Award

ICT Healthchecks (Interim)

RENFREWSHIRE COUNCIL

This public procurement record has 1 release in its history.

Summary of the contracting process

Renfrewshire Council has successfully awarded a contract to Quorum Cyber Security Limited for the provision of ICT Healthchecks, an interim service essential for ensuring the council's cybersecurity standards. This contract, which falls under the general public services category, spans the council's on-premise and hosted digital estate. It includes rigorous security testing to meet internal assurance protocols and comply with external regulations. Located in Paisley, within the UKM83 region, the contract's procurement method was limited, undertaking an award procedure without prior publication due to technical reasons and the absence of competition. The contract was signed on 27 May 2025 and involves services valued at £130,603.

This procurement opportunity allows businesses specialising in cybersecurity consultancy, particularly those with expertise in IT health checks and vulnerability management, to explore significant growth prospects. Organisations that can navigate complex cybersecurity demands and have experience in PSN and PCI assurance programmes are well-positioned to engage in similar tenders in the future. The focus on technical expertise and continuity of services creates a strategic fit for established IT security firms or specialised SMEs looking to expand their portfolio in the public sector.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Notice Title

ICT Healthchecks (Interim)

Notice Description

The Council required the continuation of a contract to carry out regular, independent IT Health Checks on its applications and to carry out a scheduled program of rigorous security testing - spanning the on premise and hosted digital estate across the Council - for internal assurance that cyber security standards are being met and to provide evidence for external compliance regimes.

Lot Information

Lot 1

A negotiated procedure was carried out under Regulation 6 of the Public Procurement (Scotland) Regulations 2016 which states: 6.--(1) A contracting authority may award a public contract without seeking offers in relation to the proposed contract-- (b)where the works, supplies or services can be supplied only by a particular economic operator for any of the following reasons-- (ii)competition is absent for technical reasons; but only, in the case of paragraphs (ii) and (iii), where no reasonable alternative or substitute exists and the absence of

Procurement Information

The Council requires the continuation of this contract for a period of 1 year to allow time to build together requirements, go out to tender and include a removal and onboarding phase should a new supplier be awarded the contract. Due to the complex and critical nature of this requirement, the Council require to remain in a contract with the current supplier for a period of 1 year to allow time to develop tender documents, go out to tender and potentially remove all technical solutions of the current supplier and migrate to a new supplier should another be successful. Additionally, the Council requires scanning to commence for its PSN assurance program in August 2024 which also has a reliance on the aforementioned ongoing vulnerability management element of this contract. It is preferable that the supplier already has knowledge across vulnerability management to more effectively deliver PSN elements of the contract. Impending ICT testing required to take place this year to ensure the Council remains compliant covers both PSN and PCI assurance programs.

Publication & Lifecycle

Open Contracting ID
ocds-r6ebe6-0000803143
Publication Source
Public Contracts Scotland
Latest Notice
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUL533671
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
PCS Notice - Website Contract Award Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Award procedure without prior publication of a call for competition
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

72254000 - Software testing

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£130,603 £100K-£500K

Notice Dates

Publication Date
1 Jul 20257 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
27 May 20259 months ago
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Not Specified
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
RENFREWSHIRE COUNCIL
Contact Name
Kevin Milliken
Contact Email
kevin.milliken@renfrewshire.gov.uk
Contact Phone
+44 3003000300

Buyer Location

Locality
PAISLEY
Postcode
PA1 1JB
Post Town
Paisley
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM3 West Central Scotland
Small Region (ITL 3)
TLM33 Inverclyde, East Renfrewshire, and Renfrewshire
Delivery Location
TLM83 Inverclyde, East Renfrewshire, and Renfrewshire

Local Authority
Renfrewshire
Electoral Ward
Paisley East and Central
Westminster Constituency
Paisley and Renfrewshire South

Supplier Information

Number of Suppliers
1
Supplier Name

QUORUM CYBER SECURITY

Further Information

Notice Documents

  • https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUL533671
    ICT Healthchecks (Interim) - The Council required the continuation of a contract to carry out regular, independent IT Health Checks on its applications and to carry out a scheduled program of rigorous security testing - spanning the on premise and hosted digital estate across the Council - for internal assurance that cyber security standards are being met and to provide evidence for external compliance regimes.

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-r6ebe6-0000803143-2025-07-01T00:00:00Z",
    "date": "2025-07-01T00:00:00Z",
    "ocid": "ocds-r6ebe6-0000803143",
    "initiationType": "tender",
    "parties": [
        {
            "id": "org-47",
            "name": "Renfrewshire Council",
            "identifier": {
                "legalName": "Renfrewshire Council"
            },
            "address": {
                "streetAddress": "Renfrewshire House, Cotton Street",
                "locality": "Paisley",
                "region": "UKM83",
                "postalCode": "PA1 1JB"
            },
            "contactPoint": {
                "name": "Kevin Milliken",
                "email": "kevin.milliken@renfrewshire.gov.uk",
                "telephone": "+44 3003000300",
                "url": "http://"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "Regional or local authority",
                        "scheme": "TED_CA_TYPE"
                    },
                    {
                        "id": "01",
                        "description": "General public services",
                        "scheme": "COFOG"
                    }
                ],
                "url": "http://www.renfrewshire.gov.uk"
            }
        },
        {
            "id": "org-513",
            "name": "Quorum Cyber Security Limited",
            "identifier": {
                "legalName": "Quorum Cyber Security Limited"
            },
            "address": {
                "streetAddress": "Suite 2, Ground Floor, Orchard Brae House, 30 Queensferry Road",
                "locality": "Edinburgh",
                "region": "UKM75",
                "postalCode": "EH4 2HS"
            },
            "contactPoint": {
                "email": "rachel.davison@renfrewshire.gov.uk",
                "telephone": "+44 3334440041"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "sme",
                "url": "http://"
            }
        },
        {
            "id": "org-50",
            "name": "Court of Session",
            "identifier": {
                "legalName": "Court of Session"
            },
            "address": {
                "streetAddress": "Parliament Square",
                "locality": "Edinburgh",
                "postalCode": "EH1 1RQ"
            },
            "contactPoint": {
                "url": "http://"
            },
            "roles": [
                "reviewContactPoint",
                "reviewBody",
                "mediationBody"
            ]
        }
    ],
    "buyer": {
        "name": "Renfrewshire Council",
        "id": "org-47"
    },
    "tender": {
        "id": "RC-CPU-25-013",
        "title": "ICT Healthchecks (Interim)",
        "description": "The Council required the continuation of a contract to carry out regular, independent IT Health Checks on its applications and to carry out a scheduled program of rigorous security testing - spanning the on premise and hosted digital estate across the Council - for internal assurance that cyber security standards are being met and to provide evidence for external compliance regimes.",
        "status": "complete",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "id": "72000000",
                        "scheme": "CPV"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKM83"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "procurementMethod": "limited",
        "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
        "procurementMethodRationale": "The Council requires the continuation of this contract for a period of 1 year to allow time to build together requirements, go out to tender and include a removal and onboarding phase should a new supplier be awarded the contract. Due to the complex and critical nature of this requirement, the Council require to remain in a contract with the current supplier for a period of 1 year to allow time to develop tender documents, go out to tender and potentially remove all technical solutions of the current supplier and migrate to a new supplier should another be successful. Additionally, the Council requires scanning to commence for its PSN assurance program in August 2024 which also has a reliance on the aforementioned ongoing vulnerability management element of this contract. It is preferable that the supplier already has knowledge across vulnerability management to more effectively deliver PSN elements of the contract. Impending ICT testing required to take place this year to ensure the Council remains compliant covers both PSN and PCI assurance programs.",
        "mainProcurementCategory": "services",
        "documents": [
            {
                "id": "JUL533671",
                "documentType": "awardNotice",
                "title": "ICT Healthchecks (Interim)",
                "description": "The Council required the continuation of a contract to carry out regular, independent IT Health Checks on its applications and to carry out a scheduled program of rigorous security testing - spanning the on premise and hosted digital estate across the Council - for internal assurance that cyber security standards are being met and to provide evidence for external compliance regimes.",
                "url": "https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUL533671",
                "format": "text/html"
            }
        ],
        "lots": [
            {
                "id": "1",
                "description": "A negotiated procedure was carried out under Regulation 6 of the Public Procurement (Scotland) Regulations 2016 which states: 6.--(1) A contracting authority may award a public contract without seeking offers in relation to the proposed contract-- (b)where the works, supplies or services can be supplied only by a particular economic operator for any of the following reasons-- (ii)competition is absent for technical reasons; but only, in the case of paragraphs (ii) and (iii), where no reasonable alternative or substitute exists and the absence of",
                "status": "complete",
                "hasOptions": false
            }
        ],
        "procurementMethodRationaleClassifications": [
            {
                "id": "D_TECHNICAL",
                "description": "The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons",
                "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL"
            }
        ],
        "classification": {
            "id": "72254000",
            "scheme": "CPV"
        }
    },
    "awards": [
        {
            "id": "RC-CPU-25-013",
            "suppliers": [
                {
                    "id": "org-513",
                    "name": "Quorum Cyber Security Limited"
                }
            ],
            "relatedLots": [
                "1"
            ]
        }
    ],
    "contracts": [
        {
            "id": "RC-CPU-25-013",
            "awardID": "RC-CPU-25-013",
            "status": "active",
            "value": {
                "amount": 130603,
                "currency": "GBP"
            },
            "dateSigned": "2025-05-27T00:00:00Z"
        }
    ],
    "language": "EN",
    "description": "(SC Ref:803143)",
    "bids": {
        "statistics": [
            {
                "id": "2145",
                "measure": "bids",
                "value": 1,
                "relatedLot": "1"
            },
            {
                "id": "2146",
                "measure": "smeBids",
                "value": 1,
                "relatedLot": "1"
            },
            {
                "id": "2147",
                "measure": "foreignBidsFromEU",
                "value": 1,
                "relatedLot": "1"
            },
            {
                "id": "2148",
                "measure": "foreignBidsFromNonEU",
                "value": 0,
                "relatedLot": "1"
            },
            {
                "id": "2149",
                "measure": "electronicBids",
                "value": 1,
                "relatedLot": "1"
            }
        ]
    },
    "links": [
        {
            "rel": "canonical",
            "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000803143"
        }
    ],
    "noticetype": "PCS Notice - Website Contract Award Notice"
}