Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Cyber Security Assurance and Testing Services

National Audit Office

This public procurement record has 1 release in its history.

Award

20 Aug 2026 at 14:02

Award Notice
Summary of the contracting process

The National Audit Office is procuring independent cyber security assurance and testing services for delivery in the United Kingdom. The scope includes penetration testing, Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks (ITHC), and Microsoft 365 security reviews. This is a specialist information technology and computer audit and testing services requirement, covering independent assessment of cyber security controls, systems and compliance. The buyer is the National Audit Office, based in London. The selected supplier, Prism Infosec Ltd, is a small and medium-sized enterprise. The requirement is relevant to cyber security consultancies and testing providers with the technical capability to deliver assurance, penetration testing, certification assessments, health checks and Microsoft 365 security reviews independently.

The procurement is complete and was awarded to Prism Infosec Ltd on 3 June 2026 through a selective call-off from the Crown Commercial Service G-Cloud 14 framework. The award value is £155,000 including VAT, covering the full four-year term. The contract started on 3 August 2026 and runs initially for three years, with the available term ending on 2 August 2030 after a further 12-month extension. The tender submission deadline was 1 June 2026 at 12 noon. The procurement was evaluated through the framework call-off process; the published information identifies the requirement as suitable for SMEs and voluntary, community and social enterprises.

This award demonstrates that the National Audit Office buys a combined cyber security assurance and testing service rather than a single technical assessment. A credible future competitor would need to provide independent penetration testing alongside Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks and Microsoft 365 security reviews. Providers should be able to combine practical testing, formal assurance reporting and recognised cyber security assessment capability under one service arrangement. The award also shows that a small specialist supplier can meet this buyer’s requirement through a public sector framework route. Cyber security firms with experience across government environments, strong quality controls and the capacity to coordinate several assessment disciplines would be well placed when this requirement next reaches the market.

How relevant is this notice?

Notice Information

Notice Title

Cyber Security Assurance and Testing Services

Notice Description

The National Audit Office awarded a contract to Prism Infosec Ltd through the Crown Commercial Services G-Cloud 14 framework. The supplier will provide independent cyber security assurance and testing services, including penetration testing, Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks (ITHC), and Microsoft 365 security reviews. The contract commenced on Monday 3rd August 2026 and will run for an initial three-year term until Thursday 2nd August 2029, with the option to extend for a further 12 months until Friday 2nd August 2030. The total estimated contract value is PS155,000 (inclusive of VAT) over the full four-year term.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/f73ee0b2-8970-40fd-b6ca-e2dff86988bb
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME, VCSE
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72222300 - Information technology services

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
£155,000 £100K-£500K
Lots Value
Not specified
Awards Value
£155,000 £100K-£500K
Contracts Value
Not specified

Notice Dates

Publication Date
20 Aug 20261 weeks ago
Submission Deadline
1 Jun 2026Expired
Future Notice Date
Not specified
Award Date
3 Jun 20262 months ago
Contract Period
3 Aug 2026 - 2 Aug 2030 4-5 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
National Audit Office
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1W 9SP
Postcode Area
South West London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified
Local Authority
Westminster
Electoral Ward
Pimlico North
Westminster Constituency
Cities of London and Westminster

Supplier Information

Number of Suppliers
1
Supplier Name

Prism Infosec Ltd

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...