---
title: "NCC1706 Vulnerability Management System"
ocid: "ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "Northumberland County Council"
published: "2026-09-03"
---

# NCC1706 Vulnerability Management System

Buyer: Northumberland County Council  
Current stage: Award  
OCID: ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a.json)

## Summary

Northumberland County Council procured a vulnerability management system to assess and help protect its network perimeter and cardholder data. The requirement is for a vulnerability management tool, supplied with a certified Approved Scanning Vendor (ASV) recognised by the PCI Security Standards Council, and supporting PCI DSS compliance. The specified OUTSCAN PCI system repeatedly scans network perimeters, identifies vulnerabilities, inventories actionable remediation measures and allows rescanning until the compliance criteria are met. This is a technology goods procurement, classified under virus protection software. Delivery is for Northumberland County Council in the North East of England. The council is the buying organisation, based at County Hall in Morpeth. The opportunity was identified as suitable for small and medium-sized enterprises.

The procurement is complete and was awarded on 2 September 2026 through a direct award described as an ‘Other - Direct Award’ procedure. The tender submission deadline was 24 August 2026 at 12:00. The contract was awarded to Computacenter (UK) Limited for £34,852.61 including the stated GBP currency. The awarded contract period runs from 16 September 2026 to 15 September 2029. The award is active and the tender is complete. The published procurement value was also £34,852.61. Evaluation was based on the direct-award route rather than a competitive tender process. The contract covers the single stated requirement for a vulnerability management system and associated PCI-focused scanning capability.

For a future requirement of this kind, credible suppliers would need to provide a vulnerability management platform able to scan network perimeters, identify vulnerabilities, maintain an inventory of actionable remedies and support repeated scanning through to compliance. A key differentiator is the ability to provide an Approved Scanning Vendor certified by the PCI Security Standards Council, together with tooling designed to verify and demonstrate PCI DSS compliance. Suppliers should be able to explain how their service protects the integrity of cardholder data and produces evidence that compliance criteria have been met. The award shows demand from Northumberland County Council for an established PCI-focused vulnerability management service, and indicates that an SME supplier can compete for this scale of council technology requirement.

## Notice

Contract for a Vulnerability Management system with a certified Approved Scanning Vendor (ASV) by the PCI Security Standards Council and offers OUTSCAN PCI - vulnerability management tool designed specifically to verify and prove PCI DSS compliance. OUTSCAN PCI examines network perimeters, identifies vulnerabilities and inventories actionable remedies, and can repeatedly scan until all criteria are met to effectively protect the integrity of cardholder data and verify compliance.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/a863596d-9186-43c6-ad50-9beb269a2170 |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Goods |
| Procurement method | Not Specified |
| Procurement method details | Other - Direct Award |
| Tender suitability | SME |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 3 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 2 Sep 2026 |
| Contract period | 16 Sep 2026 - 15 Sep 2029 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £34,852 |
| Lots value | Not specified |
| Awards value | £34,852 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Northumberland County Council |
| Locality | MORPETH |
| Postcode area | Newcastle upon Tyne |
| Postcode | NE61 2EF |
| Country | England |
| ITL 1 | TLC North East (England) |
| ITL 2 | TLC4 Northumberland, Durham and Tyne & Wear |
| ITL 3 | TLC42 Northumberland |
| Local authority | Northumberland |
| Electoral ward | Morpeth Kirkhill |
| Westminster constituency | North Northumberland |
| Delivery location | TLC North East (England) |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Computacenter |

## CPV Codes

### Divisions

- 48 - Software package and information systems

### Codes

- 48760000 - Virus protection software package

## Release History

- 3 Sep 2026 at 16:42 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/a863596d-9186-43c6-ad50-9beb269a2170

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/a863596d-9186-43c6-ad50-9beb269a2170
  3rd September 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-cc42cd85-7353-47cf-9e17-5a63a3cda50a.json.
