---
title: "Security Penetration and IT Health Check"
ocid: "ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "WATER SERVICES REGULATION AUTHORITY"
published: "2019-01-21"
---

# Security Penetration and IT Health Check

Buyer: WATER SERVICES REGULATION AUTHORITY  
Current stage: Award  
OCID: ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98.json)

## Summary

The WATER SERVICES REGULATION AUTHORITY is seeking to enhance its network security through the procurement of a contract titled "Security Penetration and IT Health Check." This initiative is classified under information technology services and is set in the West Midlands, United Kingdom. The procurement is currently in the Award stage, having been completed on 17 December 2018. The contract period commenced on 4 January 2019 and will run until 3 January 2021, with a total contract value of £39,889.50. The open procurement method was employed, which allows for broader participation.

This tender presents significant growth opportunities for businesses specialising in IT security services, particularly SMEs with expertise in areas such as penetration testing, security policy advice, and cyber risk management. Companies with a proven track record in delivering similar services, including CLAS consultancy and cloud security implementations, will find this procurement particularly appealing, as it requires ongoing support and biannual assessments to maintain compliance with national security standards.

## Notice

The objective is to ensure that Ofwat has a secure, robust and managed network infrastructure in place that satisfies the NCSC and their PSN accreditation and Ofwat's Internal Auditors. Scope The areas of expertise or services that we may require are: * CLAS consultants with expertise in accrediting organisations to the PSN; * Penetration testing and system health checks (compliant to security standards and NCSC's CHECK service); * Phishing simulation program; * Computer and server forensics; * Auditing; * Security policy advice and support (and any legal interfaces); * Information risk, the information assurance maturity model (IAMM) and the information risk return to Cabinet Office (that now includes the Security Policy Framework [SPF] return); * HMG Cyber security initiatives; * Network Access Security; * Boundary security and remote working security; * Encryption of information assets at rest; * Mobile device security; * Email encryption and web security; * Website security; * Business continuity; * Cloud security principles and their implementation; * Security strategy and vision; and * Training and education across the areas listed above. For the support service we require an agreement where we can contact the supplier and request help on one or more of the areas above. Some of these services may be required at short notice although the Customer will endeavour to give a minimum two weeks notice of any requirement. We currently have a known requirement for biannual security penetration and IT health checks to be conducted in January and June each year. This is currently a mandatory requirement for our PSN accreditation process. We would require the agreement to include at least the minimum number of days required to conduct two IT Health check and penetration tests each year plus an additional 4 days that may be called on for any of the areas listed above. (A sampling approach is acceptable when considering the penetration testing of its laptop population as all models are the same make and model and have a similar configuration). Additional information: For further information, please contact: procurement@ofwat.gsi.gov.uk

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/40d5b5b5-42dc-4ba8-8534-3b2d2353fe33 |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure (below threshold) |
| Tender suitability | SME |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 21 Jan 2019 |
| Submission deadline | 13 Nov 2018 |
| Future notice date | Not specified |
| Award date | 17 Dec 2018 |
| Contract period | 4 Jan 2019 - 3 Jan 2021 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £39,889 |
| Lots value | Not specified |
| Awards value | £39,889 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | WATER SERVICES REGULATION AUTHORITY |
| Locality | BIRMINGHAM |
| Post town | Birmingham |
| Postcode | B5 4UA |
| Country | England |
| ITL 1 | TLG West Midlands (England) |
| ITL 2 | TLG3 West Midlands |
| ITL 3 | TLG31 Birmingham |
| Local authority | Birmingham |
| Electoral ward | Ladywood |
| Westminster constituency | Birmingham Ladywood |
| Delivery location | TLG West Midlands (England) |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | SAPPHIRE TECHNOLOGIES |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services

## Release History

- 21 Jan 2019 at 16:40 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/40d5b5b5-42dc-4ba8-8534-3b2d2353fe33

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/40d5b5b5-42dc-4ba8-8534-3b2d2353fe33
  21st January 2019 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98.json.