Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

P-3352 Cyber Security and PCI DSS Auditing Services

Translink

This public procurement record has 3 releases in its history.

Award

02 Sep 2026 at 15:59

UK7 - Contract Details Notice
Award

13 Aug 2026 at 14:10

UK6 - Contract Award Notice
Tender

31 Mar 2026 at 16:18

UK4 - Tender Notice
Summary of the contracting process

Translink procured cyber security and PCI DSS auditing services for its corporate network, systems and cardholder data environment (CDE). The requirement covers ongoing testing and auditing to keep network security aligned with changing industry best practice, and to maintain the CDE in line with PCI DSS for electronic security payments. It is a public undertaking based in Belfast, with delivery in Northern Ireland. The procurement was divided into two service areas: cyber security and PCI auditing. This is relevant to providers of cyber security testing, network and systems assurance, computer audit consultancy, and PCI DSS compliance assessment. It suits businesses able to provide recurring security testing and independent audit services for transport-related corporate and payment environments.

The procurement is complete and both lots were awarded through an open procedure. Lot 1, Cyber Security, was awarded to Salus Digital Security Limited on 13 August 2026 for £350,000 net (£420,000 gross). The contract was signed on 26 August 2026 and runs from 1 September 2026 to 31 August 2029, with two possible one-year extensions to 31 August 2031. Lot 2, PCI, was awarded to NCC Group Security Services Limited on 13 August 2026 for £210,000 net (£252,000 gross). It was signed on 31 August 2026 and has the same contract period and extension arrangement. Both lots were evaluated on quality at 70% and cost at 30%.

This procurement demonstrates sustained demand from Translink for specialist cyber security assurance and payment-environment compliance work. A credible future competitor would need to test corporate networks and systems on an ongoing basis, assess changing security risks, and provide audit evidence aligned with recognised industry practice. For the PCI requirement, suppliers would need practical expertise in securing cardholder data environments and assessing compliance with PCI DSS, including the security of electronic payments. The two awards show that Translink may use separate specialists for general cyber security and PCI auditing. Competition was substantial: 13 bids were received for the cyber security lot, with nine reaching the final stage, while eight bids were received for PCI, with seven reaching the final stage. This is a market for established specialist assurance providers.

How relevant is this notice?

Notice Information

Notice Title

P-3352 Cyber Security and PCI DSS Auditing Services

Notice Description

Translink wishes to ensure that its corporate network and all systems are secured in line with industry best practice. It is recognised that network security requirements are constantly changing and that testing should be carried out on an ongoing basis. Translink wishes to ensure that its CDE is secured in line with PCI DSS. It is recognised that electronic security payments are constantly changing and that testing should be carried out on an ongoing basis.

Lot Information

Lot 1 - Cyber Security

Lot 1 - Cyber Security Translink wishes to ensure that its corporate network and all systems are secured in line with industry best practice. It is recognised that network security requirements are constantly changing and that testing should be carried out on an ongoing basis.

Renewal: 2 possible extension periods of 1 year available.

Lot 2 - PCI

Lot 2 - PCI Translink wishes to ensure that its CDE is secured in line with PCI DSS. It is recognised that electronic security payments are constantly changing and that testing should be carried out on an ongoing basis.

Renewal: 2 possible extension periods of 1 year available.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-0679df
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/083171-2026
Current Stage
Award
All Stages
Tender, Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
Large, SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72150000 - Computer audit consultancy and hardware consultancy services

72800000 - Computer audit and testing services

72810000 - Computer audit services

Notice Value(s)

Tender Value
£560,000 £500K-£1M
Lots Value
£560,000 £500K-£1M
Awards Value
£560,000 £500K-£1M
Contracts Value
£560,000 £500K-£1M

Notice Dates

Publication Date
2 Sep 20261 months ago
Submission Deadline
30 Apr 2026Expired
Future Notice Date
Not specified
Award Date
13 Aug 20261 months ago
Contract Period
1 Sep 2026 - 31 Aug 2029 3-4 years
Recurrence
2031-02-03

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Translink
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BELFAST
Postcode
BT2 7LX
Postcode Area
Northern Ireland
Country
Northern Ireland
Major Region (ITL 1)
TLN Northern Ireland
Basic Region (ITL 2)
TLN0 Northern Ireland
Small Region (ITL 3)
TLN06 Belfast
Delivery Location
TLN Northern Ireland
Local Authority
Belfast
Electoral Ward
Central
Westminster Constituency
Belfast South and Mid Down

Supplier Information

Number of Suppliers
2
Supplier Names

Salus Digital Security Limited

NCC Group Security Services Limited

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...