---
title: "ITHC, Penetration Testing and Associated Services Contract 2"
ocid: "ocds-h6vhtk-04b008"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-04b008"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-04b008.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-04b008.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS"
published: "2025-04-17"
---

# ITHC, Penetration Testing and Associated Services Contract 2

Buyer: DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS  
Current stage: Award  
OCID: ocds-h6vhtk-04b008

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-04b008)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-04b008.json)

## Summary

The Department of Environment, Food and Rural Affairs (DEFRA) has completed the procurement process for its "ITHC, Penetration Testing and Associated Services Contract 2." This involves the provision of Information Technology Health Checks, Penetration Testing, and associated services, classified under the CPV code 72222300. The contracts were awarded under a limited procurement method, part of the Crown Commercial Services' RM3764.3 Dynamic Purchasing System (DPS) for Cyber Security Services. The awarded contracts are distributed across the UK, including entities within Defra Group like Natural England and the Environment Agency. Key dates include the contracts being signed in March 2025, with completion status achieved by April 2025.

These contracts present a substantial opportunity for businesses specialising in IT security services, particularly those possessing CHECK qualifications. Companies capable of delivering quality technical services at competitive prices, with prior experience in cyber security assurance, will benefit significantly. Small and medium enterprises (SMEs) such as 3B Data Security Ltd, Prism Infosec Ltd, and large enterprises like Commissum Associates have already secured these contracts, reflecting opportunities for both SMEs and larger firms in the IT services industry to expand their operations within the public sector. The structured rotation of work orders ensures fair distribution of opportunities among suppliers, enhancing business growth across the sector.

## Notice

Contract awarded for the provision of IT Health Checks, Penetration Testing and Associated Services. This is one of three contracts awarded by the Authority for these services, under the Crown Commercial Services' RM3764.3 DPS.

### Lot Information

Lot 1

Call-off from RM3764.3 Cyber Security Services 3 Dynamic Purchasing System. The Authority has awarded three contracts, to three CHECK qualified Suppliers for cyber security assurance services.

### Procurement Information

FTS Pipeline Notice: 2024/S 000-034110
Call off from RM3764.3 Cyber Security Services 3 Dynamic Purchasing System

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/015796-2025 |
| Notice type | Planning Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Award procedure without prior publication of a call for competition |
| Tender suitability | SME |
| Awardee scale | Large, SME |
| All stages | Planning, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 17 Apr 2025 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 19 Mar 2025 |
| Contract period | 7 Mar 2025 - 6 Mar 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £4,500,000 |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £3,375,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | DEPARTMENT OF ENVIRONMENT, FOOD AND RURAL AFFAIRS |
| Additional buyers | DEFRA GROUP COMMERCIAL |
| Locality | BRISTOL |
| Post town | Bristol |
| Postcode | BS1 5AH |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | TLI32 Westminster |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 3 |
| Supplier names | 3B DATA SECURITY; COMMISSUM ASSOCIATES; PRISM INFOSEC |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support
- 72222300 - Information technology services
- 72254000 - Software testing

## Release History

- 17 Apr 2025 at 09:30 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/015796-2025
- 17 Apr 2025 at 09:29 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/015795-2025
- 17 Apr 2025 at 09:24 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/015791-2025
- 22 Oct 2024 at 10:43 - Planning - Planning Notice - https://www.find-tender.service.gov.uk/Notice/034110-2024

## Notice URLs

- http://www.prisminfosec.com
- http://www.resillion.com
- https://defra-family.force.com/s/Welcome
- https://www.gov.uk/government/organisations/department-for-environment-food-rural-affairs

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-04b008. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-04b008.json.