Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Penetration testing/IT Health Checks 2026

Driver and Vehicle Standards Agency

This public procurement record has 1 release in its history.

Award

09 Oct 2026 at 09:11

Award Notice
Summary of the contracting process

DVSA (the Driver and Vehicle Standards Agency) procured penetration testing and IT health checks to assess the security of its IT systems. This is a cyber-security testing service, classified as computer audit and testing services. The requirement was delivered for DVSA, with delivery locations stated to include the United Kingdom, Europe, the Channel Islands, the Isle of Man, British Overseas Territories and the rest of the world. The procurement was a call-off from the Crown Commercial Service Cyber Security 3 framework. It therefore concerned specialist testing and assurance work delivered under that framework, rather than a standalone open competition. The listed scope identifies penetration testing and IT health checks; no more detailed breakdown of systems, testing methods or deliverables is described.

The procurement is complete and has been awarded to KPMG LLP. The award was made on 29 September 2026, for £533,333.33. The contract period runs from 29 September 2026 to 28 September 2028. The estimated procurement value was also £533,333.33. This was a selective call-off from a framework agreement, not a new open tender. The tender submission deadline was 29 May 2026 at 2pm. The available evaluation and award information does not set out specific scoring criteria. The service was marked as suitable for small and medium-sized enterprises, although the selected supplier was a large organisation. There are no separate lots or multiple awardees reported.

This award shows that DVSA buys penetration testing and IT health checks through the Cyber Security 3 framework, with a contract spanning multiple delivery locations. Suppliers seeking to compete for the same requirement when it returns to market would need to provide credible specialist cyber-security testing and assurance, with the capacity to support the geographic reach indicated. The stated SME suitability suggests that smaller firms may be able to meet the requirement, either directly or as part of a delivery team, while the award demonstrates that a large supplier was selected for this call-off. The procurement provides evidence of demand for these specific testing services at a substantial scale. Relevant experience delivering penetration testing and IT health checks for public-sector IT environments would be commercially pertinent.

How relevant is this notice?

Notice Information

Notice Title

Penetration testing/IT Health Checks 2026

Notice Description

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-759e7abd-b298-495c-ba18-a5c52bc820c4
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/5504362d-70e2-4f39-8aa8-45e464b6ae93
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
£533,333 £500K-£1M
Lots Value
Not specified
Awards Value
£533,333 £500K-£1M
Contracts Value
Not specified

Notice Dates

Publication Date
9 Oct 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
29 Sep 20263 weeks ago
Contract Period
29 Sep 2026 - 28 Sep 2028 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Driver and Vehicle Standards Agency
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BRISTOL
Postcode
BS5 0DA
Postcode Area
Bristol
Country
England
Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK5 West of England
Small Region (ITL 3)
TLK51 Bristol, City of
Delivery Location
Not specified
Local Authority
Bristol, City of
Electoral Ward
Lawrence Hill
Westminster Constituency
Bristol East

Supplier Information

Number of Suppliers
1
Supplier Name

KPMG LLP

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...