Award

ITHC, Penetration Testing and Associated Services Contract 2

DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS

This public procurement record has 4 releases in its history.

Award

17 Apr 2025 at 09:30

Award

17 Apr 2025 at 09:29

Award

17 Apr 2025 at 09:24

Planning

22 Oct 2024 at 10:43

Summary of the contracting process

The Department of Environment, Food and Rural Affairs (DEFRA) has completed the procurement process for its "ITHC, Penetration Testing and Associated Services Contract 2." This involves the provision of Information Technology Health Checks, Penetration Testing, and associated services, classified under the CPV code 72222300. The contracts were awarded under a limited procurement method, part of the Crown Commercial Services' RM3764.3 Dynamic Purchasing System (DPS) for Cyber Security Services. The awarded contracts are distributed across the UK, including entities within Defra Group like Natural England and the Environment Agency. Key dates include the contracts being signed in March 2025, with completion status achieved by April 2025.

These contracts present a substantial opportunity for businesses specialising in IT security services, particularly those possessing CHECK qualifications. Companies capable of delivering quality technical services at competitive prices, with prior experience in cyber security assurance, will benefit significantly. Small and medium enterprises (SMEs) such as 3B Data Security Ltd, Prism Infosec Ltd, and large enterprises like Commissum Associates have already secured these contracts, reflecting opportunities for both SMEs and larger firms in the IT services industry to expand their operations within the public sector. The structured rotation of work orders ensures fair distribution of opportunities among suppliers, enhancing business growth across the sector.

How relevant is this notice?

Notice Information

Notice Title

ITHC, Penetration Testing and Associated Services Contract 2

Notice Description

Contract awarded for the provision of IT Health Checks, Penetration Testing and Associated Services. This is one of three contracts awarded by the Authority for these services, under the Crown Commercial Services' RM3764.3 DPS.

Lot Information

Lot 1

Call-off from RM3764.3 Cyber Security Services 3 Dynamic Purchasing System. The Authority has awarded three contracts, to three CHECK qualified Suppliers for cyber security assurance services.

Procurement Information

FTS Pipeline Notice: 2024/S 000-034110<br/>Call off from RM3764.3 Cyber Security Services 3 Dynamic Purchasing System

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-04b008
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/015796-2025
Current Stage
Award
All Stages
Planning, Award

Procurement Classification

Notice Type
Planning Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Award procedure without prior publication of a call for competition
Tender Suitability
SME
Awardee Scale
Large, SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

72222300 - Information technology services

72254000 - Software testing

Notice Value(s)

Tender Value
£4,500,000 £1M-£10M
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£3,375,000 £1M-£10M

Notice Dates

Publication Date
17 Apr 20257 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
19 Mar 20258 months ago
Contract Period
7 Mar 2025 - 6 Mar 2028 3-4 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Cancelled
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS
Additional Buyers

DEFRA GROUP COMMERCIAL

Contact Name
Sara Bevan, Sara Bevan - DgC
Contact Email
sara.bevan@defra.gov.uk
Contact Phone
07468766045

Buyer Location

Locality
BRISTOL
Postcode
BS1 5AH
Post Town
Bristol
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
TLI32 Westminster

Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Supplier Information

Number of Suppliers
3
Supplier Names

3B DATA SECURITY

COMMISSUM ASSOCIATES

PRISM INFOSEC

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-04b008-2025-04-17T10:30:40+01:00",
    "date": "2025-04-17T10:30:40+01:00",
    "ocid": "ocds-h6vhtk-04b008",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-FTS-127844",
            "name": "Defra Group Commercial",
            "identifier": {
                "schemeEntered": "Other",
                "id": "Other"
            },
            "address": {
                "streetAddress": "Horizon House, Deanery Road, Bristol",
                "locality": "Bristol",
                "region": "UKI32",
                "postalCode": "BS1 5AH",
                "countryCode": "GB",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "name": "Sara Bevan - DgC",
                "email": "sara.bevan@defra.gov.uk",
                "telephone": "07468766045"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "businessArea": "Defra Group (Core Defra, Rural Payments Agency, Environment Agency, Natural England and Marine Management Organisation)",
                "url": "https://www.gov.uk/government/organisations/department-for-environment-food-rural-affairs"
            }
        },
        {
            "id": "GB-FTS-139505",
            "name": "DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS",
            "identifier": {
                "legalName": "DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS"
            },
            "address": {
                "streetAddress": "Seacole Building, 2 Marsham Street",
                "locality": "London",
                "region": "UK",
                "postalCode": "SW1P 4DF",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "name": "Sara Bevan",
                "email": "sara.bevan@defra.gov.uk"
            },
            "roles": [
                "buyer",
                "reviewBody"
            ],
            "details": {
                "url": "https://www.gov.uk/government/organisations/department-for-environment-food-rural-affairs",
                "buyerProfile": "https://defra-family.force.com/s/Welcome",
                "classifications": [
                    {
                        "scheme": "TED_CA_TYPE",
                        "id": "MINISTRY",
                        "description": "Ministry or any other national or federal authority, including their regional or local subdivisions"
                    },
                    {
                        "scheme": "COFOG",
                        "description": "Cyber Security"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-144482",
            "name": "Prism Infosec Ltd",
            "identifier": {
                "legalName": "Prism Infosec Ltd",
                "id": "05985734"
            },
            "address": {
                "streetAddress": "1003/1004 Eagle Tower Montpellier Dr Cheltenham",
                "locality": "Cheltenham",
                "region": "UK",
                "postalCode": "GL50 1TA",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "telephone": "+44 1242652100"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "http://www.prisminfosec.com",
                "scale": "sme"
            }
        },
        {
            "id": "GB-FTS-144483",
            "name": "Commissum Associates",
            "identifier": {
                "legalName": "Commissum Associates",
                "id": "SC229945"
            },
            "address": {
                "streetAddress": "Mitchell House, 5 Mitchell Street, Edinburgh",
                "locality": "Edinburgh",
                "region": "UK",
                "postalCode": "EH6 7BD",
                "countryName": "United Kingdom"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "http://www.resillion.com",
                "scale": "large"
            }
        },
        {
            "id": "GB-FTS-144484",
            "name": "3B Data Security Ltd",
            "identifier": {
                "legalName": "3B Data Security Ltd",
                "id": "10353328"
            },
            "address": {
                "streetAddress": "Unit D South Cambridge Business Park,",
                "locality": "Cambridge",
                "region": "UK",
                "postalCode": "CB22 3JH",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "email": "benn.morris@3bdatasecurity.com"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "sme"
            }
        }
    ],
    "buyer": {
        "id": "GB-FTS-139505",
        "name": "DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS"
    },
    "tender": {
        "id": "ocds-h6vhtk-04b008",
        "title": "ITHC, Penetration Testing and Associated Services Contract 2",
        "description": "Contract awarded for the provision of IT Health Checks, Penetration Testing and Associated Services. This is one of three contracts awarded by the Authority for these services, under the Crown Commercial Services' RM3764.3 DPS.",
        "status": "complete",
        "suitability": {
            "sme": true,
            "vcse": false
        },
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "region": "UKI32"
                    },
                    {
                        "region": "UK"
                    },
                    {
                        "region": "UK"
                    },
                    {
                        "region": "UK"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amount": 4500000,
            "currency": "GBP"
        },
        "procurementMethod": "limited",
        "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
        "mainProcurementCategory": "services",
        "tenderPeriod": {
            "startDate": "2024-10-23T00:00:00Z"
        },
        "contractPeriod": {
            "startDate": "2025-03-07T00:00:00Z",
            "endDate": "2028-03-06T00:00:00Z"
        },
        "hasOptions": true,
        "options": {
            "description": "It is anticipated that the contract will be awarded for an initial 3 year term, with the option to extend for 1 additional period of 12 months."
        },
        "hasRenewal": false,
        "classification": {
            "scheme": "CPV",
            "id": "72222300",
            "description": "Information technology services"
        },
        "additionalClassifications": [
            {
                "scheme": "CPV",
                "id": "72254000",
                "description": "Software testing"
            },
            {
                "scheme": "CPV",
                "id": "72000000",
                "description": "IT services: consulting, software development, Internet and support"
            }
        ],
        "techniques": {
            "hasFrameworkAgreement": false,
            "hasDynamicPurchasingSystem": false
        },
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "lots": [
            {
                "id": "1",
                "description": "Call-off from RM3764.3 Cyber Security Services 3 Dynamic Purchasing System. The Authority has awarded three contracts, to three CHECK qualified Suppliers for cyber security assurance services.",
                "awardCriteria": {
                    "criteria": [
                        {
                            "name": "Technical",
                            "type": "quality",
                            "description": "60"
                        },
                        {
                            "name": "Price",
                            "type": "cost",
                            "description": "40"
                        }
                    ]
                },
                "hasOptions": false,
                "status": "cancelled"
            }
        ],
        "coveredBy": [
            "GPA"
        ],
        "procurementMethodRationaleClassifications": [
            {
                "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
                "id": "D_OUTSIDE_SCOPE",
                "description": "The procurement falls outside the scope of application of the directive"
            }
        ],
        "procurementMethodRationale": "FTS Pipeline Notice: 2024/S 000-034110<br/>Call off from RM3764.3 Cyber Security Services 3 Dynamic Purchasing System"
    },
    "language": "en",
    "awards": [
        {
            "id": "015791-2025-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-144482",
                    "name": "Prism Infosec Ltd"
                }
            ]
        },
        {
            "id": "015795-2025-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "hasSubcontracting": true,
            "subcontracting": {
                "minimumPercentage": 0.3,
                "maximumPercentage": 0.3,
                "description": "Some services under the contract are likely to be subcontracted to the Supplier's CHECK qualified subcontracting partners."
            },
            "suppliers": [
                {
                    "id": "GB-FTS-144483",
                    "name": "Commissum Associates"
                }
            ]
        },
        {
            "id": "015796-2025-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-144484",
                    "name": "3B Data Security Ltd"
                }
            ]
        }
    ],
    "contracts": [
        {
            "id": "015791-2025-1",
            "awardID": "015791-2025-1",
            "status": "active",
            "dateSigned": "2025-03-19T00:00:00Z"
        },
        {
            "id": "015795-2025-1",
            "awardID": "015795-2025-1",
            "status": "active",
            "dateSigned": "2025-03-19T00:00:00Z"
        },
        {
            "id": "015796-2025-1",
            "awardID": "015796-2025-1",
            "status": "active",
            "value": {
                "amount": 3375000,
                "currency": "GBP"
            },
            "dateSigned": "2025-03-21T00:00:00Z"
        }
    ],
    "bids": {
        "statistics": [
            {
                "id": "10",
                "measure": "bids",
                "relatedLot": "1",
                "value": 16
            },
            {
                "id": "8",
                "measure": "lowestValidBidValue",
                "relatedLot": "1",
                "value": 3375000,
                "currency": "GBP"
            },
            {
                "id": "9",
                "measure": "highestValidBidValue",
                "relatedLot": "1",
                "value": 3375000,
                "currency": "GBP"
            },
            {
                "id": "13",
                "measure": "bids",
                "relatedLot": "1",
                "value": 16
            },
            {
                "id": "11",
                "measure": "lowestValidBidValue",
                "relatedLot": "1",
                "value": 3375000,
                "currency": "GBP"
            },
            {
                "id": "12",
                "measure": "highestValidBidValue",
                "relatedLot": "1",
                "value": 3375000,
                "currency": "GBP"
            },
            {
                "id": "14",
                "measure": "bids",
                "relatedLot": "1",
                "value": 16
            }
        ]
    }
}