Find a TenderAwarded
Published 15 Apr 2026, 10:46 BST

Official UK procurement notice

PCI QSA pro 2026 · UK public procurement notice

Official notice

Authority: Glasgow City Council (Local council)·Consortium: 2 public authorities

ServicesOpen procedureSME suitable
Published estimate£450,000≈ £150k / year38.8% below published estimate
Submissions closed 19 May 2026awarded 11 Aug 2026
Awarded to 1 Sequence Cyber Limited
Contract term 3 yrsends 11 Jun 2029 · extension options published · starts 11 Jun 2026

What is being bought

Published requirement description

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds.

This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

  • Recurrence: This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards.

CPV: General management consultancy services · Information technology services · Systems and technical consultancy services

The lotProcurement structure

single lot · value published
Lot #1The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City…AwardedRenewal 3 yrsPublished value£450,000

The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council’s compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of:

i. Scoping and Readiness Review

ii. Onsite Assessment Activities

iii. Technical Testing

iv. Documentation and Reporting

v. ASV Scanning

vi. Ongoing Support (Ad-hoc support)

For further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Contract period: 11 Jun 2026 – 11 Jun 2029 (3 yrs)
Delivery: Scotland
Extensions: Option to extend for periods of up to an additional 24 months (in total) at the sole discretion of Glasgow City Council.Variant bids: not allowed

What it takes to win
i

How this buyer will score bids.

The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).

Evaluation split and conditions of participation as published; the tender pack may add more
How bids were scored
Quality: 55%Price: 45%
Published sub-criteria (3)
  • Quality: 50%
  • Fair Work First: 5%
  • Price: 45%
Published award criteria (3)
  • Quality: 50
  • Fair Work First: 5
  • Price: 45
Conditions of participation3
  • Suitability

    Not applicable

  • Economic & financial standing

    Bidders must comply with the undernoted financial requirements in order to participate in the tendering process:-

    SPD Section 4B: Economic and Financial Standing

    SPD Questions:

    4B.1 - Balance sheet and Trading Performance

    4B.5 - Insurance

    Request for Documentation: Once the Evaluation of Price and Quality has been completed, the recommended Bidder will be expected to provide all documentation as specified in the SPD. Bidders must supply the relevant information within 5 working days. Failure to provide this information within the specified time may result in your bid being rejected and the Council proceeding with the procurement exercise to the next appropriate bidder.

    Minimum: Bidders must comply with the undernoted financial requirements in order to participate in the tendering process:- Trading Performance An overall positive outcome on pre tax profits over a 3 year period. Exceptional items can be excluded from the calculation. The above would be ex…
  • Technical & professional ability

    SPD Section 4C: Technical and Professional ability

    SPD Questions:

    4C.1.2 - Relevant examples

    4C.10 - Proportion (%) to be Sub-Contracted

    Minimum: SPD 4C.1.2 Statement - Bidders will be required to provide examples that demonstrate that they have the relevant experience to deliver the services/supplies as described in part II.2.4 of the Find a Tender Service Contract Notice or the relevant section of the Site Notice. Please…
Staff
Names and qualifications of delivery staff must be submitted
What this means for your bid
  • Price carries 45 of 100 points: a 10% discount moves about 4.5 points. Quality carries 55 of 100: the paper moves it further than the discount.

Price arithmetic assumes straight proportional scoring; the tender pack may use another formula.

Procedure terms & legal framework

From the official record · publisher note attached
Procedure method
Open procedure
Legal basis
CELEX · 32014L0024 Public Contracts Regulations 2015 (Directive 2014/24/EU)
Procurement category
Services
Notice status
Awarded
Procurement threshold
Unspecified in notice
Regulatory regime
Standard
Commercial structure
Stand-alone contract (no framework)
Competition type
Competitive procedure
GPA / WTO covered
Yes (GPA)
Recurring procurement

Yes · This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards.

First published
15 Apr 2026, 10:46 BST
Last source update
7 Sept 2026, 16:30 BST
Award evaluation window
19 May 2026 – …
Authority reference
GCC006549CPU
FTS notice number
2026/S 000-084587
Classification (CPV)
General management consultancy servicesInformation technology servicesSystems and technical consultancy services
Delivery area
Scotland (UKM82)
Official registry OCID
ocds-h6vhtk-0682ac Find a Tender
Contract terms
Electronic trading
e-invoicing allowed · electronic payment
Performance terms

Performance requirements related to this contract can be found within the Procurement Documents within the PCS-T portal.

Review and risk notes
Review procedure

Glasgow City Council (“the Council”) must, by notice in writing as soon as possible after the decision has been made, inform all tenderers and candidates concerned of its decision to award the contract, conclude the framework agreement or establish a dynamic purchasing system. The Council must allow a period of at least the relevant standstill period (where the notice is sent by facsimile or electronic means the period is 10 days ending at midnight at the end of the 10th day after that on which the last notice is sent, when sent by other means the period is 15 days) to elapse between the date of despatch of the notice referred to in Regulation 85(1) of the Public Contracts (Scotland) Regulations 2015 (“the Regulations”). The Council is obliged to comply with the Regulations and any eligible economic operator can bring an action in the Sheriff Court or the Court of Session where as a consequence of a breach by the Council, suffers or risks suffering loss or damage. The bringing of court proceedings during the standstill period means that the Council must not enter into the contract, conclude the framework agreement or establish the dynamic purchasing system unless the proceedings are determined, discontinued or disposed of; or the court, by interim order, brings to an end the prohibition. The bringing of court proceedings after the standstill period has elapsed and the remedies that are available to the courts are detailed in the Regulations. Economic Operators can write to the Council seeking further clarification on the notice, to which the Council must respond within 15 days. Economic Operators should be mindful to seek their own independent legal advice when they consider appropriate to do so.

Publisher note: Freedom of Information Act — Information on the FOI Act is contained in Appendix A of the ITT. Bidders must note the implications of this legislation and ensure that any information they wish the council to consider withholding is specifically indicated on the FOI Certificate contained within Technical Envelope within tender portal (NB the council does not bind itself to withhold this information). Tenderers Amendments — Bidders must enter any clause, condition, amendment to specification or any other qualification they may wish to make conditional to this offer. Bidders will be required to complete the tenderers amendment certificate that is contained as an attachment within PCS-T. Non–Collusion- Bidders will be required to complete the Non-Collusion certificate contained as an attachment within PCS-T. Prompt Payment Certificate - Bidders will be required to complete the Prompt Payment certificate contained as an attachment within PCS-T. Insurance Mandate - All successful suppliers will be required to sign an Insurance Mandate, which will be issued in conjunction with the award letter authorising the Council to request copies of insurance documents from the supplier’s insurance provider. If the mandate is not signed and returned the Council reserves the right to request copies of insurance certificates from bidders at any point during the contract period. This is contained as an attachment within PCS-T. Professional Integrity - Bidders will be required to answer questions related to professional integrity and to complete the Professional Integrity Certificate contained as an attachment within PCS-T. Terms and Conditions are located within the attachments area of PCS-T. Additional information pertaining to this contract notice is contained within the ITT documents. Bidders must ensure they read all attachments within the Buyers Attachments area in line with this contract notice. The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 62240. Community benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/ (SC Ref:840694)

How it was run

Official notice
Run through: Public Contracts Scotland · Who buys & how to bid on PCS
Supplier login requiredLanguage: EN
Access & registration note: Free single registration for Scotland; PCS-Tender (Jaggaer) for full bidding
Submission deadline
19 May 2026, 12:00 BST
Submission channel
{"electronicSubmission"}
Accepted languages
en
Bids opened
19 May 2026, 12:00 BST
Detailed submission instructions & authority contactsFrom official release

Timeline

19 May 2026 → 16 Sept 2026 · 5 dates
  1. Submission deadline155 days ago
    19 May 2026, 12:00 BST
  2. Bids opened155 days ago
    19 May 2026, 12:00 BST
  3. Contract starts132 days ago
    11 Jun 2026, 00:00 BST
  4. Notice published43 days ago
    7 Sept 2026, 16:30 BST
  5. Bids must remain valid until34 days ago
    16 Sept 2026, 23:59 BST

Notice history

1 event · 2 releases on Find a Tender
  1. Status changed to complete
    7 Sept 2026, 16:30 BST

Commercial outcome & contract awards

Published awards, contracts and bid statistics, not a forecast
Awards 1
Awarded value £275,4041 contract exc. VAT
Bids received 88 from SMEs
Contracts signed 1latest 11 Aug 2026
Awarded toValueDateStatus
1 Sequence Cyber LimitedSME£275,404 †—Awarded

Contracts

  • Contract 084587-2026-GCC006549CPU-1 · 1 Sequence Cyber LimitedSME

    Signed
    11 Aug 2026
    Value
    £275,404
    Period
    … – 11 Jun 2029
    Status
    active

Bid statistics published by the authority

BidsSMEVCSEValid bid range
8bids · 8 electronic8——

Contracting authority & participating public bodies

2 public bodies on the notice

Glasgow City Council

Contracting authorityLocal CouncilRegional or local authorityGeneral public services 40 John St, City Chambers, Glasgow, Scotland, G2 1DUContact name, email, phone Published organisation website ↗

Consortium members and other public bodies

Dispute resolution & review bodies

  • Glasgow Sheriff Court & Justice of the Peace CourtReview body GlasgowContact email

Bidders & participating suppliers

1 commercial party on the notice
  • 1 Sequence Cyber LimitedAwarded supplier Acorn House, , 381 Midsummer Blvd,, Milton Keynes,, UK, MK9 3HPContact email, phone

Official documents & specifications

Official links; attachments are not copied

No document links were published on the notice.