This public procurement record has 1 release in its history.

Award

17 Sep 2026 at 09:03

Summary of the contracting process

The Driver and Vehicle Standards Agency (DVSA) procured penetration testing and IT health-check services. The requirement covers computer audit and testing services, supporting the agency’s need to assess the security of its information technology. Delivery may take place across the United Kingdom, Europe, the Channel Islands, the Isle of Man, British Overseas Territories and elsewhere internationally. This is a services procurement rather than a goods or construction opportunity. The work is relevant to cyber-security consultancies and specialist information-security providers able to carry out penetration tests and IT health checks for a public-sector organisation operating across a broad geographic footprint. The procurement was suitable for small and medium-sized enterprises, so businesses of that scale were within the intended supplier market.

This procurement has been awarded following a selective call-off from the Crown Commercial Service Cyber Security 3 framework, RM3764iii. The tender deadline was 29 May 2026 at 2pm. Dionach Limited was awarded the contract on 27 August 2026 for £533,333, with the contract running from 27 August 2026 to 26 August 2028. The procurement is complete and the award is active. Evaluation was conducted through the framework call-off process. The requirement was treated as a single service package for penetration testing and IT health checks. The award value is the value reported for this procurement and should not be interpreted as a wider framework value. The selected supplier is a large organisation.

For suppliers that did not win, this award is a clear example of DVSA’s demand for externally delivered cyber-security assurance: penetration testing and IT health checks procured through the RM3764iii Cyber Security 3 framework. A credible competitor for this requirement when it next reaches the market would need specialist capability in computer security testing, the capacity to deliver repeatable assessments for a public-sector buyer, and the operational reach to support work across the UK and potentially other international locations. The opportunity was expressly suitable for SMEs, indicating that smaller specialist cyber-security firms can be relevant where they can demonstrate sufficient delivery capacity and dependable service management. Framework access and experience using call-off procedures would also be important for competing through the same route.

How relevant is this notice?

Notice Information

Notice Title

Penetration Testing/IT Health Checks 2026

Notice Description

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/0c3c409c-52dc-4e4e-9c06-455e96b78902
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
£533,333 £500K-£1M
Lots Value
Not specified
Awards Value
£533,333 £500K-£1M
Contracts Value
Not specified

Notice Dates

Publication Date
17 Sep 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
27 Aug 20261 months ago
Contract Period
27 Aug 2026 - 26 Aug 2028 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Driver and Vehicle Standards Agency
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BRISTOL
Postcode
BS5 0DA
Postcode Area
Bristol
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK5 West of England
Small Region (ITL 3)
TLK51 Bristol, City of
Delivery Location
Not specified

Local Authority
Bristol, City of
Electoral Ward
Lawrence Hill
Westminster Constituency
Bristol East

Supplier Information

Number of Suppliers
1
Supplier Name

Dionach Limited

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...