Find a TenderAwardedContract details notice
Published 31 Mar 2026, 16:18 BST

Official UK procurement notice

P-3352 Cyber Security and PCI DSS Auditing Services

Official notice

Authority: Translink (Public body)

2 lotsServicesOpen procedureAbove thresholdUtilities
Published estimate£560,000envelope for 2 lots · £672,000 inc. VAT
Submissions closed 30 Apr 2026awarded 13 Aug 2026
Awarded to SALUS DIGITAL SECURITY LIMITED, NCC Group Security Services Limited2 awards
Contract term 3 yrsends 14 Jun 2029 · up to 14 Jun 2031 with extensions · starts 15 Jun 2026

What is being bought2 lots · detail below

Published requirement description

Translink wishes to ensure that its corporate network and all systems are secured in line

with industry best practice. It is recognised that network security requirements are

constantly changing and that testing should be carried out on an ongoing basis. Translink

wishes to ensure that its CDE is secured in line with PCI DSS. It is recognised that

electronic security payments are constantly changing and that testing should be carried

out on an ongoing basis.

  • The authority expects to re-tender this requirement around 3 Feb 2031, 23:59 GMT.

CPV: Computer audit and testing services · Computer audit consultancy and hardware consultancy services · Computer audit services

Lots and requirements (2)Procurement structure

2 lots · all with a published value (£560,000 together) · same evaluation weights on every lot
Lot #1Cyber SecurityAwardedRenewal 3 yrsPublished value£350,000

Lot 1 - Cyber Security

Translink wishes to ensure that its corporate network and all systems are secured in line with industry best practice. It is recognised that network security requirements are constantly changing and that testing should be carried out on an ongoing basis.

Contract period: 15 Jun 2026 – 14 Jun 2029 (3 yrs) · up to 14 Jun 2031 with extensionsValue: £350,000 exc. VAT · £420,000 inc. VAT
Extensions: 2 possible extension periods of 1 year available.
Lot #2PCIAwardedRenewal 3 yrsPublished value£210,000

Lot 2 - PCI

Translink wishes to ensure that its CDE is secured in line with PCI DSS. It is recognised that electronic security payments are constantly changing and that testing should be carried out on an ongoing basis.

Contract period: 15 Jun 2026 – 14 Jun 2029 (3 yrs) · up to 14 Jun 2031 with extensionsValue: £210,000 exc. VAT · £252,000 inc. VAT
Extensions: 2 possible extension periods of 1 year available.

What it takes to win
i

How this buyer will score bids.

The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).

Evaluation split and conditions of participation as published; the tender pack may add more
How bids were scored · same split on all 2 lots
Quality: 70%Price: 30%
Published sub-criteria (2)
  • Quality: 70%
  • Cost: 30%
Published award criteria (2)
  • Quality
  • Cost
What this means for your bid
  • Price carries 30 of 100 points: a 10% discount moves about 3 points. The method statement decides this lot, not the discount.

Price arithmetic assumes straight proportional scoring; the tender pack may use another formula.

Procedure terms & legal framework

From the official record
Procedure method
Open procedure
Legal basis
UKPGA · 2023/54 Procurement Act 2023
Procurement category
Services
Notice status
Awarded
Procurement threshold
Above threshold (FTS publication)
Regulatory regime
Utilities
Commercial structure
Stand-alone contract (no framework)
Competition type
Competitive procedure
GPA / WTO covered
Yes (GPA)
Recurring procurement
Yes · next expected 3 Feb 2031
First published
31 Mar 2026, 16:18 BST
Last source update
2 Sept 2026, 15:59 BST
Award evaluation window
Submission end – 25 May 2026
FTS notice number
2026/S 000-029942
Latest notice
Contract details notice (UK7)
Classification (CPV)
Computer audit and testing servicesComputer audit consultancy and hardware consultancy servicesComputer audit services
Delivery area
Northern Ireland (UKN)
Official registry OCID
ocds-h6vhtk-0679df Find a Tender

How it was run

Official notice
Run through: eTendersNI · Who buys & how to bid on eTendersNI
Supplier login requiredElectronic submission allowedLanguage: EN
Access & registration note: Free Northern Ireland registration
Submission deadline
30 Apr 2026, 12:00 BST
Clarification deadline
23 Apr 2026, 12:00 BST
Submission channel
Official e-sourcing portal
Electronic submission
Allowed
Accepted languages
en
Detailed submission instructions & authority contactsFrom official release

Timeline

31 Mar 2026 → 2 Sept 2026 · 7 dates
  1. Tender notice published199 days ago
    31 Mar 2026, 16:18 BST
  2. Clarification questions by176 days ago
    23 Apr 2026, 12:00 BST
  3. Submission deadline169 days ago
    30 Apr 2026, 12:00 BST
  4. Award decision expected by144 days ago
    25 May 2026, 23:59 BST
  5. Contract starts124 days ago
    15 Jun 2026, 00:00 BST
  6. Assessment summaries sent65 days ago
    13 Aug 2026, 00:00 BST
  7. Latest notice published44 days ago
    2 Sept 2026, 15:59 BST

Notice history

5 events · 3 releases on Find a Tender · since 31 Mar 2026
  1. Tender notice published
    31 Mar 2026, 16:18 BST
    UK4
  2. Contract award notice published
    13 Aug 2026, 14:10 BST
    UK6
  3. Status changed to complete
    13 Aug 2026, 14:10 BST
  4. Contract signature expected
    25 Aug 2026, 23:59 BST
    scheduled
  5. Contract details notice published
    2 Sept 2026, 15:59 BST
    UK7

Commercial outcome & contract awards

Published awards, contracts and bid statistics, not a forecast
Awards 2
Awarded value £560,0002 awards exc. VAT
Bids received 16
Contracts signed 2latest 31 Aug 2026
Awarded toValueDateStatus
Lot 1 · Cyber Security1 award
SALUS DIGITAL SECURITY LIMITEDSME1 Sept 2026 – 31 Aug 2029 · up to 31 Aug 2031Extensions: 2 possible extension periods of 1 year available.£350,00013 Aug 2026Awarded
Lot 2 · PCI1 award
NCC Group Security Services Limited1 Sept 2026 – 31 Aug 2029 · up to 31 Aug 2031Extensions: 2 possible extension periods of 1 year available.£210,00013 Aug 2026Awarded

Contracts

  • 2 · NCC Group Security Services Limited

    Signed
    31 Aug 2026
    Value
    £210,000
    Period
    1 Sept 2026 – 31 Aug 2029 · up to 31 Aug 2031 with extensions
    Status
    active
    Extensions
    2 possible extension periods of 1 year available.
  • 1 · SALUS DIGITAL SECURITY LIMITEDSME

    Signed
    26 Aug 2026
    Value
    £350,000
    Period
    1 Sept 2026 – 31 Aug 2029 · up to 31 Aug 2031 with extensions
    Status
    active
    Extensions
    2 possible extension periods of 1 year available

Bid statistics published by the authority

LotBidsSMEVCSEValid bid range
1 · Cyber Security9final-stage tenders · 13 at stage one00—
2 · PCI7final-stage tenders · 8 at stage one00—

Contracting authority & participating public bodies

Translink

Contracting authorityPublic undertakingNorthern Irish devolved regulations apply GB-PPON: PTMT-7134-NRMV 22 Great Victoria Street, Belfast, Northern Ireland, BT2 7LXContact email

Bidders & participating suppliers

2 commercial parties on the notice
  • NCC Group Security Services LimitedAwarded supplierGB-PPON: PGBX-8917-JCGX XYZ Building, 2 Hardman Boulevard, Spinningfields, Manchester, North West, M3 3AQContact email
  • Salus Digital Security LimitedAwarded supplierGB-PPON: PPMJ-3233-NYMT 1 Trinity Park, Bickenhill Lane, Birmingham, West Midlands, B37 7ESContact email

Official documents & specifications (5)

Official links; attachments are not copied

Notices published for this procedure

  • Contract details notice contractContract details noticeUK7Contract details notice on Find a Tender
  • Contract details notice contractContract details noticeUK7Contract details notice on Find a Tender
  • Contract award notice awardContract award noticeUK6Contract award notice on Find a Tender
  • Contract award notice awardContract award noticeUK6Contract award notice on Find a Tender
  • Tender notice tenderTender noticeUK4Tender notice on Find a Tender