---
title: "Cyber Security Assurance Services Framework"
ocid: "ocds-h6vhtk-0478f3"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0478f3"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0478f3.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0478f3.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "CITY OF EDINBURGH COUNCIL"
published: "2025-08-06"
---

# Cyber Security Assurance Services Framework

Buyer: CITY OF EDINBURGH COUNCIL  
Current stage: Award  
OCID: ocds-h6vhtk-0478f3

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0478f3)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0478f3.json)

## Summary

The City of Edinburgh Council has awarded a framework contract titled "Cyber Security Assurance Services Framework," targeting the IT services industry. This framework aims to strengthen the council's capability to procure secure digital services by assessing potential IT providers against rigorous security criteria. Located in the UK region UKM75, the procurement process has reached the award stage as of 6th August 2025. The framework was executed using a selective procurement method within a restricted procedure and was covered by the GPA, creating several opportunities in IT consultancy, software development, and related services. Noteworthy awards under this framework include areas such as penetration testing, security audits, and threat intelligence, with various suppliers like Trustmarque Solutions Ltd and NCC Group Security Services Limited involved.

This procurement presents substantial opportunities for growth, particularly for businesses in IT consulting, digital security, and related fields. Companies that specialize in providing comprehensive security solutions, such as penetration testing, digital forensics, and incident response, will find this framework an invaluable reference. Additionally, firms possessing certifications like CREST or CHECK and those accredited with Microsoft or AWS are well-suited to partake, enhancing their portfolios and market visibility. Engaging in this framework can foster long-term partnerships with regional governmental bodies, leading to more significant business development prospects and intensifying industry presence.

## Notice

The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

### Lot Information

Threat Intelligence

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Threat Intelligence

Renewal: Possible extension up to 24 months.

Vulnerability Assessments

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Vulnerability Assessments

Renewal: Possible extension up to 24 months.

Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and - Security assurance and reporting of proposed new technologies and services. Suppliers must also provide: - Advice and consultation on proposed and existing cloud developments, - Advice and consultation on proposed and existing cloud infrastructure configurations, and - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.

Renewal: Possible extension up to 24 months.

Incident Response, Digital Forensics, Data Breach Assessment & Recovery

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Incident Response, - Digital Forensics, - Data Breach Assessment and Recovery.

Renewal: Possible extension up to 24 months.

Security Audit - PCI, Security Architecture/Design Review, Compliance & Regulatory Services.

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Security Audit - PCI, - Security Architecture/Design Review, - Compliance and Regulatory Services.

Renewal: Possible extension up to 24 months.

Data & Hardware Sanitisation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Data and Hardware Sanitisation

Renewal: Possible extension up to 24 months.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/046608-2025 |
| Notice type | Tender Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Restricted procedure |
| Tender suitability | Not specified |
| Awardee scale | Large, SME |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 6 Aug 2025 |
| Submission deadline | 31 Jul 2024 |
| Future notice date | Not specified |
| Award date | 5 Aug 2025 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £750,000 |
| Lots value | £750,000 |
| Awards value | Not specified |
| Contracts value | £750,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | CITY OF EDINBURGH COUNCIL |
| Locality | EDINBURGH |
| Post town | Edinburgh |
| Postcode | EH8 8BG |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM1 East Central Scotland |
| ITL 3 | TLM13 City of Edinburgh |
| Local authority | City of Edinburgh |
| Electoral ward | City Centre |
| Westminster constituency | Edinburgh East and Musselburgh |
| Delivery location | TLM75 City of Edinburgh |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 4 |
| Supplier names | ENTSERV; NCC GROUP SECURITY SERVICES; REDCENTRIC SOLUTIONS; TRUSTMARQUE SOLUTIONS |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 6 Aug 2025 at 14:29 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/046608-2025
- 2 Jul 2024 at 07:47 - Tender - Tender Notice - https://www.find-tender.service.gov.uk/Notice/020020-2024

## Notice URLs

- http://www.edinburgh.gov.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446
- https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290
- https://www.publictendersscotland.publiccontractsscotland.gov.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0478f3. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0478f3.json.