PCI QSA pro 2026

{
  "id": "034067-2026",
  "tag": [
    "tender"
  ],
  "date": "2026-04-15T10:46:59+01:00",
  "ocid": "ocds-h6vhtk-0682ac",
  "buyer": {
    "id": "GB-FTS-73933",
    "name": "Glasgow City Council"
  },
  "links": [
    {
      "rel": "canonical",
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000827084"
    }
  ],
  "tender": {
    "id": "GCC006549CPU",
    "lots": [
      {
        "id": "1",
        "value": {
          "amount": 450000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Option to extend for periods of up to an additional 24 months (in total) at the sole discretion of Glasgow City Council."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council’s compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of:\ni.\tScoping and Readiness Review\nii.\tOnsite Assessment Activities\niii.\tTechnical Testing\niv.\tDocumentation and Reporting\nv.\tASV Scanning\nvi.\tOngoing Support (Ad-hoc support)\nFor further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality",
              "type": "quality",
              "description": "50"
            },
            {
              "name": "Fair Work First",
              "type": "quality",
              "description": "5"
            },
            {
              "name": "Price",
              "type": "cost",
              "description": "45"
            }
          ]
        },
        "contractPeriod": {
          "endDate": "2029-06-11T23:59:59+01:00",
          "startDate": "2026-06-11T00:00:00+01:00"
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM82"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72220000",
            "scheme": "CPV",
            "description": "Systems and technical consultancy services"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "79411000",
            "scheme": "CPV",
            "description": "General management consultancy services"
          }
        ]
      }
    ],
    "title": "PCI QSA pro 2026",
    "value": {
      "amount": 450000,
      "currency": "GBP"
    },
    "status": "active",
    "coveredBy": [
      "GPA"
    ],
    "bidOpening": {
      "date": "2026-05-19T12:00:00+01:00"
    },
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "recurrence": {
      "description": "This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards."
    },
    "awardPeriod": {
      "startDate": "2026-05-19T12:00:00+01:00"
    },
    "description": "Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds.\nThis procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.",
    "tenderPeriod": {
      "endDate": "2026-05-19T12:00:00+01:00"
    },
    "contractTerms": {
      "performanceTerms": "Performance requirements related to this contract can be found within the Procurement Documents within the PCS-T portal.",
      "hasElectronicPayment": true,
      "electronicInvoicingPolicy": "allowed"
    },
    "hasRecurrence": true,
    "reviewDetails": "Glasgow City Council (“the Council”) must, by notice in writing as soon as possible after the decision has been made, inform all tenderers and candidates concerned of its decision to award the contract, conclude the framework agreement or establish a dynamic purchasing system. The Council must allow a period of at least the relevant standstill period (where the notice is sent by facsimile or electronic means the period is 10 days ending at midnight at the end of the 10th day after that on which the last notice is sent, when sent by other means the period is 15 days) to elapse between the date of despatch of the notice referred to in Regulation 85(1) of the Public Contracts (Scotland) Regulations 2015 (“the Regulations”). The Council is obliged to comply with the Regulations and any eligible economic operator can bring an action in the Sheriff Court or the Court of Session where as a consequence of a breach by the Council, suffers or risks suffering loss or damage. The bringing of court proceedings during the standstill period means that the Council must not enter into the contract, conclude the framework agreement or establish the dynamic purchasing system unless the proceedings are determined, discontinued or disposed of; or the court, by interim order, brings to an end the prohibition. The bringing of court proceedings after the standstill period has elapsed and the remedies that are available to the courts are detailed in the Regulations. Economic Operators can write to the Council seeking further clarification on the notice, to which the Council must respond within 15 days. Economic Operators should be mindful to seek their own independent legal advice when they consider appropriate to do so.",
    "classification": {
      "id": "72220000",
      "scheme": "CPV",
      "description": "Systems and technical consultancy services"
    },
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "bidValidityPeriod": {
        "endDate": "2026-09-16T23:59:59+01:00"
      }
    },
    "submissionMethod": [
      "electronicSubmission"
    ],
    "otherRequirements": {
      "requiresStaffNamesAndQualifications": true
    },
    "procurementMethod": "open",
    "selectionCriteria": {
      "criteria": [
        {
          "type": "suitability",
          "appliesTo": [
            "supplier"
          ],
          "description": "Not applicable"
        },
        {
          "type": "economic",
          "minimum": "Bidders must comply with the undernoted financial requirements in order to participate in the tendering process:-\nTrading Performance\nAn overall positive outcome on pre tax profits over a 3 year period. Exceptional items can be excluded from the calculation.\nThe above would be expressed in the ratio Pre-Tax Profit/Turnover\nBalance Sheet strength\nNet worth of the organisation must be positive at the time of evaluation and organisation must not be subject to an insolvency process. Intangibles can be included for purposes of the Total Assets figure. The above would be expressed in the ratio Total Assets/Total Liabilities\nBidders that are only required to file abbreviated accounts, must submit full sets of account for the last two individual years filed, in order for the three year profitability requirement to be verified\nBidder should have no outstanding issues, with regard to statutory filing requirements with Companies House.\nBidder who have been trading for less than the 3 years noted above must provide evidence that they are complying with the above minimum financial requirements for the period in which they have been trading.\nThe Council reserves the right at its own discretion to seek such other information from the Applicant in accordance with Regulation 61(7) or Regulation 61(8) of the Public Contracts (Scotland) Regulations 2015 to prove the Applicant’s economic and financial standing.\nAny Bidder that fails to achieve or exceed the criteria as stated above will be excluded at this stage.\n4B.5 It is a requirement of this contract that bidders hold, or can commit to obtain prior to the commencement of any subsequently awarded contract, the types and levels of insurance indicated below:\nProfessional Risk Indemnity: minimum 1 million GBP in respect of each claim and in the aggregate. To be maintained for 3. years on completion of their service.\nEmployer's (Compulsory) Liability: minimum 10million GBP in respect of each claim without limit to the number of claims.\nPublic Liability: minimum 5million GBP in respect of each claim without limit to the number of claims.\nPlease see the ITT for full details.",
          "appliesTo": [
            "supplier"
          ],
          "description": "Bidders must comply with the undernoted financial requirements in order to participate in the tendering process:-\nSPD Section 4B: Economic and Financial Standing\nSPD Questions:\n4B.1 - Balance sheet and Trading Performance\n4B.5 - Insurance\nRequest for Documentation: Once the Evaluation of Price and Quality has been completed, the recommended Bidder will be expected to provide all documentation as specified in the SPD. Bidders must supply the relevant information within 5 working days. Failure to provide this information within the specified time may result in your bid being rejected and the Council proceeding with the procurement exercise to the next appropriate bidder."
        },
        {
          "type": "technical",
          "minimum": "SPD 4C.1.2 Statement - Bidders will be required to provide examples that demonstrate that they have the relevant experience to deliver the services/supplies as described in part II.2.4 of the Find a Tender Service Contract Notice or the relevant section of the Site Notice.\nPlease provide two relevant examples of supplies and/or services carried out during the last three years as specified in the Contract Notice:\n(Examples from both public and or private sector customers and clients may be provided).\nMinimum number of relevant examples: 2\nMaximum number of relevant examples: 2\nBidders shall be asked to provide the following information in relation to each of their relevant examples provided:\n- Confirmation that the services were carried out during the timeframe set out in the question\n- Information to demonstrate that the client was of a similar size and/or complexity to Glasgow City Council\n- Description of the services delivered\n- Information relating to key sub-contractors and / or specialist sub-contractors used\nA response document is provided for full details to be provided.\nBidders responses to 4C.1.2 shall be evaluated and each of the two examples shall be evaluated individually. The Bidder must achieve a rating of at least 60 from the Scoring Methodology table provided in the ITT for each of the two examples provided individually, to be considered to have “passed” this question, ie, two examples each scoring at least 60. Failure to achieve a rating of at least 60 for each example provided shall see the Bidder excluded from further evaluation.\nThe scoring methodology for question 4C.1.2 is described in the ITT.",
          "appliesTo": [
            "supplier"
          ],
          "description": "SPD Section 4C: Technical and Professional ability\nSPD Questions:\n4C.1.2 - Relevant examples\n4C.10 - Proportion (%) to be Sub-Contracted"
        }
      ]
    },
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "https://www.publictendersscotland.publiccontractsscotland.gov.uk",
    "procurementMethodDetails": "Open procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-73933",
      "name": "Glasgow City Council",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKM82",
        "locality": "Glasgow",
        "postalCode": "G2 1DU",
        "countryName": "United Kingdom",
        "streetAddress": "40 John St, City Chambers"
      },
      "details": {
        "url": "http://www.glasgow.gov.uk",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00196",
        "classifications": [
          {
            "id": "REGIONAL_AUTHORITY",
            "scheme": "TED_CA_TYPE",
            "description": "Regional or local authority"
          },
          {
            "id": "01",
            "scheme": "COFOG",
            "description": "General public services"
          }
        ]
      },
      "identifier": {
        "legalName": "Glasgow City Council"
      },
      "contactPoint": {
        "url": "https://www.publictendersscotland.publiccontractsscotland.gov.uk",
        "name": "Allan Weir",
        "email": "Allan.Weir@glasgow.gov.uk",
        "telephone": "+44 1412876426"
      }
    },
    {
      "id": "GB-FTS-2584",
      "name": "Glasgow Life (Culture & Sport Glasgow)",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKM82",
        "locality": "Glasgow",
        "postalCode": "G1 1LH",
        "countryName": "United Kingdom",
        "streetAddress": "38 Albion Street"
      },
      "details": {
        "url": "http://www.glasgowlife.org.uk",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA10287"
      },
      "identifier": {
        "legalName": "Glasgow Life (Culture & Sport Glasgow)"
      },
      "contactPoint": {
        "email": "info@glasgowlife.org.uk",
        "telephone": "+44 1412875923"
      }
    },
    {
      "id": "GB-FTS-18787",
      "name": "Glasgow Sheriff Court & Justice of the Peace Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Glasgow",
        "postalCode": "G5 9DA",
        "countryName": "United Kingdom",
        "streetAddress": "PO BOX 23, 1 Carlton Place"
      },
      "identifier": {
        "legalName": "Glasgow Sheriff Court & Justice of the Peace Court"
      },
      "contactPoint": {
        "email": "glasgow@scotcourts.gov.uk"
      }
    }
  ],
  "language": "en",
  "description": "Freedom of Information Act — Information on the FOI Act is contained in Appendix A of the ITT. Bidders must note the implications of this legislation and ensure that any information they wish the council to consider withholding is specifically indicated on the FOI Certificate contained within Technical Envelope within tender portal (NB the council does not bind itself to withhold this information).\nTenderers Amendments — Bidders must enter any clause, condition, amendment to specification or any other qualification they may wish to make conditional to this offer. Bidders will be required to complete the tenderers amendment certificate that is contained as an attachment within PCS-T.\nNon–Collusion- Bidders will be required to complete the Non-Collusion certificate contained as an attachment within PCS-T.\nPrompt Payment Certificate - Bidders will be required to complete the Prompt Payment  certificate contained as an attachment within PCS-T.\nInsurance Mandate - All successful suppliers will be required to sign an Insurance Mandate, which will be issued in conjunction with the award letter authorising the Council to request copies of insurance documents from the supplier’s insurance provider. If the mandate is not signed and returned the Council reserves the right to request copies of insurance certificates from bidders at any point during the contract period. This is contained as an attachment within PCS-T.\nProfessional Integrity - Bidders will be required to answer questions related to professional integrity and to complete the Professional Integrity Certificate contained as an attachment within PCS-T.\nTerms and Conditions are located within the attachments area of PCS-T.\nAdditional information pertaining to this contract notice is contained within the ITT documents. Bidders must ensure they read all attachments within the Buyers Attachments area in line with this contract notice.\nThe buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 62240.\nCommunity benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/\nThe buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 62240. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343\nCommunity benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/\nA summary of the expected community benefits has been provided as follows:\nCommunity benefit outcomes for this contract are mandatory and will be based on minimum community benefits points -120. The minimum community benefits  thresholds are set out in the Community Benefits Menu within the Buyer Attachment Area of PCS-T.\nBidders must confirm that they will meet these obligations in full by completing the relevant areas within the Community Benefits Menu.\nBidders are also required to provide a supporting Methodology for each of the Themes they are offering from the Menu, detailing how the\nCommunity Benefit outcomes will be delivered.\nThe Community Benefits Menu and Methodology template can be found within the Community Benefits section on Public Contracts Scotland –\nTender (PCS-T).\n(SC Ref:827084)",
  "initiationType": "tender"
}