SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement

SCOTTISH PRISON SERVICE

This public procurement record has 1 release in its history.

Tender

18 Jun 2026 at 12:48

Summary of the contracting process

The Scottish Prison Service is currently in the tender stage for the "SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement" project. This procurement falls under the IT services category, including consulting, software development, Internet and support, with services specifically targeting IT Health Check Services and Cyber Essentials accreditation. The contract will be awarded for a period of 1080 days, after which there is the possibility of a 12-month renewal. The procurement process operates under an open procedure and accommodates up to three suppliers. Key dates include the tender period ending on 22nd July 2026, with the award period commencing on the same day. Submissions should be made electronically through the designated portal. The project location is within Scotland, UKM region.

This tender presents attractive business growth opportunities for IT service providers specialising in cybersecurity, penetration testing, and vulnerability scanning. Companies that excel in delivering comprehensive IT health checks and those capable of achieving or maintaining Cyber Essentials+ accreditation stand a strong chance of success. By participating, businesses can secure a place in a framework agreement with the Scottish Prison Service, enhancing their portfolio and establishing valuable government affiliations. The framework allows for regular IT Health Checks, providing ongoing contractual opportunities with one of the UK’s prominent national agencies, ensuring sustained business growth and sector presence.

How relevant is this notice?

Notice Title

SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement

Notice Description

The SPS requires Suppliers to deliver on-site IT Health Check Services, including internal and external penetration testing, vulnerability scanning, and security assessments across its networks, systems and data centres, with clear reporting and remediation guidance. The Framework Agreement may also be used for related ad-hoc IT security work. This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation.

Lot Information

Lot 1

The SPS shall commence this procurement process in good faith and with the intention of awarding a contract. Following publication of the Contract Notice, an Invitation to Tender (ITT) will be published by SPS and will be made available to bidders on Public Contract Scotland - Tender (PCS-T). Tender responses will then be evaluated by the SPS in accordance with the ITT.

Renewal: 12 months

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06b81b
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/057583-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
Tender Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
18 Jun 20266 days ago
Submission Deadline
22 Jul 20264 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
SCOTTISH PRISON SERVICE
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
EDINBURGH
Postcode
EH12 9DJ
Post Town
Edinburgh
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM1 East Central Scotland
Small Region (ITL 3)
TLM13 City of Edinburgh
Delivery Location
TLM Scotland

Local Authority
City of Edinburgh
Electoral Ward
Drum Brae/Gyle
Westminster Constituency
Edinburgh West

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-06b81b-2026-06-18T13:48:04+01:00",
    "date": "2026-06-18T13:48:04+01:00",
    "ocid": "ocds-h6vhtk-06b81b",
    "description": "The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 32109. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343 (SC Ref:834888)",
    "initiationType": "tender",
    "tender": {
        "id": "SPS-02269",
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "title": "SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement",
        "status": "active",
        "classification": {
            "scheme": "CPV",
            "id": "72000000",
            "description": "IT services: consulting, software development, Internet and support"
        },
        "mainProcurementCategory": "services",
        "description": "The SPS requires Suppliers to deliver on-site IT Health Check Services, including internal and external penetration testing, vulnerability scanning, and security assessments across its networks, systems and data centres, with clear reporting and remediation guidance. The Framework Agreement may also be used for related ad-hoc IT security work. This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation.",
        "lots": [
            {
                "id": "1",
                "description": "The SPS shall commence this procurement process in good faith and with the intention of awarding a contract. Following publication of the Contract Notice, an Invitation to Tender (ITT) will be published by SPS and will be made available to bidders on Public Contract Scotland - Tender (PCS-T). Tender responses will then be evaluated by the SPS in accordance with the ITT.",
                "awardCriteria": {
                    "criteria": [
                        {
                            "name": "Technical",
                            "type": "quality",
                            "description": "60"
                        },
                        {
                            "type": "price",
                            "description": "40"
                        }
                    ]
                },
                "contractPeriod": {
                    "durationInDays": 1080
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "12 months"
                },
                "submissionTerms": {
                    "variantPolicy": "notAllowed"
                },
                "hasOptions": false,
                "status": "active"
            }
        ],
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72000000",
                        "description": "IT services: consulting, software development, Internet and support"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "submissionMethod": [
            "electronicSubmission"
        ],
        "submissionMethodDetails": "https://www.publictendersscotland.publiccontractsscotland.gov.uk",
        "communication": {
            "atypicalToolUrl": "https://www.publictendersscotland.publiccontractsscotland.gov.uk"
        },
        "documents": [
            {
                "id": "technical",
                "documentType": "technicalSelectionCriteria"
            }
        ],
        "procurementMethod": "open",
        "procurementMethodDetails": "Open procedure",
        "techniques": {
            "hasFrameworkAgreement": true,
            "frameworkAgreement": {
                "maximumParticipants": 3
            }
        },
        "coveredBy": [
            "GPA"
        ],
        "tenderPeriod": {
            "endDate": "2026-07-22T12:00:00+01:00"
        },
        "submissionTerms": {
            "languages": [
                "en"
            ],
            "bidValidityPeriod": {
                "endDate": "2026-09-21T23:59:59+01:00"
            }
        },
        "awardPeriod": {
            "startDate": "2026-07-22T12:00:00+01:00"
        },
        "bidOpening": {
            "date": "2026-07-22T12:00:00+01:00"
        },
        "hasRecurrence": false
    },
    "parties": [
        {
            "id": "GB-FTS-68977",
            "name": "Scottish Prison Service",
            "identifier": {
                "legalName": "Scottish Prison Service"
            },
            "address": {
                "streetAddress": "One Lochside, 1 Lochside Avenue",
                "locality": "Edinburgh",
                "region": "UKM75",
                "postalCode": "EH12 9DJ",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "name": "Tegan Gregory",
                "telephone": "+44 1313303790",
                "email": "tegan.gregory@prisons.gov.scot",
                "url": "https://www.publictendersscotland.publiccontractsscotland.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.sps.gov.uk",
                "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00384",
                "classifications": [
                    {
                        "id": "NATIONAL_AGENCY",
                        "scheme": "TED_CA_TYPE",
                        "description": "National or federal agency/office"
                    },
                    {
                        "id": "03",
                        "scheme": "COFOG",
                        "description": "Public order and safety"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-404",
            "name": "Edinburgh Sheriff Court",
            "identifier": {
                "legalName": "Edinburgh Sheriff Court"
            },
            "address": {
                "streetAddress": "27 Chambers Street",
                "locality": "Edinburgh",
                "postalCode": "EH1 1LB",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "id": "GB-FTS-68977",
        "name": "Scottish Prison Service"
    },
    "links": [
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000834888"
        }
    ],
    "language": "en"
}