Penetration testing and security consultancy

{
  "id": "008725-2021",
  "tag": [
    "award",
    "contract"
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "value": 4,
        "measure": "bids",
        "relatedLot": "1"
      },
      {
        "id": "2",
        "value": 4,
        "measure": "smeBids",
        "relatedLot": "1"
      },
      {
        "id": "3",
        "value": 0,
        "measure": "foreignBidsFromEU",
        "relatedLot": "1"
      },
      {
        "id": "4",
        "value": 4,
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "1"
      },
      {
        "id": "5",
        "value": 4,
        "measure": "electronicBids",
        "relatedLot": "1"
      }
    ]
  },
  "date": "2021-04-23T12:14:02+01:00",
  "ocid": "ocds-h6vhtk-028c9e",
  "buyer": {
    "id": "GB-FTS-2926",
    "name": "Scottish Natural Heritage"
  },
  "awards": [
    {
      "id": "008725-2021-PP1165-1",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-13968",
          "name": "Arculus Limited"
        },
        {
          "id": "GB-FTS-13969",
          "name": "Quorum Cyber Security Limited"
        },
        {
          "id": "GB-FTS-13970",
          "name": "Barrier Networks"
        },
        {
          "id": "GB-FTS-13971",
          "name": "Dionach Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    }
  ],
  "tender": {
    "id": "PP1165",
    "lots": [
      {
        "id": "1",
        "status": "cancelled",
        "hasOptions": false,
        "description": "Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.\nThe contract is also expected to be used by Forestry & Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS.\nFull details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are:\n- external/internal manual penetration testing, social engineering & firewall configuration/testing, PSN compliance\n- advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review & certification\n- automated penetration testing. Additional information: All completed SPDs at Stage 1 must be submitted via the Public Contracts Scotland portal. Please ensure you allow enough time to upload your response.",
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          }
        ]
      }
    ],
    "title": "Penetration testing and security consultancy",
    "status": "complete",
    "coveredBy": [
      "GPA"
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "description": "Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.",
    "classification": {
      "id": "72222300",
      "scheme": "CPV",
      "description": "Information technology services"
    },
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Restricted procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-2926",
      "name": "Scottish Natural Heritage",
      "roles": [
        "buyer",
        "centralPurchasingBody"
      ],
      "address": {
        "region": "UKM62",
        "locality": "Inverness",
        "postalCode": "IV3 8NW",
        "countryName": "United Kingdom",
        "streetAddress": "Great Glen House, Leachkin Road"
      },
      "details": {
        "url": "http://www.nature.scot",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00383",
        "classifications": [
          {
            "id": "NATIONAL_AGENCY",
            "scheme": "TED_CA_TYPE",
            "description": "National or federal agency/office"
          },
          {
            "id": "05",
            "scheme": "COFOG",
            "description": "Environmental protection"
          }
        ]
      },
      "identifier": {
        "legalName": "Scottish Natural Heritage"
      },
      "contactPoint": {
        "name": "Procurement Team",
        "email": "contract.advertising@nature.scot",
        "telephone": "+44 1463725097"
      }
    },
    {
      "id": "GB-FTS-13968",
      "name": "Arculus Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Hove",
        "postalCode": "BN3 2PJ",
        "countryName": "United Kingdom",
        "streetAddress": "The Old Casino, 28 Fourth Avenue"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Arculus Limited"
      },
      "contactPoint": {
        "telephone": "+44 07595725299"
      }
    },
    {
      "id": "GB-FTS-13969",
      "name": "Quorum Cyber Security Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKM75",
        "locality": "Edinburgh",
        "postalCode": "EH2 4AD",
        "countryName": "United Kingdom",
        "streetAddress": "5th floor, 125 Princes Street"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Quorum Cyber Security Limited"
      },
      "contactPoint": {
        "telephone": "+44 3330041"
      }
    },
    {
      "id": "GB-FTS-13970",
      "name": "Barrier Networks",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKM82",
        "locality": "Glasgow",
        "postalCode": "G2 4JR",
        "countryName": "United Kingdom",
        "streetAddress": "272 Bath Street"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Barrier Networks"
      },
      "contactPoint": {
        "telephone": "+44 7791369428"
      }
    },
    {
      "id": "GB-FTS-13971",
      "name": "Dionach Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Oxford",
        "postalCode": "OX4 2PG",
        "countryName": "United Kingdom",
        "streetAddress": "Unitpart House, Garsington Road"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "legalName": "Dionach Limited"
      },
      "contactPoint": {
        "telephone": "+44 1865877830"
      }
    },
    {
      "id": "GB-FTS-2927",
      "name": "Inverness Sheriff Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Inverness",
        "postalCode": "IV1 1AH",
        "countryName": "United Kingdom",
        "streetAddress": "Inverness Justice Centre, Longman Road"
      },
      "identifier": {
        "legalName": "Inverness Sheriff Court"
      },
      "contactPoint": {
        "email": "inverness@scotcourts.gov.uk",
        "telephone": "+44 1463230782"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "008725-2021-PP1165-1",
      "value": {
        "amount": 150000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "008725-2021-PP1165-1",
      "dateSigned": "2021-04-19T00:00:00+01:00"
    }
  ],
  "description": "Please note that the contract value provided at Section II.1.7 and V.2.4 is an estimate only, and relates to a 36-month contract period (i.e. assumes that the contracts run for the maximum 36 months allowed, including the optional 12-month extension period).\n(SC Ref:651809)",
  "initiationType": "tender"
}

{
  "id": "001352-2021",
  "tag": [
    "tender"
  ],
  "date": "2021-01-22T14:56:01Z",
  "ocid": "ocds-h6vhtk-028c9e",
  "buyer": {
    "id": "GB-FTS-2926",
    "name": "Scottish Natural Heritage"
  },
  "tender": {
    "id": "PP1165",
    "lots": [
      {
        "id": "1",
        "value": {
          "amount": 150000,
          "currency": "GBP"
        },
        "status": "active",
        "renewal": {
          "description": "Optional 12-month extension."
        },
        "hasOptions": false,
        "hasRenewal": true,
        "description": "Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.\nThe contract is also expected to be used by Forestry & Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS.\nFull details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are:\n- external/internal manual penetration testing, social engineering & firewall configuration/testing, PSN compliance\n- advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review & certification\n- automated penetration testing. Additional information: All completed SPDs at Stage 1 must be submitted via the Public Contracts Scotland portal. Please ensure you allow enough time to upload your response.",
        "secondStage": {
          "maximumCandidates": 6,
          "minimumCandidates": 6
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality",
              "type": "quality",
              "description": "50"
            },
            {
              "type": "price",
              "description": "50"
            }
          ]
        },
        "contractPeriod": {
          "durationInDays": 720
        },
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        },
        "selectionCriteria": {
          "description": "The number of candidates short-listed to Stage 2 (Invitation to Tender) will very much depend on the volume and quality of SPD responses received at Stage 1."
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKM"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          }
        ]
      }
    ],
    "title": "Penetration testing and security consultancy",
    "value": {
      "amount": 150000,
      "currency": "GBP"
    },
    "status": "active",
    "coveredBy": [
      "GPA"
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "description": "Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.",
    "secondStage": {
      "invitationDate": "2021-03-01T00:00:00Z"
    },
    "tenderPeriod": {
      "endDate": "2021-02-22T17:00:00Z"
    },
    "contractTerms": {
      "hasElectronicPayment": true,
      "hasElectronicOrdering": true,
      "electronicInvoicingPolicy": "allowed"
    },
    "hasRecurrence": false,
    "classification": {
      "id": "72222300",
      "scheme": "CPV",
      "description": "Information technology services"
    },
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "bidValidityPeriod": {
        "durationInDays": 90
      }
    },
    "submissionMethod": [
      "electronicSubmission"
    ],
    "otherRequirements": {
      "requiresStaffNamesAndQualifications": true
    },
    "procurementMethod": "selective",
    "selectionCriteria": {
      "criteria": [
        {
          "minimum": "Please see Questions 4B5a, 4B5b & 4B5c of the SPD for details of insurance requirements. Evidence of cover will only be requested from the successful bidder(s)."
        },
        {
          "type": "technical",
          "appliesTo": [
            "supplier"
          ],
          "description": "Please refer to Question 4C1.2 of the SPD for details of the weighted selection criterion that will be used to short-list candidates to Stage 2."
        }
      ]
    },
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "http://www.publiccontractsscotland.gov.uk",
    "procurementMethodDetails": "Restricted procedure"
  },
  "parties": [
    {
      "id": "GB-FTS-2926",
      "name": "Scottish Natural Heritage",
      "roles": [
        "buyer",
        "centralPurchasingBody"
      ],
      "address": {
        "region": "UKM62",
        "locality": "Inverness",
        "postalCode": "IV3 8NW",
        "countryName": "United Kingdom",
        "streetAddress": "Great Glen House, Leachkin Road"
      },
      "details": {
        "url": "http://www.nature.scot",
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00383",
        "classifications": [
          {
            "id": "NATIONAL_AGENCY",
            "scheme": "TED_CA_TYPE",
            "description": "National or federal agency/office"
          },
          {
            "id": "05",
            "scheme": "COFOG",
            "description": "Environmental protection"
          }
        ]
      },
      "identifier": {
        "legalName": "Scottish Natural Heritage"
      },
      "contactPoint": {
        "url": "http://www.publiccontractsscotland.gov.uk",
        "name": "Procurement Team",
        "email": "contract.advertising@nature.scot",
        "telephone": "+44 1463725097"
      }
    },
    {
      "id": "GB-FTS-2927",
      "name": "Inverness Sheriff Court",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Inverness",
        "postalCode": "IV1 1AH",
        "countryName": "United Kingdom",
        "streetAddress": "Inverness Justice Centre, Longman Road"
      },
      "identifier": {
        "legalName": "Inverness Sheriff Court"
      },
      "contactPoint": {
        "email": "inverness@scotcourts.gov.uk",
        "telephone": "+44 1463230782"
      }
    }
  ],
  "language": "en",
  "description": "This is a two-stage 'restricted' procurement exercise. Only completed SPDs are requested at this stage. The candidates providing the most suitable/relevant responses to Question 4C1.2 of the SPD, assuming they pass the SPD mandatory exclusion questions, will be short-listed to Stage 2 and invited to submit a formal tender.\nNOTE: To register your interest in this notice and obtain any additional information please visit the Public Contracts Scotland Web Site at https://www.publiccontractsscotland.gov.uk/Search/Search_Switch.aspx?ID=641863.\nThe buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.publiccontractsscotland.gov.uk/sitehelp/help_guides.aspx.\nSuppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems.\n(SC Ref:641863)\nDownload the ESPD document here: https://www.publiccontractsscotland.gov.uk/ESPD/ESPD_Download.aspx?id=641863",
  "initiationType": "tender"
}