Tender

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

PCI QSA pro 2026

Glasgow City Council

This public procurement record has 1 release in its history.

Tender

15 Apr 2026 at 01:00

OJEU - F2 - Contract Notice
Summary of the contracting process

Glasgow City Council has initiated a procurement process seeking a supplier to validate compliance with the Payment Card Industry Data Security Standard (PCI DSS). This tender, titled "PCI QSA Pro 2026," falls under the general public services category and targets businesses in the services sector. The procurement employs an open procedure method, with electronic submissions to be made through the Public Contracts Scotland Portal (PCS-T). Bids are to be submitted by 19 May 2026, with contract awards commencing on the same day. The contract duration spans from 11 June 2026 to 11 June 2029, with the possibility of extension for up to 24 additional months. The primary focus is on ensuring the protection of cardholder data and obtaining relevant compliance documentation.

The tender presents a significant opportunity for businesses specialising in data security and compliance services. Companies with experience in conducting onsite assessments, technical testing, and providing ongoing support for PCI compliance are well-suited to compete. The contract requires a Qualified Security Assessor capable of conducting readiness reviews, technical testing, and issuing necessary reports such as Attestation of Compliance (AoC) and Report on Compliance (RoC). With an estimated value of £450,000, this tender offers promising growth potential for companies able to meet the rigorous technical and financial criteria set forth by the council. Businesses demonstrating past success in similar projects are encouraged to bid, providing a detailed methodology regarding community benefits as specified in the tender documentation.

How relevant is this notice?

Notice Information

Notice Title

PCI QSA pro 2026

Notice Description

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds. This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

Lot Information

Lot 1

The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council's compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of: i. Scoping and Readiness Review ii. Onsite Assessment Activities iii. Technical Testing iv. Documentation and Reporting v. ASV Scanning vi. Ongoing Support (Ad-hoc support) For further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST. Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Renewal: Option to extend for periods of up to an additional 24 months (in total) at the sole discretion of Glasgow City Council.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-r6ebe6-0000827084
Publication Source
Public Contracts Scotland
Latest Notice
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553880
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
OJEU - F2 - Contract Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

79 - Business services: law, marketing, consulting, recruitment, printing and security

CPV Codes

72220000 - Systems and technical consultancy services

72222300 - Information technology services

79411000 - General management consultancy services

Notice Value(s)

Tender Value
£450,000 £100K-£500K
Lots Value
£450,000 £100K-£500K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
15 Apr 20264 months ago
Submission Deadline
19 May 2026Expired
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
11 Jun 2026 - 11 Jun 2029 3-4 years
Recurrence
This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards.

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Glasgow City Council
Additional Buyers

Glasgow Life (Culture & Sport Glasgow)

Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
GLASGOW
Postcode
G2 1DU
Postcode Area
Glasgow
Country
Scotland
Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM3 West Central Scotland
Small Region (ITL 3)
TLM32 Glasgow City
Delivery Location
TLM82 Glasgow City
Local Authority
Glasgow City
Electoral Ward
Anderston/City/Yorkhill
Westminster Constituency
Glasgow North East

Further Information

Notice Documents

  • https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553880
    PCI QSA pro 2026 - Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds. This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...