← Back to search results

AwardedFind a Tender · award

Cyber Security Assurance Services Framework

Buyer: City of Edinburgh Council →

BuyerCity of Edinburgh Council
StatusAwarded
DeadlineNot published
ValueValue not published
Published6 Aug 2025

What is being bought

The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

Delivery location

UKM75 · UKM75 · UKM75 · UKM75 · UKM75 · UKM75

Categories

IT services: consulting, software development, Internet and support 72000000IT services: consulting, software development, Internet and support 72000000

Lot details

Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and - Security assurance and reporting of proposed new technologies and services. Suppliers must also provide: - Advice and consultation on proposed and existing cloud developments, - Advice and consultation on proposed and existing cloud infrastructure configurations, and - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.

Statuscancelled

Award criteria
Delivery of Services — 30
Advice and Consultancy — 30
Account Management and Staffing — 15
Business continuity — 10
The Environment — 5
Fair Work Practices — 5
Community Benefits — 5
price — 50

Incident Response, Digital Forensics, Data Breach Assessment & Recovery

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Incident Response, - Digital Forensics, - Data Breach Assessment and Recovery.

Statuscancelled

Award criteria
Quality from Lot 1 — 50
price — 50

Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Security Audit – PCI, - Security Architecture/Design Review, - Compliance and Regulatory Services.

Statuscancelled

Award criteria
Quality from Lot 1 — 50
price — 50

Threat Intelligence

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Threat Intelligence

Statuscancelled

Award criteria
Quality from Lot 1 — 50
price — 50

Vulnerability Assessments

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Vulnerability Assessments

Statuscancelled

Award criteria
Quality from Lot 1 — 50
price — 50

Data & Hardware Sanitisation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Data and Hardware Sanitisation

Statuscancelled

Award criteria
Quality from Lot 1 — 50
price — 50

What is included

ItemCategoryQuantity
1IT services: consulting, software development, Internet and supportNot published
2IT services: consulting, software development, Internet and supportNot published
3IT services: consulting, software development, Internet and supportNot published
4IT services: consulting, software development, Internet and supportNot published
5IT services: consulting, software development, Internet and supportNot published
6IT services: consulting, software development, Internet and supportNot published

Comparable-procurement analytics

Benchmarked against retained Find a Tender procedures with CPV division 72. The category anchor is IT services: consulting, software development, Internet and support (72000000); this is a deliberately broad market comparator. The comparison is shown at several levels rather than pretending one company or region is always the best benchmark.

Comparison setProceduresReported bids per procedureNamed award suppliersPrice evidence
Market: CPV division 727,8211 median · 15 average (3,010 of 7,821 with a bid count)1.9 average (3,597 of 7,821 with named award suppliers)Not published
Same buyer1Not publishedNot publishedNot published
Delivery region: UKM75792 median · 3.5 average (56 of 79 with a bid count)1.2 average (64 of 79 with named award suppliers)Not published

“Reported bids” is an official aggregate, sometimes reported per lot; it is the closest available competition measure. “Named award suppliers” are winners, not all applicants.

Price-outcome signal

Not enough comparable procedures currently publish both a GBP tender value and a usable lowest-valid-bid value to calculate a responsible price-reduction benchmark. Tenderline deliberately does not infer a saving from named award suppliers or from missing award values.

Procurement strategy & market signals

Framework agreementYes
Dynamic purchasing systemNot published
Competitive procurementNot published
Recurring requirementNot published
Procurement method rationaleNot published
Rationale classificationsNot published
Special regimeNot published
Covered byGPA
Submission policyNot published
Selection criteriaNot published
Risk detailsNot published

Planning & early market engagement

BudgetNot published
No-engagement rationaleNot published
Planning documents0
Planning milestones0

No planning milestones published.

Related procurements

No linked framework, prior procurement or reprocurement published.

Awards

Contracts

Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation

Statusactive
Value£750,000

Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.

Statusactive
Value£750,000

Threat Intelligence

Statusactive
Value£750,000

Vulnerability Assessments

Statusactive
Value£750,000

Data & Hardware Sanitisation

Statusactive
Value£750,000

Incident Response, Digital Forensics, Data Breach Assessment & Recovery

Statusactive
Value£750,000

Documents & submission route

No documents are published in the current source record.

Source data inventory

Diagnostic view. “Not published” means this current release does not provide a value.

OCIDocds-h6vhtk-0478f3
Latest release ID046608-2025
Latest release timestampWed Aug 06 2025 14:29:24 GMT+0000 (Coordinated Universal Time)
Sourcefind-a-tender
Official notice URLNot published
Tender statuscomplete
Procurement methodselective
Procurement method detailsRestricted procedure
Main procurement categoryservices
Above thresholdNot published
Legal basis32014L0024
Tender period: startNot published
Tender period: endNot published
Expression of interest deadlineNot published
Enquiry deadlineNot published
Award period: startNot published
Award period: endNot published
Submission method detailsNot published
Submission languagesNot published
Electronic catalogue policyNot published
Total tender valueNot published
Tender lots in source6
Tender items in source6
Tender documents in source0
Awards in latest release6
Contracts in latest release6
Parties in latest release6

Notice history

DateEventReference
6 Aug 2025award, contract046608-2025
2 Jul 2024tender020020-2024

All source data

Unmodified official OCDS data retained by Tenderline for this procurement process.

Complete current OCDS release JSON
{
  "id": "046608-2025",
  "tag": [
    "award",
    "contract"
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "value": 4,
        "measure": "bids",
        "relatedLot": "1"
      },
      {
        "id": "6",
        "value": 4,
        "measure": "bids",
        "relatedLot": "3"
      },
      {
        "id": "11",
        "value": 4,
        "measure": "bids",
        "relatedLot": "4"
      },
      {
        "id": "16",
        "value": 4,
        "measure": "bids",
        "relatedLot": "5"
      },
      {
        "id": "21",
        "value": 4,
        "measure": "bids",
        "relatedLot": "6"
      },
      {
        "id": "26",
        "value": 3,
        "measure": "bids",
        "relatedLot": "2"
      },
      {
        "id": "2",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "1"
      },
      {
        "id": "7",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "3"
      },
      {
        "id": "12",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "4"
      },
      {
        "id": "17",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "5"
      },
      {
        "id": "22",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "6"
      },
      {
        "id": "27",
        "value": 3,
        "measure": "smeBids",
        "relatedLot": "2"
      },
      {
        "id": "3",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "1"
      },
      {
        "id": "8",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "3"
      },
      {
        "id": "13",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "4"
      },
      {
        "id": "18",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "5"
      },
      {
        "id": "23",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "6"
      },
      {
        "id": "28",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "2"
      },
      {
        "id": "4",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "1"
      },
      {
        "id": "9",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "3"
      },
      {
        "id": "14",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "4"
      },
      {
        "id": "19",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "5"
      },
      {
        "id": "24",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "6"
      },
      {
        "id": "29",
        "value": 3,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "2"
      },
      {
        "id": "5",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "1"
      },
      {
        "id": "10",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "3"
      },
      {
        "id": "15",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "4"
      },
      {
        "id": "20",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "5"
      },
      {
        "id": "25",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "6"
      },
      {
        "id": "30",
        "value": 3,
        "measure": "electronicBids",
        "relatedLot": "2"
      }
    ]
  },
  "date": "2025-08-06T15:29:24+01:00",
  "ocid": "ocds-h6vhtk-0478f3",
  "buyer": {
    "id": "GB-FTS-53539",
    "name": "City of Edinburgh Council"
  },
  "links": [
    {
      "rel": "canonical",
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446"
    }
  ],
  "awards": [
    {
      "id": "046608-2025-1",
      "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "046608-2025-2",
      "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "3"
      ]
    },
    {
      "id": "046608-2025-3",
      "title": "Threat Intelligence",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "4"
      ]
    },
    {
      "id": "046608-2025-4",
      "title": "Vulnerability Assessments",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "5"
      ]
    },
    {
      "id": "046608-2025-5",
      "title": "Data & Hardware Sanitisation",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "6"
      ]
    },
    {
      "id": "046608-2025-6",
      "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "2"
      ]
    }
  ],
  "tender": {
    "id": "CT1218",
    "lots": [
      {
        "id": "1",
        "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and\n- Security assurance and reporting of proposed new technologies and services.\nSuppliers must also provide:\n- Advice and consultation on proposed and existing cloud developments,\n- Advice and consultation on proposed and existing cloud infrastructure configurations, and\n- Advice and consultation on cloud technologies to support ongoing management of our cloud operations.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Delivery of Services",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Advice and Consultancy",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Account Management and Staffing",
              "type": "quality",
              "description": "15"
            },
            {
              "name": "Business continuity",
              "type": "quality",
              "description": "10"
            },
            {
              "name": "The Environment",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Fair Work Practices",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Community Benefits",
              "type": "quality",
              "description": "5"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "2",
        "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Incident Response,\n- Digital Forensics,\n- Data Breach Assessment and Recovery.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "3",
        "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Security Audit – PCI,\n- Security Architecture/Design Review,\n- Compliance and Regulatory Services.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "4",
        "title": "Threat Intelligence",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Threat Intelligence",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "5",
        "title": "Vulnerability Assessments",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Vulnerability Assessments",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "6",
        "title": "Data & Hardware Sanitisation",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Data and Hardware Sanitisation",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "2",
        "relatedLot": "2",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "3",
        "relatedLot": "3",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "4",
        "relatedLot": "4",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "5",
        "relatedLot": "5",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "6",
        "relatedLot": "6",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "Cyber Security Assurance Services Framework",
    "status": "complete",
    "coveredBy": [
      "GPA"
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "techniques": {
      "hasFrameworkAgreement": true
    },
    "description": "The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.",
    "reviewDetails": "An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Restricted procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-53539",
      "name": "City of Edinburgh Council",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKM75",
        "locality": "Edinburgh",
        "postalCode": "EH8 8BG",
        "countryName": "United Kingdom",
        "streetAddress": "Waverley Court"
      },
      "details": {
        "url": "http://www.edinburgh.gov.uk",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290",
        "classifications": [
          {
            "id": "REGIONAL_AUTHORITY",
            "scheme": "TED_CA_TYPE",
            "description": "Regional or local authority"
          },
          {
            "id": "01",
            "scheme": "COFOG",
            "description": "General public services"
          }
        ]
      },
      "identifier": {
        "legalName": "City of Edinburgh Council"
      },
      "contactPoint": {
        "name": "Shane Newell",
        "email": "shane.newell@edinburgh.gov.uk"
      }
    },
    {
      "id": "GB-FTS-107397",
      "name": "Trustmarque Solutions Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE21",
        "locality": "York.",
        "postalCode": "YO26 6RW",
        "countryName": "United Kingdom",
        "streetAddress": "Marlborough House, Westminster Place, York Business Park,"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Trustmarque Solutions Ltd"
      }
    },
    {
      "id": "GB-FTS-157203",
      "name": "Redcentric Solutions Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE2",
        "locality": "Harrogate",
        "postalCode": "HG3 1UG",
        "countryName": "United Kingdom",
        "streetAddress": "Central House, Beckwith Knowle"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Redcentric Solutions Limited"
      }
    },
    {
      "id": "GB-FTS-108965",
      "name": "NCC Group Security Services Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "MANCHESTER",
        "postalCode": "M3 3AQ",
        "countryName": "United Kingdom",
        "streetAddress": "XYZ Building, 2 Hardman Boulevard, Spinningfields,"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "legalName": "NCC Group Security Services Limited"
      }
    },
    {
      "id": "GB-FTS-157204",
      "name": "Entserv UK Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Aldershot",
        "postalCode": "GU11 1PZ",
        "countryName": "United Kingdom",
        "streetAddress": "Royal Pavilion, Wellesley Road"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Entserv UK Ltd"
      }
    },
    {
      "id": "GB-FTS-5024",
      "name": "Sheriff Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Edinburgh",
        "postalCode": "EH1 1LB",
        "countryName": "United Kingdom",
        "streetAddress": "Sheriff Court House, 27 Chambers Street"
      },
      "identifier": {
        "legalName": "Sheriff Court"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "046608-2025-1",
      "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-1",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-2",
      "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-2",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-3",
      "title": "Threat Intelligence",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-3",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-4",
      "title": "Vulnerability Assessments",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-4",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-5",
      "title": "Data & Hardware Sanitisation",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-5",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-6",
      "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-6",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    }
  ],
  "description": "Contained in tender documentation\n(SC Ref:806607)",
  "initiationType": "tender"
}
Complete JSON history (2 releases)
6 Aug 2025 · 046608-2025 · award, contract
{
  "id": "046608-2025",
  "tag": [
    "award",
    "contract"
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "value": 4,
        "measure": "bids",
        "relatedLot": "1"
      },
      {
        "id": "6",
        "value": 4,
        "measure": "bids",
        "relatedLot": "3"
      },
      {
        "id": "11",
        "value": 4,
        "measure": "bids",
        "relatedLot": "4"
      },
      {
        "id": "16",
        "value": 4,
        "measure": "bids",
        "relatedLot": "5"
      },
      {
        "id": "21",
        "value": 4,
        "measure": "bids",
        "relatedLot": "6"
      },
      {
        "id": "26",
        "value": 3,
        "measure": "bids",
        "relatedLot": "2"
      },
      {
        "id": "2",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "1"
      },
      {
        "id": "7",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "3"
      },
      {
        "id": "12",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "4"
      },
      {
        "id": "17",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "5"
      },
      {
        "id": "22",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "6"
      },
      {
        "id": "27",
        "value": 3,
        "measure": "smeBids",
        "relatedLot": "2"
      },
      {
        "id": "3",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "1"
      },
      {
        "id": "8",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "3"
      },
      {
        "id": "13",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "4"
      },
      {
        "id": "18",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "5"
      },
      {
        "id": "23",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "6"
      },
      {
        "id": "28",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "2"
      },
      {
        "id": "4",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "1"
      },
      {
        "id": "9",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "3"
      },
      {
        "id": "14",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "4"
      },
      {
        "id": "19",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "5"
      },
      {
        "id": "24",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "6"
      },
      {
        "id": "29",
        "value": 3,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "2"
      },
      {
        "id": "5",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "1"
      },
      {
        "id": "10",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "3"
      },
      {
        "id": "15",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "4"
      },
      {
        "id": "20",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "5"
      },
      {
        "id": "25",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "6"
      },
      {
        "id": "30",
        "value": 3,
        "measure": "electronicBids",
        "relatedLot": "2"
      }
    ]
  },
  "date": "2025-08-06T15:29:24+01:00",
  "ocid": "ocds-h6vhtk-0478f3",
  "buyer": {
    "id": "GB-FTS-53539",
    "name": "City of Edinburgh Council"
  },
  "links": [
    {
      "rel": "canonical",
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446"
    }
  ],
  "awards": [
    {
      "id": "046608-2025-1",
      "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "046608-2025-2",
      "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "3"
      ]
    },
    {
      "id": "046608-2025-3",
      "title": "Threat Intelligence",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "4"
      ]
    },
    {
      "id": "046608-2025-4",
      "title": "Vulnerability Assessments",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "5"
      ]
    },
    {
      "id": "046608-2025-5",
      "title": "Data & Hardware Sanitisation",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-107397",
          "name": "Trustmarque Solutions Ltd"
        },
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "6"
      ]
    },
    {
      "id": "046608-2025-6",
      "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-157203",
          "name": "Redcentric Solutions Limited"
        },
        {
          "id": "GB-FTS-108965",
          "name": "NCC Group Security Services Limited"
        },
        {
          "id": "GB-FTS-157204",
          "name": "Entserv UK Ltd"
        }
      ],
      "relatedLots": [
        "2"
      ]
    }
  ],
  "tender": {
    "id": "CT1218",
    "lots": [
      {
        "id": "1",
        "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and\n- Security assurance and reporting of proposed new technologies and services.\nSuppliers must also provide:\n- Advice and consultation on proposed and existing cloud developments,\n- Advice and consultation on proposed and existing cloud infrastructure configurations, and\n- Advice and consultation on cloud technologies to support ongoing management of our cloud operations.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Delivery of Services",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Advice and Consultancy",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Account Management and Staffing",
              "type": "quality",
              "description": "15"
            },
            {
              "name": "Business continuity",
              "type": "quality",
              "description": "10"
            },
            {
              "name": "The Environment",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Fair Work Practices",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Community Benefits",
              "type": "quality",
              "description": "5"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "2",
        "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Incident Response,\n- Digital Forensics,\n- Data Breach Assessment and Recovery.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "3",
        "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Security Audit – PCI,\n- Security Architecture/Design Review,\n- Compliance and Regulatory Services.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "4",
        "title": "Threat Intelligence",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Threat Intelligence",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "5",
        "title": "Vulnerability Assessments",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Vulnerability Assessments",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      },
      {
        "id": "6",
        "title": "Data & Hardware Sanitisation",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Data and Hardware Sanitisation",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "2",
        "relatedLot": "2",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "3",
        "relatedLot": "3",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "4",
        "relatedLot": "4",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "5",
        "relatedLot": "5",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "6",
        "relatedLot": "6",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "Cyber Security Assurance Services Framework",
    "status": "complete",
    "coveredBy": [
      "GPA"
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "techniques": {
      "hasFrameworkAgreement": true
    },
    "description": "The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.",
    "reviewDetails": "An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Restricted procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-53539",
      "name": "City of Edinburgh Council",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKM75",
        "locality": "Edinburgh",
        "postalCode": "EH8 8BG",
        "countryName": "United Kingdom",
        "streetAddress": "Waverley Court"
      },
      "details": {
        "url": "http://www.edinburgh.gov.uk",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290",
        "classifications": [
          {
            "id": "REGIONAL_AUTHORITY",
            "scheme": "TED_CA_TYPE",
            "description": "Regional or local authority"
          },
          {
            "id": "01",
            "scheme": "COFOG",
            "description": "General public services"
          }
        ]
      },
      "identifier": {
        "legalName": "City of Edinburgh Council"
      },
      "contactPoint": {
        "name": "Shane Newell",
        "email": "shane.newell@edinburgh.gov.uk"
      }
    },
    {
      "id": "GB-FTS-107397",
      "name": "Trustmarque Solutions Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE21",
        "locality": "York.",
        "postalCode": "YO26 6RW",
        "countryName": "United Kingdom",
        "streetAddress": "Marlborough House, Westminster Place, York Business Park,"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Trustmarque Solutions Ltd"
      }
    },
    {
      "id": "GB-FTS-157203",
      "name": "Redcentric Solutions Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE2",
        "locality": "Harrogate",
        "postalCode": "HG3 1UG",
        "countryName": "United Kingdom",
        "streetAddress": "Central House, Beckwith Knowle"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Redcentric Solutions Limited"
      }
    },
    {
      "id": "GB-FTS-108965",
      "name": "NCC Group Security Services Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "MANCHESTER",
        "postalCode": "M3 3AQ",
        "countryName": "United Kingdom",
        "streetAddress": "XYZ Building, 2 Hardman Boulevard, Spinningfields,"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "legalName": "NCC Group Security Services Limited"
      }
    },
    {
      "id": "GB-FTS-157204",
      "name": "Entserv UK Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Aldershot",
        "postalCode": "GU11 1PZ",
        "countryName": "United Kingdom",
        "streetAddress": "Royal Pavilion, Wellesley Road"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Entserv UK Ltd"
      }
    },
    {
      "id": "GB-FTS-5024",
      "name": "Sheriff Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Edinburgh",
        "postalCode": "EH1 1LB",
        "countryName": "United Kingdom",
        "streetAddress": "Sheriff Court House, 27 Chambers Street"
      },
      "identifier": {
        "legalName": "Sheriff Court"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "046608-2025-1",
      "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-1",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-2",
      "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-2",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-3",
      "title": "Threat Intelligence",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-3",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-4",
      "title": "Vulnerability Assessments",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-4",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-5",
      "title": "Data & Hardware Sanitisation",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-5",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    },
    {
      "id": "046608-2025-6",
      "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
      "value": {
        "amount": 750000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "046608-2025-6",
      "dateSigned": "2025-08-06T00:00:00+01:00"
    }
  ],
  "description": "Contained in tender documentation\n(SC Ref:806607)",
  "initiationType": "tender"
}
2 Jul 2024 · 020020-2024 · tender
{
  "id": "020020-2024",
  "tag": [
    "tender"
  ],
  "date": "2024-07-02T08:47:40+01:00",
  "ocid": "ocds-h6vhtk-0478f3",
  "buyer": {
    "id": "GB-FTS-53539",
    "name": "City of Edinburgh Council"
  },
  "links": [
    {
      "rel": "canonical",
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446"
    }
  ],
  "tender": {
    "id": "CT1218",
    "lots": [
      {
        "id": "4",
        "title": "Threat Intelligence",
        "value": {
          "amount": 15000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Possible extension up to 24 months."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Threat Intelligence",
        "secondStage": {
          "minimumCandidates": 5
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      },
      {
        "id": "5",
        "title": "Vulnerability Assessments",
        "value": {
          "amount": 15000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Possible extension up to 24 months."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Vulnerability Assessments",
        "secondStage": {
          "minimumCandidates": 5
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      },
      {
        "id": "1",
        "title": "Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation",
        "value": {
          "amount": 675000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Possible extension up to 24 months."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and\n- Security assurance and reporting of proposed new technologies and services.\nSuppliers must also provide:\n- Advice and consultation on proposed and existing cloud developments,\n- Advice and consultation on proposed and existing cloud infrastructure configurations, and\n- Advice and consultation on cloud technologies to support ongoing management of our cloud operations.",
        "secondStage": {
          "minimumCandidates": 5
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Delivery of Services",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Advice and Consultancy",
              "type": "quality",
              "description": "30"
            },
            {
              "name": "Account Management and Staffing",
              "type": "quality",
              "description": "15"
            },
            {
              "name": "Business continuity",
              "type": "quality",
              "description": "10"
            },
            {
              "name": "The Environment",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Fair Work Practices",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Community Benefits",
              "type": "quality",
              "description": "5"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      },
      {
        "id": "2",
        "title": "Incident Response, Digital Forensics, Data Breach Assessment & Recovery",
        "value": {
          "amount": 15000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Possible extension up to 24 months."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Incident Response,\n- Digital Forensics,\n- Data Breach Assessment and Recovery.",
        "secondStage": {
          "minimumCandidates": 5
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      },
      {
        "id": "3",
        "title": "Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.",
        "value": {
          "amount": 15000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Possible extension up to 24 months."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Security Audit – PCI,\n- Security Architecture/Design Review,\n- Compliance and Regulatory Services.",
        "secondStage": {
          "minimumCandidates": 5
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      },
      {
        "id": "6",
        "title": "Data & Hardware Sanitisation",
        "value": {
          "amount": 15000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Possible extension up to 24 months."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\nThese include:\n- Data and Hardware Sanitisation",
        "secondStage": {
          "minimumCandidates": 5
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality from Lot 1",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      }
    ],
    "items": [
      {
        "id": "4",
        "relatedLot": "4",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "5",
        "relatedLot": "5",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "2",
        "relatedLot": "2",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "3",
        "relatedLot": "3",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      },
      {
        "id": "6",
        "relatedLot": "6",
        "deliveryAddresses": [
          {
            "region": "UKM75"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "Cyber Security Assurance Services Framework",
    "value": {
      "amount": 750000,
      "currency": "GBP"
    },
    "status": "active",
    "coveredBy": [
      "GPA"
    ],
    "documents": [
      {
        "id": "technical",
        "documentType": "technicalSelectionCriteria"
      }
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "lotDetails": {
      "maximumLotsBidPerSupplier": null
    },
    "techniques": {
      "frameworkAgreement": {
        "maximumParticipants": 6
      },
      "hasFrameworkAgreement": true
    },
    "description": "The City of Edinburgh Council is focused on establishing a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.",
    "secondStage": {
      "invitationDate": "2024-09-02T00:00:00+01:00"
    },
    "tenderPeriod": {
      "endDate": "2024-07-31T12:00:00+01:00"
    },
    "hasRecurrence": false,
    "reviewDetails": "An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "bidValidityPeriod": {
        "durationInDays": 180
      }
    },
    "submissionMethod": [
      "electronicSubmission"
    ],
    "procurementMethod": "selective",
    "selectionCriteria": {
      "criteria": [
        {
          "type": "suitability",
          "appliesTo": [
            "supplier"
          ],
          "description": "Suppliers are required to comply with the following qualification and accreditation requirements:\n1. CREST or CHECK accredited, evidence of accreditation will be required.\n2. Assessments carried out by your organisation are conducted by appropriately qualified individuals, for example (CISSP, CISM, CEH, CCSP, OSCP, CCT INF) or equivalent.\n3. Accredited Microsoft, AWS Partner or equivalent."
        },
        {
          "type": "economic",
          "minimum": "Estimated Value pa Minimum “General” Annual Turnover Ratio\nCyber Assurance Framework 250,000 GBP 1.10\nIt is a mandatory requirement that service providers appointed to this Framework Agreement have the following insurance in place:\n- Professional Indemnity Insurance (minimum of 5 Million GBP)\n- Employer’s Liability Insurance (minimum of 5 Million GBP)\n- Public Liability Insurance (minimum of 5 Million GBP)",
          "appliesTo": [
            "supplier"
          ],
          "description": "Tenderers are required to have a minimum “general” annual turnover as detailed below for the last two financial years. Where a Tenderer does not have an annual turnover of this value, the Council may exclude the Tenderer from the competition or may apply discretion, seeking supporting evidence to determine the Tenderer’s suitability to proceed in the competition.\nThe formula for calculating a Tenderer’s current ratio is current assets divided by current liabilities. The acceptable range for each financial ratio is greater than the ratio as detailed below. Where a Tenderer’s current ratio is less than the acceptable value, the Council may exclude the Tenderer from the competition or may apply discretion, seeking supporting evidence to determine the Tenderer’s suitability to proceed in the competition."
        }
      ]
    },
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "https://www.publictendersscotland.publiccontractsscotland.gov.uk",
    "procurementMethodDetails": "Restricted procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-53539",
      "name": "City of Edinburgh Council",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKM75",
        "locality": "Edinburgh",
        "postalCode": "EH8 8BG",
        "countryName": "United Kingdom",
        "streetAddress": "Waverley Court"
      },
      "details": {
        "url": "http://www.edinburgh.gov.uk",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290",
        "classifications": [
          {
            "id": "REGIONAL_AUTHORITY",
            "scheme": "TED_CA_TYPE",
            "description": "Regional or local authority"
          },
          {
            "id": "01",
            "scheme": "COFOG",
            "description": "General public services"
          }
        ]
      },
      "identifier": {
        "legalName": "City of Edinburgh Council"
      },
      "contactPoint": {
        "url": "https://www.publictendersscotland.publiccontractsscotland.gov.uk",
        "name": "Jonathan Livingstone",
        "email": "jonathan.livingstone@edinburgh.gov.uk"
      }
    },
    {
      "id": "GB-FTS-5024",
      "name": "Sheriff Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Edinburgh",
        "postalCode": "EH1 1LB",
        "countryName": "United Kingdom",
        "streetAddress": "Sheriff Court House, 27 Chambers Street"
      },
      "identifier": {
        "legalName": "Sheriff Court"
      }
    }
  ],
  "language": "en",
  "description": "The buyer is using PCS-Tender to conduct this PQQ exercise. The Project code is 26662. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343\nCommunity benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/\nA summary of the expected community benefits has been provided as follows:\nCommunity Benefits requirements will be published as part of the ITT stage.\n(SC Ref:767446)",
  "initiationType": "tender"
}