Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

DDaT25584 - Provision of CHECK Penetration Testing

ICS on behalf of DSIT and DESNZ

This public procurement record has 1 release in its history.

Award

06 Oct 2026 at 10:27

Award Notice
Summary of the contracting process

ICS, acting on behalf of the Department for Science, Innovation and Technology and the Department for Energy Security and Net Zero, procured penetration testing services to assess the security of its IT systems. The work is for the ICS Digital team and requires a CHECK-accredited supplier. This is a cyber-security assessment and assurance service, rather than a purchase of equipment or a broader IT support contract. Delivery is described as covering the United Kingdom, Europe, the Channel Islands, the Isle of Man, British Overseas Territories and the rest of the world. The buying organisation is based in Swindon, England. The requirement is intended to provide assurance about the security of the departments’ IT systems through penetration testing.

The procurement is complete and was awarded to Prism InfoSec Ltd on 16 September 2026. The award value is £450,000. The contract period runs from 1 October 2026 to 29 September 2028. The requirement was competed as a mini-competition under the Government Commercial Agency’s Cyber Security Services 3 Framework; the procurement used a selective call-off route from a dynamic purchasing system. The contract covers the penetration testing service as a single requirement, with no lots described. The stated evaluation basis and supplier eligibility requirement are not detailed beyond the need for a CHECK-accredited provider. The procurement was identified as suitable for small and medium-sized enterprises.

This award demonstrates demand from ICS and the two departments it represents for penetration testing that provides assurance over government IT systems. Suppliers seeking to compete for a comparable requirement from this buyer would need CHECK accreditation and the technical capability to test systems and report on their security effectively. The broad delivery coverage indicates that credible providers should be able to support work across the UK and the other listed international locations. The buyer used a framework mini-competition, so relevant experience participating in framework call-offs and responding to competitive specifications would support a credible offer. The selected supplier is an SME, and the procurement was considered suitable for SMEs, indicating that this scale of cyber-security testing is not necessarily restricted to large contractors.

How relevant is this notice?

Notice Information

Notice Title

DDaT25584 - Provision of CHECK Penetration Testing

Notice Description

***** THIS IS AN AWARD NOTICE, NOT A CALL FOR COMPETITION ***** This procurement is being concluded following a mini competition under the Government Commercial Agency RM3764.3 Cyber Security Services 3 Framework. Brief Description of Requirement ICS Digital team required the provision of Penetration testing services from a CHECK accredited supplier to gain assurance in the security of its IT systems.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-de57b65d-f8b3-4cf4-a9ea-1a175fedf860
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/d317248c-13e6-4c98-8c6e-f0aa8d0ac377
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Dynamic
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a dynamic purchasing system
Tender Suitability
SME
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72225000 - System quality assurance assessment and review services

Notice Value(s)

Tender Value
£450,000 £100K-£500K
Lots Value
Not specified
Awards Value
£450,000 £100K-£500K
Contracts Value
Not specified

Notice Dates

Publication Date
6 Oct 2026Today
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
16 Sep 20263 weeks ago
Contract Period
1 Oct 2026 - 29 Sep 2028 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
ICS on behalf of DSIT and DESNZ
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
SWINDON
Postcode
SN2 1FF
Postcode Area
Swindon
Country
England
Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified
Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Supplier Information

Number of Suppliers
1
Supplier Name

Prism Infosec Ltd

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...