---
title: "InfoSec assessment and delivery of InfoSec Strategy & Target Operating Model (TOR)"
ocid: "ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "PENSION PROTECTION FUND"
published: "2024-12-13"
---

# InfoSec assessment and delivery of InfoSec Strategy & Target Operating Model (TOR)

Buyer: PENSION PROTECTION FUND  
Current stage: Award  
OCID: ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148.json)

## Summary

The Pension Protection Fund (PPF) has successfully completed the procurement process for an InfoSec assessment and the delivery of an InfoSec Strategy & Target Operating Model (TOR). The contract, valued at £96,000, has been awarded to NCC GROUP SECURITY SERVICES LIMITED. The procurement, classified under the industry category of "Computer audit consultancy and hardware consultancy services" with additional classifications relevant to information technology strategic and requirements review services, took place in Croydon, England. The project is divided into two phases: Phase 1, starting on 1st January 2025, involves a Cyber Capability Review, while Phase 2, beginning on 1st April 2025, focuses on delivering an Information Security Strategy and TOR. The procurement method used was a direct single tender action below the threshold.

This tender presents significant growth opportunities for businesses specialising in information security consultancy and IT strategic review services. The contract's scope, covering comprehensive reviews and strategic planning, is well-suited for firms with substantial experience in cybersecurity and IT governance. Larger companies with robust resources and capabilities to deliver complex IT services, such as gap analyses and target operating models, would find this opportunity particularly advantageous. SMEs and VCSEs were not specifically prioritised for this tender, indicating a preference for well-established firms capable of meeting the project's extensive requirements.

## Notice

The PPF has a need to review its information security across the entire organisation. To do this a two phase contract is required: Phase 1, commencing 1st January 2025 will provide a Cyber Capability Review by identifying the maturity of the PPFs capabilities & CISO needs. The review will include a gap analysis. Phase 2, commencing 1st April 2024 will include the delivery of a Information Security Strategy and Target Operating Model (TOR).

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/35fffca4-e14d-4717-8c4a-50e6dc5604dc |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Single tender action (below threshold) |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 13 Dec 2024 |
| Submission deadline | 21 Nov 2024 |
| Future notice date | Not specified |
| Award date | 21 Nov 2024 |
| Contract period | 1 Jan 2025 - 31 Dec 2025 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £96,000 |
| Lots value | Not specified |
| Awards value | £96,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | PENSION PROTECTION FUND |
| Locality | CROYDON |
| Post town | Croydon |
| Postcode | CR0 2NA |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI6 Outer London - South |
| ITL 3 | TLI62 Croydon |
| Local authority | Croydon |
| Electoral ward | Fairfield |
| Westminster constituency | Croydon West |
| Delivery location | TLJ South East (England) |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | NCC GROUP SECURITY SERVICES |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72150000 - Computer audit consultancy and hardware consultancy services
- 72222100 - Information systems or technology strategic review services
- 72223000 - Information technology requirements review services
- 72611000 - Technical computer support services

## Release History

- 13 Dec 2024 at 18:33 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/35fffca4-e14d-4717-8c4a-50e6dc5604dc

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/35fffca4-e14d-4717-8c4a-50e6dc5604dc
  13th December 2024 - Awarded contract notice on Contracts Finder

## Notice URLs

- https://www.ppf.co.uk/

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-45ecf6e8-1d42-47b4-a402-9f2a8a394148.json.