This public procurement record has 2 releases in its history.

Award

06 Aug 2025 at 01:00

Tender

02 Jul 2024 at 01:00

Summary of the contracting process

The City of Edinburgh Council has successfully completed the procurement process for its "Cyber Security Assurance Services Framework," aimed at enhancing its ability to procure secure digital services. This procurement falls under the services category, with a focus on IT and digital security, designated by the CPV code 72000000. The process followed a restricted procedure, which is a selective procurement method. The tender process has moved through the award stage as of 6th August 2025, with several contracts now active across different lots, each valued at GBP 750,000. The awarded contracts cover essential services such as penetration testing, digital forensics, and security audits, among others, and will be delivered primarily within the Edinburgh area, identified by the region code UKM75.

This framework provides substantial growth opportunities for businesses specialising in cybersecurity, particularly SMEs and large enterprises capable of offering penetration testing, threat intelligence, and incident response services. Given the need for high-level digital security assessments and consultations, the framework is ideal for firms with accreditations like CREST or CHECK, and those who are Microsoft or AWS partners. Such businesses can expand their service offerings and client base while supporting the public sector’s digital security needs. Furthermore, with ongoing opportunities for renewal and additional framework lots, this tender supports sustained engagement with the City of Edinburgh Council, promising recurring business and collaboration over an extended period.

How relevant is this notice?

Notice Title

Cyber Security Assurance Services Framework

Notice Description

The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

Lot Information

Threat Intelligence

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Threat Intelligence

Renewal: Possible extension up to 24 months.

Vulnerability Assessments

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Vulnerability Assessments

Renewal: Possible extension up to 24 months.

Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and - Security assurance and reporting of proposed new technologies and services. Suppliers must also provide: - Advice and consultation on proposed and existing cloud developments, - Advice and consultation on proposed and existing cloud infrastructure configurations, and - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.

Renewal: Possible extension up to 24 months.

Incident Response, Digital Forensics, Data Breach Assessment & Recovery

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Incident Response, - Digital Forensics, - Data Breach Assessment and Recovery.

Renewal: Possible extension up to 24 months.

Security Audit - PCI, Security Architecture/Design Review, Compliance & Regulatory Services.

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Security Audit - PCI, - Security Architecture/Design Review, - Compliance and Regulatory Services.

Renewal: Possible extension up to 24 months.

Data & Hardware Sanitisation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Data and Hardware Sanitisation

Renewal: Possible extension up to 24 months.

Publication & Lifecycle

Open Contracting ID
ocds-r6ebe6-0000767446
Publication Source
Public Contracts Scotland
Latest Notice
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445
Current Stage
Award
All Stages
Tender, Award

Procurement Classification

Notice Type
OJEU - F3 - Contract Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Restricted procedure
Tender Suitability
Not specified
Awardee Scale
Large, SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£750,000 £500K-£1M
Lots Value
£750,000 £500K-£1M
Awards Value
Not specified
Contracts Value
£750,000 £500K-£1M

Notice Dates

Publication Date
6 Aug 20251 years ago
Submission Deadline
31 Jul 2024Expired
Future Notice Date
Not specified
Award Date
6 Aug 20251 years ago
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Not Specified
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
City of Edinburgh Council
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
EDINBURGH
Postcode
EH8 8BG
Postcode Area
Edinburgh
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM1 East Central Scotland
Small Region (ITL 3)
TLM13 City of Edinburgh
Delivery Location
TLM75 City of Edinburgh

Local Authority
City of Edinburgh
Electoral Ward
City Centre
Westminster Constituency
Edinburgh East and Musselburgh

Supplier Information

Number of Suppliers
4
Supplier Names

Entserv UK Ltd

NCC Group Security Services Limited

Redcentric Solutions Limited

Trustmarque Solutions Ltd

Further Information

Notice Documents

  • https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUL508803
    Cyber Security Assurance Services Framework - The City of Edinburgh Council is focused on establishing a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
  • https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445
    Cyber Security Assurance Services Framework - The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...