Buyer Name: City of Edinburgh Council
Buyer Address: Waverley Court, Edinburgh, UKM75, EH8 8BG
Contact Name: Shane Newell
Contact Email: shane.newell@edinburgh.gov.uk
Cyber Security Assurance Services Framework
Buyer Contact Info
Status
complete
complete
Procedure
selective
selective
Value
750000.0 GBP
750000.0 GBP
Published
06 Aug 2025, 00:00
06 Aug 2025, 00:00
Deadline
n/a
n/a
Contract Start
n/a
n/a
Contract End
n/a
n/a
Category
services
services
CPV
72000000
72000000
Region
n/a
n/a
Awarded To
Trustmarque Solutions Ltd, Redcentric Solutions Limited, NCC Group Security Services Limited, Entserv UK Ltd
Trustmarque Solutions Ltd, Redcentric Solutions Limited, NCC Group Security Services Limited, Entserv UK Ltd
Official Source
Open Public Contracts Scotland
Open Public Contracts Scotland
Description
The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
Linked Documents
Some PCS documents require login and recording interest on the source portal before download links are available.
No linked documents found for this notice.
Opportunity Context
More Information Links
External Link: https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445
Link Title: Cyber Security Assurance Services Framework
Link Description: The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
Lots
Lot Title: Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
Lot Description: The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and - Security assurance and reporting of proposed new technologies and services. Suppliers must also provide: - Advice and consultation on proposed and existing cloud developments, - Advice and consultation on proposed and existing cloud infrastructure configurations, and - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.
Lot 1 Status: complete
Lot 1 Has Options: No
Lot 1 Award Criterion (quality): Delivery of Services
Lot Title: Incident Response, Digital Forensics, Data Breach Assessment & Recovery
Lot Description: The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Incident Response, - Digital Forensics, - Data Breach Assessment and Recovery.
Lot 2 Status: complete
Lot 2 Has Options: No
Lot 2 Award Criterion (quality): Quality from Lot 1
Lot Title: Security Audit â PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
Lot Description: The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Security Audit â PCI, - Security Architecture/Design Review, - Compliance and Regulatory Services.
Lot 3 Status: complete
Lot 3 Has Options: No
Lot 3 Award Criterion (quality): Quality from Lot 1
Lot Title: Threat Intelligence
Lot Description: The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Threat Intelligence
Lot 4 Status: complete
Lot 4 Has Options: No
Lot 4 Award Criterion (quality): Quality from Lot 1
Lot Title: Vulnerability Assessments
Lot Description: The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Vulnerability Assessments
Lot 5 Status: complete
Lot 5 Has Options: No
Lot 5 Award Criterion (quality): Quality from Lot 1
Lot Title: Data & Hardware Sanitisation
Lot Description: The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Data and Hardware Sanitisation
Lot 6 Status: complete
Lot 6 Has Options: No
Lot 6 Award Criterion (quality): Quality from Lot 1
Documents
Document Title: Cyber Security Assurance Services Framework
Document Description: The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
Contracts
Contract Title: Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
Contract Title: Security Audit â PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
Contract Title: Threat Intelligence
Contract Title: Vulnerability Assessments
Contract Title: Data & Hardware Sanitisation
Contract Title: Incident Response, Digital Forensics, Data Breach Assessment & Recovery
Awards
Award Title: Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
Award Title: Security Audit â PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
Award Title: Threat Intelligence
Award Title: Vulnerability Assessments
Award Title: Data & Hardware Sanitisation
Award Title: Incident Response, Digital Forensics, Data Breach Assessment & Recovery
Raw Notice JSON
Expand raw payload
{
"awards": [
{
"id": "CT1218-1",
"relatedLots": [
"1"
],
"suppliers": [
{
"id": "org-335",
"name": "Trustmarque Solutions Ltd"
},
{
"id": "org-336",
"name": "Redcentric Solutions Limited"
},
{
"id": "org-337",
"name": "NCC Group Security Services Limited"
},
{
"id": "org-338",
"name": "Entserv UK Ltd"
}
],
"title": "Essential Services: Penetration Testing, Security Assurance \u0026 Reporting, Advice \u0026 Consultation"
},
{
"id": "CT1218-2",
"relatedLots": [
"3"
],
"suppliers": [
{
"id": "org-335",
"name": "Trustmarque Solutions Ltd"
},
{
"id": "org-336",
"name": "Redcentric Solutions Limited"
},
{
"id": "org-337",
"name": "NCC Group Security Services Limited"
},
{
"id": "org-338",
"name": "Entserv UK Ltd"
}
],
"title": "Security Audit \u00e2\u0080\u0093 PCI, Security Architecture/Design Review, Compliance \u0026 Regulatory Services."
},
{
"id": "CT1218-3",
"relatedLots": [
"4"
],
"suppliers": [
{
"id": "org-335",
"name": "Trustmarque Solutions Ltd"
},
{
"id": "org-336",
"name": "Redcentric Solutions Limited"
},
{
"id": "org-337",
"name": "NCC Group Security Services Limited"
},
{
"id": "org-338",
"name": "Entserv UK Ltd"
}
],
"title": "Threat Intelligence"
},
{
"id": "CT1218-4",
"relatedLots": [
"5"
],
"suppliers": [
{
"id": "org-335",
"name": "Trustmarque Solutions Ltd"
},
{
"id": "org-336",
"name": "Redcentric Solutions Limited"
},
{
"id": "org-337",
"name": "NCC Group Security Services Limited"
},
{
"id": "org-338",
"name": "Entserv UK Ltd"
}
],
"title": "Vulnerability Assessments"
},
{
"id": "CT1218-5",
"relatedLots": [
"6"
],
"suppliers": [
{
"id": "org-335",
"name": "Trustmarque Solutions Ltd"
},
{
"id": "org-336",
"name": "Redcentric Solutions Limited"
},
{
"id": "org-337",
"name": "NCC Group Security Services Limited"
},
{
"id": "org-338",
"name": "Entserv UK Ltd"
}
],
"title": "Data \u0026 Hardware Sanitisation"
},
{
"id": "CT1218-6",
"relatedLots": [
"2"
],
"suppliers": [
{
"id": "org-336",
"name": "Redcentric Solutions Limited"
},
{
"id": "org-337",
"name": "NCC Group Security Services Limited"
},
{
"id": "org-338",
"name": "Entserv UK Ltd"
}
],
"title": "Incident Response, Digital Forensics, Data Breach Assessment \u0026 Recovery"
}
],
"bids": {
"statistics": [
{
"id": "676",
"measure": "bids",
"relatedLot": "1",
"value": 4.0
},
{
"id": "677",
"measure": "smeBids",
"relatedLot": "1",
"value": 4.0
},
{
"id": "678",
"measure": "foreignBidsFromEU",
"relatedLot": "1",
"value": 0.0
},
{
"id": "679",
"measure": "foreignBidsFromNonEU",
"relatedLot": "1",
"value": 4.0
},
{
"id": "680",
"measure": "electronicBids",
"relatedLot": "1",
"value": 4.0
},
{
"id": "681",
"measure": "bids",
"relatedLot": "3",
"value": 4.0
},
{
"id": "682",
"measure": "smeBids",
"relatedLot": "3",
"value": 4.0
},
{
"id": "683",
"measure": "foreignBidsFromEU",
"relatedLot": "3",
"value": 0.0
},
{
"id": "684",
"measure": "foreignBidsFromNonEU",
"relatedLot": "3",
"value": 4.0
},
{
"id": "685",
"measure": "electronicBids",
"relatedLot": "3",
"value": 4.0
},
{
"id": "686",
"measure": "bids",
"relatedLot": "4",
"value": 4.0
},
{
"id": "687",
"measure": "smeBids",
"relatedLot": "4",
"value": 4.0
},
{
"id": "688",
"measure": "foreignBidsFromEU",
"relatedLot": "4",
"value": 0.0
},
{
"id": "689",
"measure": "foreignBidsFromNonEU",
"relatedLot": "4",
"value": 4.0
},
{
"id": "690",
"measure": "electronicBids",
"relatedLot": "4",
"value": 4.0
},
{
"id": "691",
"measure": "bids",
"relatedLot": "5",
"value": 4.0
},
{
"id": "692",
"measure": "smeBids",
"relatedLot": "5",
"value": 4.0
},
{
"id": "693",
"measure": "foreignBidsFromEU",
"relatedLot": "5",
"value": 0.0
},
{
"id": "694",
"measure": "foreignBidsFromNonEU",
"relatedLot": "5",
"value": 4.0
},
{
"id": "695",
"measure": "electronicBids",
"relatedLot": "5",
"value": 4.0
},
{
"id": "696",
"measure": "bids",
"relatedLot": "6",
"value": 4.0
},
{
"id": "697",
"measure": "smeBids",
"relatedLot": "6",
"value": 4.0
},
{
"id": "698",
"measure": "foreignBidsFromEU",
"relatedLot": "6",
"value": 0.0
},
{
"id": "699",
"measure": "foreignBidsFromNonEU",
"relatedLot": "6",
"value": 4.0
},
{
"id": "700",
"measure": "electronicBids",
"relatedLot": "6",
"value": 4.0
},
{
"id": "701",
"measure": "bids",
"relatedLot": "2",
"value": 3.0
},
{
"id": "702",
"measure": "smeBids",
"relatedLot": "2",
"value": 3.0
},
{
"id": "703",
"measure": "foreignBidsFromEU",
"relatedLot": "2",
"value": 0.0
},
{
"id": "704",
"measure": "foreignBidsFromNonEU",
"relatedLot": "2",
"value": 3.0
},
{
"id": "705",
"measure": "electronicBids",
"relatedLot": "2",
"value": 3.0
}
]
},
"buyer": {
"id": "org-334",
"name": "City of Edinburgh Council"
},
"contracts": [
{
"awardID": "CT1218-1",
"dateSigned": "2025-08-06T00:00:00Z",
"id": "CT1218-1",
"status": "active",
"title": "Essential Services: Penetration Testing, Security Assurance \u0026 Reporting, Advice \u0026 Consultation",
"value": {
"amount": 750000.0,
"currency": "GBP"
}
},
{
"awardID": "CT1218-2",
"dateSigned": "2025-08-06T00:00:00Z",
"id": "CT1218-2",
"status": "active",
"title": "Security Audit \u00e2\u0080\u0093 PCI, Security Architecture/Design Review, Compliance \u0026 Regulatory Services.",
"value": {
"amount": 750000.0,
"currency": "GBP"
}
},
{
"awardID": "CT1218-3",
"dateSigned": "2025-08-06T00:00:00Z",
"id": "CT1218-3",
"status": "active",
"title": "Threat Intelligence",
"value": {
"amount": 750000.0,
"currency": "GBP"
}
},
{
"awardID": "CT1218-4",
"dateSigned": "2025-08-06T00:00:00Z",
"id": "CT1218-4",
"status": "active",
"title": "Vulnerability Assessments",
"value": {
"amount": 750000.0,
"currency": "GBP"
}
},
{
"awardID": "CT1218-5",
"dateSigned": "2025-08-06T00:00:00Z",
"id": "CT1218-5",
"status": "active",
"title": "Data \u0026 Hardware Sanitisation",
"value": {
"amount": 750000.0,
"currency": "GBP"
}
},
{
"awardID": "CT1218-6",
"dateSigned": "2025-08-06T00:00:00Z",
"id": "CT1218-6",
"status": "active",
"title": "Incident Response, Digital Forensics, Data Breach Assessment \u0026 Recovery",
"value": {
"amount": 750000.0,
"currency": "GBP"
}
}
],
"date": "2025-08-06T00:00:00Z",
"description": "Contained in tender documentation\r\n (SC Ref:806607)",
"id": "rls-85-AUG536445",
"initiationType": "tender",
"language": "EN",
"links": [
{
"href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446",
"rel": "canonical"
}
],
"ocid": "ocds-r6ebe6-0000767446",
"parties": [
{
"address": {
"locality": "Edinburgh",
"postalCode": "EH8 8BG",
"region": "UKM75",
"streetAddress": "Waverley Court"
},
"contactPoint": {
"email": "shane.newell@edinburgh.gov.uk",
"name": "Shane Newell",
"url": "http://"
},
"details": {
"classifications": [
{
"id": "Regional or local authority",
"scheme": "TED_CA_TYPE"
},
{
"description": "General public services",
"id": "01",
"scheme": "COFOG"
}
],
"url": "http://www.edinburgh.gov.uk"
},
"id": "org-334",
"identifier": {
"legalName": "City of Edinburgh Council"
},
"name": "City of Edinburgh Council",
"roles": [
"buyer"
]
},
{
"address": {
"locality": "York.",
"postalCode": "YO26 6RW",
"region": "UKE21",
"streetAddress": "Marlborough House, Westminster Place, York Business Park,"
},
"contactPoint": {},
"details": {
"scale": "sme",
"url": "http://"
},
"id": "org-335",
"identifier": {
"legalName": "Trustmarque Solutions Ltd"
},
"name": "Trustmarque Solutions Ltd",
"roles": [
"supplier"
]
},
{
"address": {
"locality": "Harrogate",
"postalCode": "HG3 1UG",
"region": "UKE2",
"streetAddress": "Central House, Beckwith Knowle"
},
"contactPoint": {},
"details": {
"scale": "sme",
"url": "http://"
},
"id": "org-336",
"identifier": {
"legalName": "Redcentric Solutions Limited"
},
"name": "Redcentric Solutions Limited",
"roles": [
"supplier"
]
},
{
"address": {
"locality": "MANCHESTER",
"postalCode": "M3 3AQ",
"region": "UK",
"streetAddress": "XYZ Building, 2 Hardman Boulevard, Spinningfields,"
},
"contactPoint": {},
"details": {
"scale": "large",
"url": "http://"
},
"id": "org-337",
"identifier": {
"legalName": "NCC Group Security Services Limited"
},
"name": "NCC Group Security Services Limited",
"roles": [
"supplier"
]
},
{
"address": {
"locality": "Aldershot",
"postalCode": "GU11 1PZ",
"region": "UK",
"streetAddress": "Royal Pavilion, Wellesley Road"
},
"contactPoint": {},
"details": {
"scale": "sme",
"url": "http://"
},
"id": "org-338",
"identifier": {
"legalName": "Entserv UK Ltd"
},
"name": "Entserv UK Ltd",
"roles": [
"supplier"
]
},
{
"address": {
"locality": "Edinburgh",
"postalCode": "EH1 1LB",
"streetAddress": "Sheriff Court House, 27 Chambers Street"
},
"contactPoint": {
"url": "http://"
},
"id": "org-315",
"identifier": {
"legalName": "Sheriff Court"
},
"name": "Sheriff Court",
"roles": [
"reviewBody"
]
}
],
"relatedProcesses": [
{
"id": "1",
"identifier": "2024/S 000-020020",
"relationship": [
"planning"
],
"scheme": "EU-OJ"
}
],
"tag": [
"award",
"contract"
],
"tender": {
"classification": {
"id": "72000000",
"scheme": "CPV"
},
"coveredBy": [
"GPA"
],
"description": "The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.",
"documents": [
{
"description": "The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.",
"documentType": "awardNotice",
"format": "text/html",
"id": "AUG536445",
"title": "Cyber Security Assurance Services Framework",
"url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445"
}
],
"id": "CT1218",
"items": [
{
"additionalClassifications": [
{
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"region": "UKM75"
}
],
"id": "1",
"relatedLot": "1"
},
{
"additionalClassifications": [
{
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"region": "UKM75"
}
],
"id": "2",
"relatedLot": "2"
},
{
"additionalClassifications": [
{
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"region": "UKM75"
}
],
"id": "3",
"relatedLot": "3"
},
{
"additionalClassifications": [
{
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"region": "UKM75"
}
],
"id": "4",
"relatedLot": "4"
},
{
"additionalClassifications": [
{
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"region": "UKM75"
}
],
"id": "5",
"relatedLot": "5"
},
{
"additionalClassifications": [
{
"id": "72000000",
"scheme": "CPV"
}
],
"deliveryAddresses": [
{
"region": "UKM75"
}
],
"id": "6",
"relatedLot": "6"
}
],
"legalBasis": {
"id": "32014L0024",
"scheme": "CELEX"
},
"lotDetails": {},
"lots": [
{
"awardCriteria": {
"criteria": [
{
"description": "30",
"name": "Delivery of Services",
"type": "quality"
},
{
"description": "50",
"type": "price"
}
]
},
"description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\r\n These include:\r\n - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and\r\n - Security assurance and reporting of proposed new technologies and services.\r\n Suppliers must also provide:\r\n - Advice and consultation on proposed and existing cloud developments,\r\n - Advice and consultation on proposed and existing cloud infrastructure configurations, and\r\n - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.",
"hasOptions": false,
"id": "1",
"status": "complete",
"title": "Essential Services: Penetration Testing, Security Assurance \u0026 Reporting, Advice \u0026 Consultation"
},
{
"awardCriteria": {
"criteria": [
{
"description": "50",
"name": "Quality from Lot 1",
"type": "quality"
},
{
"description": "50",
"type": "price"
}
]
},
"description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\r\n These include:\r\n - Incident Response,\r\n - Digital Forensics,\r\n - Data Breach Assessment and Recovery.",
"hasOptions": false,
"id": "2",
"status": "complete",
"title": "Incident Response, Digital Forensics, Data Breach Assessment \u0026 Recovery"
},
{
"awardCriteria": {
"criteria": [
{
"description": "50",
"name": "Quality from Lot 1",
"type": "quality"
},
{
"description": "50",
"type": "price"
}
]
},
"description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\r\n These include:\r\n - Security Audit \u00e2\u0080\u0093 PCI,\r\n - Security Architecture/Design Review,\r\n - Compliance and Regulatory Services.",
"hasOptions": false,
"id": "3",
"status": "complete",
"title": "Security Audit \u00e2\u0080\u0093 PCI, Security Architecture/Design Review, Compliance \u0026 Regulatory Services."
},
{
"awardCriteria": {
"criteria": [
{
"description": "50",
"name": "Quality from Lot 1",
"type": "quality"
},
{
"description": "50",
"type": "price"
}
]
},
"description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\r\n These include:\r\n - Threat Intelligence",
"hasOptions": false,
"id": "4",
"status": "complete",
"title": "Threat Intelligence"
},
{
"awardCriteria": {
"criteria": [
{
"description": "50",
"name": "Quality from Lot 1",
"type": "quality"
},
{
"description": "50",
"type": "price"
}
]
},
"description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\r\n These include:\r\n - Vulnerability Assessments",
"hasOptions": false,
"id": "5",
"status": "complete",
"title": "Vulnerability Assessments"
},
{
"awardCriteria": {
"criteria": [
{
"description": "50",
"name": "Quality from Lot 1",
"type": "quality"
},
{
"description": "50",
"type": "price"
}
]
},
"description": "The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.\r\n These include:\r\n - Data and Hardware Sanitisation",
"hasOptions": false,
"id": "6",
"status": "complete",
"title": "Data \u0026 Hardware Sanitisation"
}
],
"mainProcurementCategory": "services",
"procurementMethod": "selective",
"procurementMethodDetails": "Restricted procedure",
"reviewDetails": "An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.",
"status": "complete",
"techniques": {
"hasFrameworkAgreement": true
},
"title": "Cyber Security Assurance Services Framework"
}
}