Official UK procurement notice
Provision of ISO 27001:2022 External Auditor
Authority: Office for Nuclear Regulation (Central government)
What is being bought
Published requirement descriptionONR has a number of key security certifications which it holds in order to assure our stakeholders that our security policies, processes, networks and systems are secured to industry standards.
The purpose of this project is to procure audit services for ISO27001 to maintain our ISO 27001:2022 certification status due to contract expiration with our existing supplier. Successful and continued ISO 27001 certification validates our security arrangements as an organisation, and is a fundamental contributor to ONR's security reputation and ambition to be an exemplar of good security practice.
CPV: Certification services
The lotProcurement structure
single lot · value publishedLot #1AwardedRenewalPublished value£29,000
- Condition of participation
This opportunity is restricted to UK based UKAS Accredited suppliers.
What it takes to wini
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Evaluation split and conditions of participation as published; the tender pack may add morei
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Lot awarding rule: Award of contract will be determined via : compliance against several constraints listed in the tender documentation; quality of the key personnel delivering the services and quality of those services provided; social value; and an affordability assessment.
- Condition of participation
This opportunity is restricted to UK based UKAS Accredited suppliers.
Procedure terms & legal framework
From the official record- Procedure method
- Below threshold - open competition
- Legal basis
- UKPGA · 2023/54 Procurement Act 2023
- Procurement category
- Services
- Notice status
- Awarded
- Procurement threshold
- Below threshold
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Competitive procedure
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 7 Jan 2026, 15:33 GMT
- Last source update
- 10 Apr 2026, 10:15 BST
- Authority reference
ONR1123- FTS notice number
2026/S 000-001168- Latest notice
- Contract details notice (UK7)
- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-060138Find a Tender
- Reserved participation area
- K02000001
How it was run
Official notice- Submission deadline
- 11 Feb 2026, 13:00 GMT
- Clarification deadline
- 30 Jan 2026, 23:59 GMT
- Submission channel
- Official e-sourcing portal
- Electronic submission
- Allowed
To access this opportunity visit onr.delta-esourcing.com ↗ and enter the access code PCP562X577
Timeline
7 Jan 2026 → 10 Apr 2026 · 5 dates- Tender notice published291 days ago7 Jan 2026, 15:33 GMT
- Clarification questions by267 days ago30 Jan 2026, 23:59 GMT
- Submission deadline256 days ago11 Feb 2026, 13:00 GMT
- Contract starts207 days ago1 Apr 2026, 00:00 BST
- Latest notice published198 days ago10 Apr 2026, 10:15 BST
Notice history
3 events · 2 releases on Find a Tender · since 7 Jan 2026- Tender notice published7 Jan 2026, 15:33 GMTUK4
- Contract details notice published10 Apr 2026, 10:15 BSTUK7
- Status changed to complete10 Apr 2026, 10:15 BST
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| QECUK Limited | £24,500 † | — | Awarded |
Contracts
Contract 1 · QECUK Limited
- Signed
- 31 Mar 2026
- Value
- £24,500
- Period
- 1 Jul 2026 – 30 Jun 2029 · up to 30 Jun 2030 with extensions
- Status
- active
- Extensions
- Optional one year extension if agreed in writing between the parties.
1 agreed KPI: ISO 27001 Accreditation
- ISO 27001 Accreditation, 1 number of identified risks 2 number of security incidents 3 Security awareness training 4 number of nonconformities from audits 5 vulnerability patching rate 6 Disaster Recovery test success rate
Contracting authority & participating public bodies
Bidders & participating suppliers
1 commercial party on the notice- QECUK LimitedAwarded supplier
Official documents & specifications (2)
Official links; attachments are not copiedNotices published for this procedure
- Contract details notice Contract details notice on Find a Tender
- Tender notice Tender notice on Find a Tender