Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Cyber Assessment Framework Independent Assurance

Social Security Scotland

This public procurement record has 1 release in its history.

Award

12 Oct 2026 at 01:00

PCS Notice - Website Contract Award Notice
Summary of the contracting process

Social Security Scotland procured independent cyber resilience audits of its digital systems and architecture, carried out in line with the Scottish Government’s GovAssure process. This is a specialist cyber security assurance service: the work involves assessing the agency’s systems and architecture rather than supplying general IT support. The requirement was managed by Social Security Scotland, whose base is in Dundee, and delivery is identified as being in Scotland. It was let as one requirement. Community benefits form part of the contract; the expected benefits depend on the value and volume of assessments requested.

The procurement is complete and has been awarded to Deloitte LLP. The contract is active and was signed on 1 October 2026, with a contract value of £150,000. The award date and contract period are not stated. The competition used a restricted procedure under the Cyber Security Services 3 framework. There was one lot, covering audits of the agency’s digital systems and architecture, with two optional one-year extensions. Four bids were received. The published outcome does not give the evaluation criteria or the awarded contract duration, so the £150,000 is the stated contract value rather than a value for an expressly defined term.

For suppliers competing for a future requirement of this kind, credibility rests on being able to deliver independent cyber resilience audits against the GovAssure process and assess both digital systems and architecture. This award shows that Social Security Scotland buys specialist assurance through a restricted competition using the Cyber Security Services 3 framework, rather than sourcing general cyber support through an unrestricted tender. A capable competitor would need suitable cyber security assessment expertise, the capacity to undertake audits of a public agency’s technology environment, and the ability to provide assurance independently. The requirement was substantial enough to attract four bids and included community benefits linked to the volume and value of assessments. Suppliers able to combine specialist audit capability with delivery of those benefits would be well placed when this buyer next needs comparable assurance.

How relevant is this notice?

Notice Information

Notice Title

Cyber Assessment Framework Independent Assurance

Notice Description

The provision of cyber resilience audits in-line with the Gov Assure process.

Lot Information

Lot 1

Provision of cyber resilience audits of the agency's digital systems and architecture in-line with the Gov Assure process.

Options: Two additional optional extension periods of one year each.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-r6ebe6-0000845488
Publication Source
Public Contracts Scotland
Latest Notice
https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT566504
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
PCS Notice - Website Contract Award Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Restricted procedure
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72225000 - System quality assurance assessment and review services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£150,000 £100K-£500K

Notice Dates

Publication Date
12 Oct 20261 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Not Specified
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Social Security Scotland
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
DUNDEE
Postcode
DD1 4BF
Postcode Area
Dundee
Country
Scotland
Major Region (ITL 1)
TLM Scotland
Basic Region (ITL 2)
TLM0 Eastern Scotland
Small Region (ITL 3)
TLM03 Angus and Dundee City
Delivery Location
TLM Scotland
Local Authority
Dundee City
Electoral Ward
West End
Westminster Constituency
Dundee Central

Supplier Information

Number of Suppliers
1
Supplier Name

Deloitte LLP

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...