---
title: "Annual Penetration Testing for NAO"
ocid: "ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "NATIONAL AUDIT OFFICE"
published: "2025-07-04"
---

# Annual Penetration Testing for NAO

Buyer: NATIONAL AUDIT OFFICE  
Current stage: Award  
OCID: ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819.json)

## Summary

The National Audit Office (NAO), headquartered in London, has concluded the award stage for a contract titled "Annual Penetration Testing for NAO". This procurement falls under the IT services category and aims to provide independent assurance on technical security controls through various assessments, including penetration testing and cyber essentials assessments. The contract, valued at £80,856, was called off from the G-Cloud 13 Framework using a selective procurement method. The initial contract period commenced on 31st July 2023 and runs through to 30th July 2026, with potential extensions. The contract address is set within the United Kingdom.

This tender presents significant growth opportunities for SMEs specialising in IT security services, as demonstrated by PRISM INFOSEC LTD, the awarded supplier. Firms with expertise in cybersecurity and infrastructure assessments are well-suited to engage in similar frameworks, leveraging the potential for repeat contract extensions. Engaging in such contracts can enhance a business's visibility, credibility, and potential for further government contract opportunities.

## Notice

National Audit Office (NAO) has awarded a contract to the supplier for the provision of independent assurance around the effectiveness and robustness of its technical security controls, which will include, security testing based on the following models 1) Annual Penetration Testing 2) Annual Cyber Essentials Plus Assessment and 3) Annual CHECK IT Health Check. The Contract has been called off from the G-Cloud 13 Framework. The Contract Value in this Notice include VAT. The initial contract period is 1 year with the option to extend by 2 further periods of 1 year (1+1+1). The contract has been extended until July 2026 and the maximum estimated contract value is PS88,000 inclusive of VAT.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/1c715748-61b4-48a3-b587-49ce510a0158 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 4 Jul 2025 |
| Submission deadline | 17 Jul 2023 |
| Future notice date | Not specified |
| Award date | 26 Jul 2023 |
| Contract period | 30 Jul 2023 - 30 Jul 2026 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £88,000 |
| Lots value | Not specified |
| Awards value | £80,856 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NATIONAL AUDIT OFFICE |
| Locality | LONDON |
| Post town | South West London |
| Postcode | SW1W 9SP |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | Pimlico North |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | PRISM INFOSEC |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 4 Jul 2025 at 15:40 - AwardUpdate - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/1c715748-61b4-48a3-b587-49ce510a0158
- 28 Sep 2023 at 12:59 - AwardUpdate - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/1c715748-61b4-48a3-b587-49ce510a0158
- 30 Aug 2023 at 15:23 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/1c715748-61b4-48a3-b587-49ce510a0158

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/1c715748-61b4-48a3-b587-49ce510a0158
  4th July 2025 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819.json.