement of work with named deliverables and acceptance, not a day-rate seat. That supports the IR35 assessment; the status determination remains the end client's to make.
30-day payment: Section 73 of the Procurement Act 2023 implies 30-day payment terms into public sector sub-contracts, and a term that tries to displace them has no effect.
Insured: £1m professional indemnity with Hiscox.
G-Cloud and programme management. Under G-Cloud 15 (RM1557.15), GCA (formerly CCS) permits only support relating to the cloud, "not the provision of staff or interims". Programme management bought through G-Cloud has to be tied to a cloud service. Otherwise it sits under a services framework such as DOS7 (RM1043.9), Technology Services 4 (RM6190) or MCF4 (RM6309).
Delivery history
Central government
Cloud and infrastructure programmes for UK departments of state: data centre exits, Active Directory uplift and 10,000+ endpoint migrations to Windows 11 and Microsoft Intune, aligned to NCSC and departmental compliance frameworks.
Defence primes and NATO
Multinational defence programme delivery across the UK, France and Italy: secure collaboration platforms, export-control governance and engineering compliance under NATO defence standards.
SC Cleared personnel available. £1m professional indemnity with Hiscox.