10 UK resilience entry points · 7 civil contingencies priorities · 6 resilience DEFONEOS MCPs · CONTEST / NSC digital backbone
The UK's National Resilience Strategy (2025 refresh) identifies 5 Tier-1 risks (pandemic, CBRN, cyber, climate extremes, geomagnetic storm) and 12 Tier-2 risks requiring integrated multi-agency response. The Cabinet Office's COBR unit coordinates 42 Local Resilience Forums (LRFs), 3 Devolved Administrations, and 17 Category 1 responders under the Civil Contingencies Act 2004. The FY2026-27 National Security Fund allocates ~£3.4B across the resilience landscape, with a specific £180M digital transformation stream for sovereign AI and data fusion.
DEFONEOS provides UK resilience agencies with a BFT-governed, audit-grade AI operating system purpose-built for multi-agency coordination at the OFFICIAL / OFFICIAL-SENSITIVE boundary. This pack maps 10 resilience procurement entry points, cross-references 7 civil contingencies priorities to DEFONEOS MCP coverage, and demonstrates the CONTEST/NSC digital backbone architecture.
All entries are BFT-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable. Per-entry contacts sourced from Cabinet Office Resilience Directorate (2026-Q1) + MHCLG Local Resilience procurement pipeline.
| # | Entry point | Location | Resilience function | DEFONEOS fit |
|---|---|---|---|---|
| R1 | Cabinet Office — COBR / National Security Secretariat | Westminster, London | National crisis coordination · NSC secretariat | DEFONEOS MCPs: bft-council-probe · mqtt-bridge — BFT-governed national crisis decision-making |
| R2 | UKHSA — UK Health Security Agency | London / Porton Down | Pandemic preparedness · biosecurity · health surveillance | DEFONEOS MCPs: mqtt-bridge · bft-council-probe · openaq-air — health surveillance + BFT pandemic governance |
| R3 | Environment Agency — National Flood Response | Wallingford / Bristol | Flood warning · climate resilience · water management | DEFONEOS MCPs: mqtt-bridge · rtsp-camera · bft-council-probe — flood sensor IoT + sovereign monitoring |
| R4 | National Cyber Security Centre (NCSC) | Cheltenham, Gloucestershire | Cyber resilience · CNI protection · incident response | DEFONEOS MCPs: mcp-cspm · bft-council-probe · mcp-dynamic-sbom — cyber compliance + SBOM assurance |
| R5 | Met Office — Severe Weather & Climate | Exeter, Devon | Weather warnings · climate data · early warning | DEFONEOS MCPs: mqtt-bridge · bft-council-probe — sovereign weather data fusion + BFT warning governance |
| R6 | Joint Emergency Services Interoperability Principles (JESIP) | Multiple sites | Multi-agency coordination · blue-light interoperability | DEFONEOS MCPs: bft-council-probe · mqtt-bridge · rtsp-camera — multi-agency BFT governance + situational awareness |
| R7 | Home Office — CONTEST / Protect & Prepare | Westminster | Counter-terrorism · protective security · preparedness | DEFONEOS MCPs: bft-council-probe · rtsp-camera · mqtt-bridge — BFT CT governance + perimeter monitoring |
| R8 | Ministry of Housing, Communities & Local Government (MHCLG) | Westminster | LRF oversight · local resilience · community preparedness | DEFONEOS MCPs: bft-council-probe · mqtt-bridge — LRF coordination + BFT multi-agency governance |
| R9 | Defence Science & Technology Laboratory (DSTL) | Porton Down / Fort Halstead | CBRN research · resilience science · threat assessment | DEFONEOS MCPs: mcp-dynamic-sbom · bft-council-probe · openaq-air — CBRN data pipeline + SBOM assurance |
| R10 | Infrastructure & Projects Authority (IPA) | Westminster | CNI resilience · infrastructure assurance · major projects | DEFONEOS MCPs: bft-council-probe · mqtt-bridge · mcp-cspm — CNI monitoring + BFT infrastructure governance |
| # | Priority | Lead agency | DEFONEOS MCP coverage | Alignment cross-walk |
|---|---|---|---|---|
| F1 | Pandemic preparedness | UKHSA / DHSC | mqtt-bridge · bft-council-probe · openaq-air | UK Biological Security Strategy · IHR 2005 · JCVI standards |
| F2 | Climate resilience & flooding | Environment Agency / MHCLG | mqtt-bridge · rtsp-camera · bft-council-probe | UK Climate Change Risk Assessment · Flood Risk Regs 2009 |
| F3 | Cyber resilience & CNI | NCSC / DCMS | mcp-cspm · mcp-dynamic-sbom · bft-council-probe | UK Cyber Security Strategy · NIS Regs 2018 · ISO 27001 |
| F4 | Counter-terrorism (CONTEST) | Home Office / MI5 | bft-council-probe · rtsp-camera · mqtt-bridge | CONTEST 2023 · Protect Duty (Martyn's Law) · SPA Standards |
| F5 | CBRN preparedness | DSTL / Home Office | openaq-air · mcp-dynamic-sbom · bft-council-probe | UK CBRN Strategy · OPCW standards · Chemical Weapons Act |
| F6 | Multi-agency interoperability | JESIP / Cabinet Office | bft-council-probe · mqtt-bridge · rtsp-camera | JESIP Joint Doctrine · CCA 2004 · Gold-Silver-Bronze framework |
| F7 | National resilience digital backbone | Cabinet Office Digital | All 30 MCPs (federated resilience pipeline) | UK National Resilience Strategy · MOD Digital Strategy 2026 · ISO 42001 |
| # | MCP | Category | Resilience deployment | Key capability |
|---|---|---|---|---|
| M1 | bft-council-probe | Core | All 10 resilience entry points | 33-agent BFT defence council · quorum-gated multi-agency decision audit |
| M2 | mqtt-bridge | Sensor | Flood sensors · environmental IoT · CNI monitoring | IoT sensor bridge · MQTT sovereign data ingest · resilient mesh |
| M3 | rtsp-camera | Sensor | CT perimeters · flood monitoring · public spaces | IP camera ingest · sovereign video pipeline · situational awareness |
| M4 | openaq-air | Sensor | CBRN monitoring · air quality · environmental | Global air quality data · pollution incident monitoring |
| M5 | mcp-cspm | Compliance | NCSC cyber resilience · CNI assurance | Cloud security posture management · NCSC CAF alignment |
| M6 | mcp-dynamic-sbom | Compliance | DSTL CBRN · critical software supply chain | Real-time SBOM generation · software supply chain assurance |
| Resilience Component | Role | DEFONEOS integration | MCP coverage |
|---|---|---|---|
| COBR (Cabinet Office) | National crisis coordination | BFT-governed national decision-making at OFFICIAL | bft-council-probe · mqtt-bridge |
| 42 LRFs (Regional) | Local multi-agency coordination | BFT-governed local coordination + sensor fusion | bft-council-probe · mqtt-bridge · rtsp-camera |
| UKHSA Surveillance | Health security monitoring | Sovereign health data pipeline + BFT pandemic governance | mqtt-bridge · bft-council-probe · openaq-air |
| Environment Agency Flood | National flood warning | IoT flood sensor network + BFT warning governance | mqtt-bridge · rtsp-camera · bft-council-probe |
| NCSC Cyber Ops | National cyber defence | SBOM + CSPM assurance + BFT incident governance | mcp-cspm · mcp-dynamic-sbom · bft-council-probe |
| Step | Action | Who | Time | Prerequisite |
|---|---|---|---|---|
| 1 | Identify resilience cluster (Pandemic / Flood / Cyber / CT / CBRN / Interop / Digital) | Buyer | 15 min | This resilience pack §2 |
| 2 | Confirm procurement vehicle (Cabinet Office direct / G-Cloud 14 / DASA civil / MHCLG) | Buyer + CSOAI | 30 min | Framework checklist |
| 3 | Confirm classification boundary (OFFICIAL / OFFICIAL-SENSITIVE) | Buyer + CSOAI | 1 hour | SC clearance guide |
| 4 | Submit resilience pilot request (agency-specific or cross-government) | Buyer | 1 hour | DSP tracker |
| 5 | CSOAI provisions resilience-region sovereign VM + DEFONEOS substrate | CSOAI | <24 hours | AG-1: curl -s /health HTTP 200 |
⚠️ HARD RED-LINE: DEFONEOS handles OFFICIAL and OFFICIAL-SENSITIVE data ONLY. No classified data (SECRET, TOP SECRET) flows through DEFONEOS. Classified CT intelligence (MI5/SIS feeds), classified CBRN assessments, and HMG eyes-only crisis communications require separate accredited systems. DEFONEOS provides non-classified multi-agency coordination, IoT sensor fusion, and BFT council governance for the OFFICIAL boundary only.
| Buyer type | Entry point | Procurement vehicle | Security requirement | Pilot tier |
|---|---|---|---|---|
| Cabinet Office / COBR | R1 | CO direct / DSP | SC minimum | T2/T3 |
| National agency (UKHSA / EA / NCSC) | R2 / R3 / R4 | Dept direct / G-Cloud 14 | OFFICIAL-SENSITIVE / SC | T2 |
| Local Resilience Forum | R8 | MHCLG / G-Cloud 14 | OFFICIAL | T1 |
| DSTL / Science agency | R9 | Direct award / DSP | SC minimum | T2 |
| Met Office / IPA | R5 / R10 | Dept direct / G-Cloud 14 | OFFICIAL-SENSITIVE | T1/T2 |