This public procurement record has 1 release in its history.

Summary of the contracting process

Disclosure Scotland bought services to audit, certify and provide ongoing surveillance for its ISO 27001:2022 Information Security Management System. The requirement covers information-security management-system assessment and certification, followed by continuing surveillance activity to maintain the certification. This is a specialist information-security assurance and certification service rather than general IT support or software supply. Delivery is for Disclosure Scotland in Glasgow. The contracting authority is Disclosure Scotland, which also acts as a central purchasing body. The requirement falls within the public-service audit and certification market, including organisations able to assess information-security management systems against ISO 27001:2022 and provide the associated certification and surveillance services.

The procurement is complete and has been awarded through an open procedure. It was a call-off under the Audit and Assurance Services Two framework, Lot 4. BSI Assurance UK Ltd was selected for the requirement, and the contract is active. The contract was signed on 14 July 2026 and is valued at £51,752. One bid was recorded, submitted electronically by a non-EU supplier; no bids came from SMEs. The award covered the single requirement for ISO 27001:2022 information-security management-system audit, certification and ongoing surveillance services. The available outcome records identify the selected supplier and contract value, but do not provide a separate award date or contract duration.

This award demonstrates a defined demand from Disclosure Scotland for external ISO 27001:2022 information-security management-system audit, certification and ongoing surveillance. Suppliers competing for comparable work with this buyer would need a service capable of covering the full assurance cycle: auditing the management system, delivering certification, and carrying out continuing surveillance. The requirement is suited to established information-security assurance and certification providers with the operational capability to undertake formal management-system assessments and maintain surveillance activity over the life of the relationship. The recorded competition was limited to one bid and the selected supplier was a large organisation, indicating a market opportunity suited to providers able to deliver the complete specialist service at organisational scale.

How relevant is this notice?

Notice Information

Notice Title

ISO27001 Accreditation

Notice Description

Contract for the delivery of ISO27001: 2022 Information Security Management System (ISMS) audit, certification and ongoing surveillance services.

Lot Information

Lot 1

Contract for the delivery of ISO27001: 2022 Information Security Management System (ISMS) audit, certification and ongoing surveillance services.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-r6ebe6-0000838125
Publication Source
Public Contracts Scotland
Latest Notice
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG561465
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
PCS Notice - Website Contract Award Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

79 - Business services: law, marketing, consulting, recruitment, printing and security


CPV Codes

79132000 - Certification services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£51,752 Under £100K

Notice Dates

Publication Date
3 Aug 20262 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Not Specified
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Disclosure Scotland
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
GLASGOW
Postcode
G51 1DZ
Postcode Area
Glasgow
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM3 West Central Scotland
Small Region (ITL 3)
TLM32 Glasgow City
Delivery Location
Not specified

Local Authority
Glasgow City
Electoral Ward
Govan
Westminster Constituency
Glasgow South West

Supplier Information

Number of Suppliers
1
Supplier Name

BSI Assurance UK Limited

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...