This public procurement record has 1 release in its history.

Tender

18 Sep 2026 at 01:00

Summary of the contracting process

Cairn Housing Association is seeking a cybersecurity partner to deliver comprehensive penetration testing and security assessment services. The work covers the association’s digital infrastructure, applications and operational processes, supporting its information security programme and regulatory obligations. The scope includes testing and assessment against requirements associated with GDPR, ISO 27001, PCI DSS, the Network and Information Systems Regulations (NIS) and Cyber Essentials Plus. This is a specialist cybersecurity services requirement, classified under CPV 72267100. Cairn Housing Association is based in Edinburgh and is the organisation procuring and using the services. The requirement is presented as a single package, with delivery arrangements and detailed activities set out in the tender documents.

The procurement has reached tender: Cairn Housing Association invited offers through an open procedure, with responses submitted electronically in English. The tender deadline is 16 October 2026 at 12:00 UTC, with bid opening scheduled for 12:30 UTC the same day. The contract is planned to run for 1,080 days, and bids must remain valid for 90 days after submission. The procurement is covered by the Government Procurement Agreement. One package is offered, variants are not allowed and there is no stated renewal or extension option. Evaluation and suitability requirements are set out in the tender documents. Bidders must provide the names and qualifications of staff proposed for the work. Electronic payment and ordering will be used, and electronic invoicing is allowed.

This opportunity suits established penetration-testing and cybersecurity consultancies able to assess infrastructure, applications and operational processes as one engagement. Strong candidates will need demonstrable experience of security testing, structured risk assessment and producing evidence suitable for an organisation operating under data-protection, payment-security, network-security and information-security standards. The requirement is well suited to suppliers with qualified, appropriately experienced consultants whose names and qualifications can be provided at tender stage, and with the capacity to maintain delivery over a substantial multi-year service period. Firms should be comfortable working within formal public-sector tender requirements, submitting a complete electronic response in English and explaining how their technical approach meets the detailed specification and quality requirements.

How relevant is this notice?

Notice Information

Notice Title

Penetration Testing and Cybersecurity Assessment

Notice Description

Services of a cybersecurity partner to conduct comprehensive penetration testing and security assessment engagement across Cairn Housing Association's digital infrastructure, applications and operational processes, in support of our information security programme and its obligations under regulatory frameworks including GDPR, ISO27001, PCI DSS, NIS and Cyber Essentials Plus

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-r6ebe6-0000843381
Publication Source
Public Contracts Scotland
Latest Notice
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=SEP564781
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
PCS Notice - Website Contract Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72267100 - Maintenance of information technology software

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
18 Sep 20262 weeks ago
Submission Deadline
16 Oct 20262 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Cairn Housing Association
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
EDINBURGH
Postcode
EH7 4GH
Postcode Area
Edinburgh
Country
Scotland

Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM1 East Central Scotland
Small Region (ITL 3)
TLM13 City of Edinburgh
Delivery Location
TLM75 City of Edinburgh

Local Authority
City of Edinburgh
Electoral Ward
Leith Walk
Westminster Constituency
Edinburgh North and Leith

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...