Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

GovAssure Independent Audit for One Login

DSIT

This public procurement record has 1 release in its history.

Award

25 Aug 2026 at 17:45

Award Notice
Summary of the contracting process

The Department for Science, Innovation and Technology (DSIT) procured independent assurance services for One Login. The work is an external review of DSIT’s self-assessment against the National Cyber Security Centre’s Cyber Assessment Framework, using the enhanced government profile. The appointed supplier assesses the completed self-assessment and supporting evidence, then produces a final report stating whether One Login meets the assigned government profile for the systems in scope. This is an information technology service, delivered in relation to the United Kingdom and internationally, including the Channel Islands, Isle of Man, Europe, British Overseas Territories and the rest of the world. The requirement is suitable for small and medium-sized enterprises and voluntary, community or social enterprises.

The procurement is complete and was awarded to NCC Group Security Services Limited on 2 April 2026. The award value is £21,125 including the stated currency of GBP. The contract runs from 1 August 2026 to 31 March 2027. It was conducted as a selective call-off from a dynamic purchasing system. The tender submission deadline was 9 March 2026 at 12:00 UTC. The award is active. The requirement was treated as a services procurement and covered one overall item rather than separate lots. The evaluation basis is reflected in the assurance outcome required: review of DSIT’s self-assessment and evidence against the enhanced government profile under the National Cyber Security Centre’s Cyber Assessment Framework, followed by a final compliance report.

This award indicates demand from DSIT for independent cyber assurance of major government digital services, specifically One Login. Suppliers likely to compete credibly when this requirement returns will need demonstrable capability in independent assessment rather than internal self-review, with practical knowledge of the National Cyber Security Centre’s Cyber Assessment Framework and its enhanced government profile for government systems. They will also need to examine structured self-assessment evidence, test whether it supports the claimed position, understand the systems in scope and produce a clear, authoritative final report. The requirement is appropriate to organisations able to provide specialist information security assurance at a focused engagement scale, including smaller firms and voluntary, community or social enterprises with relevant technical expertise and reporting experience.

How relevant is this notice?

Notice Information

Notice Title

GovAssure Independent Audit for One Login

Notice Description

GDS wishes to procure a supplier to conduct an independent assurance review of GDS self-assessed assessment of one returns against the National Cyber Security Centre's Cyber Assessment Framework. Following GDS completing a self-assessment of One Login against an appropriate government profile (enhanced) under the National Cyber Security Centre's Cyber Assessment Framework, a supplier will conduct an assessment of One Login, assessing the completed self-assessment and provided evidence to author a final report stating whether GDS meets the assigned government profile against the systems in scope

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/2b828d25-4766-4d07-8962-1937e8cf894a
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Dynamic
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a dynamic purchasing system
Tender Suitability
SME, VCSE
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72222300 - Information technology services

Notice Value(s)

Tender Value
£21,125 Under £100K
Lots Value
Not specified
Awards Value
£21,125 Under £100K
Contracts Value
Not specified

Notice Dates

Publication Date
25 Aug 20262 days ago
Submission Deadline
9 Mar 2026Expired
Future Notice Date
Not specified
Award Date
2 Apr 20264 months ago
Contract Period
1 Aug 2026 - 31 Mar 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
DSIT
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1A 2EG
Postcode Area
South West London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified
Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Supplier Information

Number of Suppliers
1
Supplier Name

NCC Group Security Services Limited

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...