---
title: "Penetration testing and security consultancy"
ocid: "ocds-h6vhtk-028c9e"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-028c9e"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-028c9e.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-028c9e.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "SCOTTISH NATURAL HERITAGE"
published: "2021-04-23"
---

# Penetration testing and security consultancy

Buyer: SCOTTISH NATURAL HERITAGE  
Current stage: Award  
OCID: ocds-h6vhtk-028c9e

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-028c9e)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-028c9e.json)

## Summary

The Scottish Natural Heritage (operating as 'NatureScot') is conducting a selective procurement process for a contract titled "Penetration testing and security consultancy." This initiative falls under the information technology services sector and is based in Inverness, UK. The initial contract period is set for 24 months, with a potential 12-month extension, and is valued at approximately £150,000. The deadline for submitting electronic responses was on 22nd February 2021, with shortlisted candidates invited for the next stage of tender submission from 1st March 2021.

This procurement presents considerable growth opportunities for businesses, particularly those specialising in cybersecurity and IT consulting. Companies that provide penetration testing services, security audits, and compliance advisory services would be well-positioned to compete for this contract. The emphasis on quality and price criteria, with equal weighting, suggests that firms with robust technical expertise and competitive pricing could excel in securing a contract in this high-demand field.

## Notice

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.

### Lot Information

Lot 1

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. The contract is also expected to be used by Forestry & Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS. Full details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are: - external/internal manual penetration testing, social engineering & firewall configuration/testing, PSN compliance - advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review & certification - automated penetration testing. Additional information: All completed SPDs at Stage 1 must be submitted via the Public Contracts Scotland portal. Please ensure you allow enough time to upload your response.

Renewal: Optional 12-month extension.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/008725-2021 |
| Notice type | Tender Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Restricted procedure |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 23 Apr 2021 |
| Submission deadline | 22 Feb 2021 |
| Future notice date | Not specified |
| Award date | 18 Apr 2021 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £150,000 |
| Lots value | £150,000 |
| Awards value | Not specified |
| Contracts value | £150,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | SCOTTISH NATURAL HERITAGE |
| Locality | INVERNESS |
| Post town | Inverness |
| Postcode | IV3 8NW |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM2 Highlands and Islands |
| ITL 3 | TLM20 Highlands and Islands |
| Local authority | Highland |
| Electoral ward | Inverness West |
| Westminster constituency | Inverness, Skye and West Ross-shire |
| Delivery location | TLM Scotland |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 4 |
| Supplier names | ARCULUS; BARRIER NETWORKS; DIONACH; QUORUM CYBER SECURITY |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services

## Release History

- 23 Apr 2021 at 11:14 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/008725-2021
- 22 Jan 2021 at 14:56 - Tender - Tender Notice - https://www.find-tender.service.gov.uk/Notice/001352-2021

## Notice URLs

- http://www.nature.scot
- http://www.publiccontractsscotland.gov.uk
- https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00383

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-028c9e. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-028c9e.json.