Cyber Security Assurance Services Framework

{
  "id": "046608-2025",
  "tag": [
    "award",
    "contract"
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "value": 4,
        "measure": "bids",
        "relatedLot": "1"
      },
      {
        "id": "6",
        "value": 4,
        "measure": "bids",
        "relatedLot": "3"
      },
      {
        "id": "11",
        "value": 4,
        "measure": "bids",
        "relatedLot": "4"
      },
      {
        "id": "16",
        "value": 4,
        "measure": "bids",
        "relatedLot": "5"
      },
      {
        "id": "21",
        "value": 4,
        "measure": "bids",
        "relatedLot": "6"
      },
      {
        "id": "26",
        "value": 3,
        "measure": "bids",
        "relatedLot": "2"
      },
      {
        "id": "2",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "1"
      },
      {
        "id": "7",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "3"
      },
      {
        "id": "12",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "4"
      },
      {
        "id": "17",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "5"
      },
      {
        "id": "22",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "6"
      },
      {
        "id": "27",
        "value": 3,
        "measure": "smeBids",
        "relatedLot": "2"
      },
      {
        "id": "3",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "1"
      },
      {
        "id": "8",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "3"
      },
      {
        "id": "13",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "4"
      },
      {
        "id": "18",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "5"
      },
      {
        "id": "23",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "6"
      },
      {
        "id": "28",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "2"
      },
      {
        "id": "4",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "1"
      },
      {
        "id": "9",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "3"
      },
      {
        "id": "14",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "4"
      },
      {
        "id": "19",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "5"
      },
      {
        "id": "24",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "6"
      },
      {
        "id": "29",
        "value": 3,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "2"
      },
      {
        "id": "5",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "1"
      },
      {
        "id": "10",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "3"
      },
      {
        "id": "15",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "4"
      },
      {
        "id": "20",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "5"
      },
      {
        "id": "25",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "6"
      },
      {
        "id": "30",
        "value": 3,
        "measure": "electronicBids",
        "relatedLot": "2"
      }
    ]
  },
  "date": "2025-08-06T15:29:24+01:00",
  "ocid": "ocds-h6vhtk-0478f3",
  "buyer": {
    "id": "GB-FTS-53539",
    "name": "City of Edinburgh Council"
  },
  "links": [
    {
      "rel": "canonical",
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446"
    }
  ],
  "awards": [
    {
      "id": "046608-2025-1",
      "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "046608-2025-2",
      "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "3"
      ]
    },
    {
      "id": "046608-2025-3",
      "title": "Threat Intelligence",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "4"
      ]
    },
    {
      "id": "046608-2025-4",
      "title": "Vulnerability Assessments",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "5"
      ]
    },
    {
      "id": "046608-2025-5",
      "title": "Data & Hardware Sanitisation",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "6"
      ]
    },
    {
      "id": "046608-2025-6",
      "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "2"
      ]
    }
  ],
  "tender": {
    "id": "CT1218",
    "lots": [
      {
        "id": "1",
        "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and\n- Security assurance and reporting of proposed new technologies and services.\nSuppliers must also provide:\n- Advice and consultation on proposed and existing cloud developments,\n- Advice and consultation on proposed and existing cloud infrastructure configurations, and\n- Advice and consultation on cloud technologies to support ongoing management of our cloud operations.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Delivery of Services",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Advice and Consultancy",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Account Management and Staffing",
              "type": "quality",
              "description": "15"
            },
            {
              "name": "Business continuity",
              "type": "quality",
              "description": "10"
            },
            {
              "name": "The Environment",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Fair Work Practices",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Community Benefits",
              "type": "quality",
              "description": "5"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "2",
        "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Incident Response,\n- Digital Forensics,\n- Data Breach Assessment and Recovery.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "3",
        "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Security Audit – PCI,\n- Security Architecture/Design Review,\n- Compliance and Regulatory Services.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "4",
        "title": "Threat Intelligence",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Threat Intelligence",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "5",
        "title": "Vulnerability Assessments",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Vulnerability Assessments",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "6",
        "title": "Data & Hardware Sanitisation",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Data and Hardware Sanitisation",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "2",
        "relatedLot": "2",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "3",
        "relatedLot": "3",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "4",
        "relatedLot": "4",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "5",
        "relatedLot": "5",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "6",
        "relatedLot": "6",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "Cyber Security Assurance Services Framework",
    "status": "complete",
    "coveredBy": [
      "GPA"
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "techniques": {
      "hasFrameworkAgreement": true
    },
    "description": "The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.",
    "reviewDetails": "An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Restricted procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-53539",
      "name": "City of Edinburgh Council",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKM75",
        "locality": "Edinburgh",
        "postalCode": "EH8 8BG",
        "countryName": "United Kingdom",
        "streetAddress": "Waverley Court"
      },
      "details": {
        "url": "http://www.edinburgh.gov.uk",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290",
        "classifications": [
          {
            "id": "REGIONAL_AUTHORITY",
            "scheme": "TED_CA_TYPE",
            "description": "Regional or local authority"
          },
          {
            "id": "01",
            "scheme": "COFOG",
            "description": "General public services"
          }
        ]
      },
      "identifier": {
        "legalName": "City of Edinburgh Council"
      },
      "contactPoint": {
        "name": "Shane Newell",
        "email": "shane.newell@edinburgh.gov.uk"
      }
    },
    {
      "id": "GB-FTS-107397",
      "name": "Trustmarque Solutions Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE21",
        "locality": "York.",
        "postalCode": "YO26 6RW",
        "countryName": "United Kingdom",
        "streetAddress": "Marlborough House, Westminster Place, York Business Park,"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Trustmarque Solutions Ltd"
      }
    },
    {
      "id": "GB-FTS-157203",
      "name": "Redcentric Solutions Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE2",
        "locality": "Harrogate",
        "postalCode": "HG3 1UG",
        "countryName": "United Kingdom",
        "streetAddress": "Central House, Beckwith Knowle"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Redcentric Solutions Limited"
      }
    },
    {
      "id": "GB-FTS-108965",
      "name": "NCC Group Security Services Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "MANCHESTER",
        "postalCode": "M3 3AQ",
        "countryName": "United Kingdom",
        "streetAddress": "XYZ Building, 2 Hardman Boulevard, Spinningfields,"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "legalName": "NCC Group Security Services Limited"
      }
    },
    {
      "id": "GB-FTS-157204",
      "name": "Entserv UK Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Aldershot",
        "postalCode": "GU11 1PZ",
        "countryName": "United Kingdom",
        "streetAddress": "Royal Pavilion, Wellesley Road"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Entserv UK Ltd"
      }
    },
    {
      "id": "GB-FTS-5024",
      "name": "Sheriff Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Edinburgh",
        "postalCode": "EH1 1LB",
        "countryName": "United Kingdom",
        "streetAddress": "Sheriff Court House, 27 Chambers Street"
      },
      "identifier": {
        "legalName": "Sheriff Court"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "046608-2025-1",
      "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-1",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-2",
      "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-2",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-3",
      "title": "Threat Intelligence",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-3",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-4",
      "title": "Vulnerability Assessments",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-4",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-5",
      "title": "Data & Hardware Sanitisation",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-5",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-6",
      "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-6",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    }
  ],
  "description": "Contained in tender documentation\n(SC Ref:806607)",
  "initiationType": "tender"
}