---
title: "GovAssure Independent Audit for One Login"
ocid: "ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "DSIT"
published: "2026-08-25"
---

# GovAssure Independent Audit for One Login

Buyer: DSIT  
Current stage: Award  
OCID: ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e.json)

## Summary

The Department for Science, Innovation and Technology (DSIT) procured independent assurance services for One Login. The work is an external review of DSIT’s self-assessment against the National Cyber Security Centre’s Cyber Assessment Framework, using the enhanced government profile. The appointed supplier assesses the completed self-assessment and supporting evidence, then produces a final report stating whether One Login meets the assigned government profile for the systems in scope. This is an information technology service, delivered in relation to the United Kingdom and internationally, including the Channel Islands, Isle of Man, Europe, British Overseas Territories and the rest of the world. The requirement is suitable for small and medium-sized enterprises and voluntary, community or social enterprises.

The procurement is complete and was awarded to NCC Group Security Services Limited on 2 April 2026. The award value is £21,125 including the stated currency of GBP. The contract runs from 1 August 2026 to 31 March 2027. It was conducted as a selective call-off from a dynamic purchasing system. The tender submission deadline was 9 March 2026 at 12:00 UTC. The award is active. The requirement was treated as a services procurement and covered one overall item rather than separate lots. The evaluation basis is reflected in the assurance outcome required: review of DSIT’s self-assessment and evidence against the enhanced government profile under the National Cyber Security Centre’s Cyber Assessment Framework, followed by a final compliance report.

This award indicates demand from DSIT for independent cyber assurance of major government digital services, specifically One Login. Suppliers likely to compete credibly when this requirement returns will need demonstrable capability in independent assessment rather than internal self-review, with practical knowledge of the National Cyber Security Centre’s Cyber Assessment Framework and its enhanced government profile for government systems. They will also need to examine structured self-assessment evidence, test whether it supports the claimed position, understand the systems in scope and produce a clear, authoritative final report. The requirement is appropriate to organisations able to provide specialist information security assurance at a focused engagement scale, including smaller firms and voluntary, community or social enterprises with relevant technical expertise and reporting experience.

## Notice

GDS wishes to procure a supplier to conduct an independent assurance review of GDS self-assessed assessment of one returns against the National Cyber Security Centre's Cyber Assessment Framework. Following GDS completing a self-assessment of One Login against an appropriate government profile (enhanced) under the National Cyber Security Centre's Cyber Assessment Framework, a supplier will conduct an assessment of One Login, assessing the completed self-assessment and provided evidence to author a final report stating whether GDS meets the assigned government profile against the systems in scope

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/2b828d25-4766-4d07-8962-1937e8cf894a |
| Notice type | Award Notice |
| Procurement type | Dynamic |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a dynamic purchasing system |
| Tender suitability | SME, VCSE |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 25 Aug 2026 |
| Submission deadline | 9 Mar 2026 |
| Future notice date | Not specified |
| Award date | 2 Apr 2026 |
| Contract period | 1 Aug 2026 - 31 Mar 2027 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £21,125 |
| Lots value | Not specified |
| Awards value | £21,125 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | DSIT |
| Locality | LONDON |
| Postcode area | South West London |
| Postcode | SW1A 2EG |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | NCC Group Security Services Limited |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services

## Release History

- 25 Aug 2026 at 17:45 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/2b828d25-4766-4d07-8962-1937e8cf894a

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/2b828d25-4766-4d07-8962-1937e8cf894a
  25th August 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-37d14fb8-c934-474d-93ce-864fcab3f58e.json.