Notice Information
Notice Title
Internal Audit Services
Notice Description
2.1 This brief is for the provision of internal audit services to deliver third line assurance within the Trust's overall Board Assurance Framework. 2.2 The Framework assumes up to three internal audits per calendar year, organised around a five year planning cycle. The focus of internal audits will be reviewed and refined annually by Trustees, informed by the Trust's risk profile. 2.3 It is expected that: - persistent high risk areas will be subject to annual scrutiny, particularly in areas where risks are constantly evolving. It is expected that cyber security will fall into this category. This means that potential providers must be able to demonstrate competence to audit in this area, either directly or via a partner. - at least one audit each year will focus on an aspect of financial or HR management, as the areas carrying the highest ongoing risk to the Trust. - other areas will be audited on a five yearly cycle. An example plan is set out in the accompanying Board Assurance Framework. Whilst this plan provides starting assumptions for each year's scrutiny schedule, Trustees may adjust it in light of changing risk profiles. In some circumstances, this could mean combining the audit time available to conduct (say) one deeper audit into a particular business area rather than two short audits in different areas. For reasons of budget and practicality, it is expected that proposed annual cyber security audits will focus on specific areas of cyber risk such as: patch/vulnerability management; access controls; incident management planning and response; resilience planning; staff training and testing. 2.4 Providers will be expected to: - work with the Chief Operating Officer to produce an annual audit schedule for approval by Trustees in December of each year. (The audit period for each year will be 1 Jan - 31 Dec) - produce written scope of works for each intended audit and work with the NSAT business lead for relevant areas to request and gather the audit material needed (including arranging any meetings/visits where relevant). - produce written reports for each audit undertaken and the annual scrutiny summary report for the Trust's Annual Report and Accounts. - attend the Audit & Risk Committee at least annually to report directly to Trustees on recent audit reports. These dates will be booked at the start of each year. 2.5 The overall approach will be informed by the Trust's Risk Management Policy (attached to this brief). The Trust maintains its risk register via the "Every" online system. The Trust will take a risk-based approach to setting the scope for each audit. 2.6 On a day to day basis, internal auditors will work with the Trust's Chief Operating Officer and/or Chief Finance Officer to facilitate audit processes. Audit reports will be to Trustees (and the Chair of the Audit & Risk committee in particular). 2.7 The Trust's annual budget for internal audit is PS11k (exc VAT). The contract for will be for three years (1 January 2026 - 31 December2028), cancellable with the provision of six months' notice on either side. 3. Response 3.1 Responses are sought from potential partners to this brief. Written responses should include: - details of experience of undertaking internal audit/scrutiny in general, with reference to any experience in the academy sector in particular. - an outline of proposed audit methodologies. - the experience and/or qualifications of lead personnel who may be undertaking audits (including how specialist expertise will be secured to meet the range of audit requirements in the Trust's likely internal audit cycle). - examples of reporting format, including the form of recommendation. - any proposals for tracking and closing recommendations from audits. - names and contact details of two client referees able to provide information about their experience of working with the provider. 3.2 Responses should provide a fixed annual cost for the duration of the three year contract with a description of what is included. Any potential additional charges should be referenced.
Lot Information
Lot 1
Options: It may be possible that additional audits (beyond those specified) could be commissioned within the three year period if risk analysis indicated it would be prudent to do so.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-0589f4
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/049570-2025
- Current Stage
- Tender
- All Stages
- Tender
Procurement Classification
- Notice Type
- UK4 - Tender Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Open
- Procurement Method Details
- Below threshold - open competition
- Tender Suitability
- SME
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
79 - Business services: law, marketing, consulting, recruitment, printing and security
-
- CPV Codes
79212200 - Internal audit services
Notice Value(s)
- Tender Value
- £33,000 Under £100K
- Lots Value
- £33,000 Under £100K
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 18 Aug 20256 months ago
- Submission Deadline
- 29 Sep 2025Expired
- Future Notice Date
- Not specified
- Award Date
- Not specified
- Contract Period
- 1 Jan 2026 - 31 Dec 2028 3-4 years
- Recurrence
- Not specified
Notice Status
- Tender Status
- Active
- Lots Status
- Active
- Awards Status
- Not Specified
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- NORTHERN STAR ACADEMIES TRUST
- Contact Name
- Peter Addison-Child, Chief Operating Officer
- Contact Email
- paddisonchild@nsat.org.uk
- Contact Phone
- Not specified
Buyer Location
- Locality
- SKIPTON
- Postcode
- BD23 1QN
- Post Town
- Bradford
- Country
- England
-
- Major Region (ITL 1)
- TLE Yorkshire and The Humber
- Basic Region (ITL 2)
- TLE2 North Yorkshire
- Small Region (ITL 3)
- TLE22 North Yorkshire
- Delivery Location
- TLC North East (England), TLD North West (England), TLE Yorkshire and The Humber, TLF East Midlands (England), TLG West Midlands (England), TLH East (England), TLI London, TLJ South East (England), TLK South West (England)
-
- Local Authority
- North Yorkshire
- Electoral Ward
- Skipton North & Embsay-with-Eastby
- Westminster Constituency
- Skipton and Ripon
Further Information
Notice Documents
-
https://www.find-tender.service.gov.uk/Notice/049570-2025
18th August 2025 - Tender notice on Find a Tender -
https://www.find-tender.service.gov.uk/Notice/Attachment/A-4357
The Trust's Strategy is available at: https://www.nsat.org.uk/our-trust/our-strategy The Trust's Board Assurance Framework is also available on request.
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-0589f4-2025-08-18T15:28:18+01:00",
"date": "2025-08-18T15:28:18+01:00",
"ocid": "ocds-h6vhtk-0589f4",
"initiationType": "tender",
"parties": [
{
"id": "GB-COH-07553531",
"name": "NORTHERN STAR ACADEMIES TRUST",
"identifier": {
"scheme": "GB-COH",
"id": "07553531"
},
"additionalIdentifiers": [
{
"scheme": "GB-PPON",
"id": "PQNM-9476-ZWYJ"
}
],
"address": {
"streetAddress": "77 Gargrave Road",
"locality": "Skipton",
"postalCode": "BD23 1QN",
"country": "GB",
"countryName": "United Kingdom",
"region": "UKE22"
},
"contactPoint": {
"name": "Peter Addison-Child, Chief Operating Officer",
"email": "paddisonchild@nsat.org.uk"
},
"roles": [
"buyer"
],
"details": {
"url": "http://www.nsat.org.uk",
"classifications": [
{
"scheme": "UK_CA_TYPE",
"id": "publicAuthoritySubCentralGovernment",
"description": "Public authority - sub-central government"
}
]
}
}
],
"buyer": {
"id": "GB-COH-07553531",
"name": "NORTHERN STAR ACADEMIES TRUST"
},
"tender": {
"id": "IA Tender 2025",
"legalBasis": {
"id": "2023/54",
"scheme": "UKPGA",
"uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
},
"title": "Internal Audit Services",
"description": "2.1 This brief is for the provision of internal audit services to deliver third line assurance within the Trust's overall Board Assurance Framework. 2.2 The Framework assumes up to three internal audits per calendar year, organised around a five year planning cycle. The focus of internal audits will be reviewed and refined annually by Trustees, informed by the Trust's risk profile. 2.3 It is expected that: - persistent high risk areas will be subject to annual scrutiny, particularly in areas where risks are constantly evolving. It is expected that cyber security will fall into this category. This means that potential providers must be able to demonstrate competence to audit in this area, either directly or via a partner. - at least one audit each year will focus on an aspect of financial or HR management, as the areas carrying the highest ongoing risk to the Trust. - other areas will be audited on a five yearly cycle. An example plan is set out in the accompanying Board Assurance Framework. Whilst this plan provides starting assumptions for each year's scrutiny schedule, Trustees may adjust it in light of changing risk profiles. In some circumstances, this could mean combining the audit time available to conduct (say) one deeper audit into a particular business area rather than two short audits in different areas. For reasons of budget and practicality, it is expected that proposed annual cyber security audits will focus on specific areas of cyber risk such as: patch/vulnerability management; access controls; incident management planning and response; resilience planning; staff training and testing. 2.4 Providers will be expected to: - work with the Chief Operating Officer to produce an annual audit schedule for approval by Trustees in December of each year. (The audit period for each year will be 1 Jan - 31 Dec) - produce written scope of works for each intended audit and work with the NSAT business lead for relevant areas to request and gather the audit material needed (including arranging any meetings/visits where relevant). - produce written reports for each audit undertaken and the annual scrutiny summary report for the Trust's Annual Report and Accounts. - attend the Audit & Risk Committee at least annually to report directly to Trustees on recent audit reports. These dates will be booked at the start of each year. 2.5 The overall approach will be informed by the Trust's Risk Management Policy (attached to this brief). The Trust maintains its risk register via the \"Every\" online system. The Trust will take a risk-based approach to setting the scope for each audit. 2.6 On a day to day basis, internal auditors will work with the Trust's Chief Operating Officer and/or Chief Finance Officer to facilitate audit processes. Audit reports will be to Trustees (and the Chair of the Audit & Risk committee in particular). 2.7 The Trust's annual budget for internal audit is PS11k (exc VAT). The contract for will be for three years (1 January 2026 - 31 December2028), cancellable with the provision of six months' notice on either side. 3. Response 3.1 Responses are sought from potential partners to this brief. Written responses should include: - details of experience of undertaking internal audit/scrutiny in general, with reference to any experience in the academy sector in particular. - an outline of proposed audit methodologies. - the experience and/or qualifications of lead personnel who may be undertaking audits (including how specialist expertise will be secured to meet the range of audit requirements in the Trust's likely internal audit cycle). - examples of reporting format, including the form of recommendation. - any proposals for tracking and closing recommendations from audits. - names and contact details of two client referees able to provide information about their experience of working with the provider. 3.2 Responses should provide a fixed annual cost for the duration of the three year contract with a description of what is included. Any potential additional charges should be referenced.",
"status": "active",
"items": [
{
"id": "1",
"additionalClassifications": [
{
"scheme": "CPV",
"id": "79212200",
"description": "Internal audit services"
}
],
"deliveryAddresses": [
{
"region": "UKC",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKD",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKE",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKF",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKG",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKH",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKI",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKJ",
"country": "GB",
"countryName": "United Kingdom"
},
{
"region": "UKK",
"country": "GB",
"countryName": "United Kingdom"
}
],
"relatedLot": "1"
}
],
"value": {
"amountGross": 39600,
"amount": 33000,
"currency": "GBP"
},
"procurementMethod": "open",
"procurementMethodDetails": "Below threshold - open competition",
"mainProcurementCategory": "services",
"aboveThreshold": false,
"submissionMethodDetails": "Details for submission will be posted at www.nsat.org.uk/internalaudit [Responses should be send by email to paddisonchild@nsat.org.uk]",
"submissionTerms": {
"electronicSubmissionPolicy": "allowed"
},
"tenderPeriod": {
"endDate": "2025-09-29T10:00:00+01:00"
},
"enquiryPeriod": {
"endDate": "2025-09-12T17:00:00+01:00"
},
"otherRequirements": {
"reservedParticipationLocation": {
"gazetteer": {
"scheme": "GB-ONS",
"identifiers": [
"K02000001"
]
}
}
},
"lots": [
{
"id": "1",
"status": "active",
"value": {
"amountGross": 39600,
"amount": 33000,
"currency": "GBP"
},
"suitability": {
"sme": true
},
"contractPeriod": {
"startDate": "2026-01-01T00:00:00Z",
"endDate": "2028-12-31T23:59:59Z"
},
"hasOptions": true,
"options": {
"description": "It may be possible that additional audits (beyond those specified) could be commissioned within the three year period if risk analysis indicated it would be prudent to do so."
},
"awardCriteria": {
"description": "Responses will be considered on the information contained within or obtained by the Trust as a direct result of this tender process. Evaluation will be based on: - relevance of the proposed audit methodology and delivery model to the Trust's context; - the skills and experience of the key personnel delivering the audit programme; - the presentation; and - overall value for money."
}
}
],
"documents": [
{
"id": "A-4357",
"documentType": "biddingDocuments",
"description": "The Trust's Strategy is available at: https://www.nsat.org.uk/our-trust/our-strategy The Trust's Board Assurance Framework is also available on request.",
"url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-4357",
"format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
},
{
"id": "049570-2025",
"documentType": "tenderNotice",
"noticeType": "UK4",
"description": "Tender notice on Find a Tender",
"url": "https://www.find-tender.service.gov.uk/Notice/049570-2025",
"datePublished": "2025-08-18T15:28:18+01:00",
"format": "text/html"
}
]
},
"language": "en"
}