---
title: "Cyber Security Assurance and Testing Services"
ocid: "ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "National Audit Office"
published: "2026-08-20"
---

# Cyber Security Assurance and Testing Services

Buyer: National Audit Office  
Current stage: Award  
OCID: ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5.json)

## Summary

The National Audit Office is procuring independent cyber security assurance and testing services for delivery in the United Kingdom. The scope includes penetration testing, Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks (ITHC), and Microsoft 365 security reviews. This is a specialist information technology and computer audit and testing services requirement, covering independent assessment of cyber security controls, systems and compliance. The buyer is the National Audit Office, based in London. The selected supplier, Prism Infosec Ltd, is a small and medium-sized enterprise. The requirement is relevant to cyber security consultancies and testing providers with the technical capability to deliver assurance, penetration testing, certification assessments, health checks and Microsoft 365 security reviews independently.

The procurement is complete and was awarded to Prism Infosec Ltd on 3 June 2026 through a selective call-off from the Crown Commercial Service G-Cloud 14 framework. The award value is £155,000 including VAT, covering the full four-year term. The contract started on 3 August 2026 and runs initially for three years, with the available term ending on 2 August 2030 after a further 12-month extension. The tender submission deadline was 1 June 2026 at 12 noon. The procurement was evaluated through the framework call-off process; the published information identifies the requirement as suitable for SMEs and voluntary, community and social enterprises.

This award demonstrates that the National Audit Office buys a combined cyber security assurance and testing service rather than a single technical assessment. A credible future competitor would need to provide independent penetration testing alongside Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks and Microsoft 365 security reviews. Providers should be able to combine practical testing, formal assurance reporting and recognised cyber security assessment capability under one service arrangement. The award also shows that a small specialist supplier can meet this buyer’s requirement through a public sector framework route. Cyber security firms with experience across government environments, strong quality controls and the capacity to coordinate several assessment disciplines would be well placed when this requirement next reaches the market.

## Notice

The National Audit Office awarded a contract to Prism Infosec Ltd through the Crown Commercial Services G-Cloud 14 framework. The supplier will provide independent cyber security assurance and testing services, including penetration testing, Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks (ITHC), and Microsoft 365 security reviews. The contract commenced on Monday 3rd August 2026 and will run for an initial three-year term until Thursday 2nd August 2029, with the option to extend for a further 12 months until Friday 2nd August 2030. The total estimated contract value is PS155,000 (inclusive of VAT) over the full four-year term.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/f73ee0b2-8970-40fd-b6ca-e2dff86988bb |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME, VCSE |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 20 Aug 2026 |
| Submission deadline | 1 Jun 2026 |
| Future notice date | Not specified |
| Award date | 3 Jun 2026 |
| Contract period | 3 Aug 2026 - 2 Aug 2030 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £155,000 |
| Lots value | Not specified |
| Awards value | £155,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | National Audit Office |
| Locality | LONDON |
| Postcode area | South West London |
| Postcode | SW1W 9SP |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | Pimlico North |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Prism Infosec Ltd |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services
- 72800000 - Computer audit and testing services

## Release History

- 20 Aug 2026 at 14:02 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/f73ee0b2-8970-40fd-b6ca-e2dff86988bb

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/f73ee0b2-8970-40fd-b6ca-e2dff86988bb
  20th August 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5.json.