Cyber Security Assurance Services Framework

A Contract Award Notice
by CITY OF EDINBURGH COUNCIL

Source
Find a Tender
Type
Framework (Services)
Duration
2 year (est.)
Value
£750K
Sector
TECHNOLOGY
Published
06 Aug 2025
Delivery
To 06 Aug 2027 (est.)
Deadline
n/a

Concepts

Location

Edinburgh

Geochart for 2 buyers and 23 suppliers

2 buyers

4 suppliers

Description

The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

Lot Division

1 Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and - Security assurance and reporting of proposed new technologies and services. Suppliers must also provide: - Advice and consultation on proposed and existing cloud developments, - Advice and consultation on proposed and existing cloud infrastructure configurations, and - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.

Award Criteria
Delivery of Services 30.0
Advice and Consultancy 30.0
Account Management and Staffing 15.0
Business continuity 10.0
The Environment 5.0
Fair Work Practices 5.0
Community Benefits 5.0
PRICE 50.0
2 Incident Response, Digital Forensics, Data Breach Assessment & Recovery

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Incident Response, - Digital Forensics, - Data Breach Assessment and Recovery.

Award Criteria
Quality from Lot 1 50.0
PRICE 50.0
3 Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Security Audit – PCI, - Security Architecture/Design Review, - Compliance and Regulatory Services.

Award Criteria
Quality from Lot 1 50.0
PRICE 50.0
4 Threat Intelligence

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Threat Intelligence

Award Criteria
Quality from Lot 1 50.0
PRICE 50.0
5 Vulnerability Assessments

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Vulnerability Assessments

Award Criteria
Quality from Lot 1 50.0
PRICE 50.0
6 Data & Hardware Sanitisation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Data and Hardware Sanitisation

Award Criteria
Quality from Lot 1 50.0
PRICE 50.0

Award Detail

1 Trustmarque Solutions (York)
  • Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
2 Redcentric Solutions (Harrogate)
  • Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
3 NCC Group Security Services (Manchester)
  • Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
4 Entserv (Aldershot)
  • Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
5 Trustmarque Solutions (York)
  • Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
6 Redcentric Solutions (Harrogate)
  • Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
7 NCC Group Security Services (Manchester)
  • Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
8 Entserv (Aldershot)
  • Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
9 Trustmarque Solutions (York)
  • Threat Intelligence
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
10 Redcentric Solutions (Harrogate)
  • Threat Intelligence
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
11 NCC Group Security Services (Manchester)
  • Threat Intelligence
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
12 Entserv (Aldershot)
  • Threat Intelligence
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
13 Trustmarque Solutions (York)
  • Vulnerability Assessments
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
14 Redcentric Solutions (Harrogate)
  • Vulnerability Assessments
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
15 NCC Group Security Services (Manchester)
  • Vulnerability Assessments
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
16 Entserv (Aldershot)
  • Vulnerability Assessments
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
17 Trustmarque Solutions (York)
  • Data & Hardware Sanitisation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
18 Redcentric Solutions (Harrogate)
  • Data & Hardware Sanitisation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
19 NCC Group Security Services (Manchester)
  • Data & Hardware Sanitisation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
20 Entserv (Aldershot)
  • Data & Hardware Sanitisation
  • Num offers: 4
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
21 Redcentric Solutions (Harrogate)
  • Incident Response, Digital Forensics, Data Breach Assessment & Recovery
  • Num offers: 3
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.
22 NCC Group Security Services (Manchester)
  • Incident Response, Digital Forensics, Data Breach Assessment & Recovery
  • Num offers: 3
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
23 Entserv (Aldershot)
  • Incident Response, Digital Forensics, Data Breach Assessment & Recovery
  • Num offers: 3
  • Value: £750,000 [share]
  • Awarded to group of suppliers.
  • Contractor is an SME.

CPV Codes

  • 72000000 - IT services: consulting, software development, Internet and support

Indicators

  • Award on basis of price.

Other Information

Contained in tender documentation (SC Ref:806607)

Reference

Domains