---
title: "PCI QSA pro 2026"
ocid: "ocds-h6vhtk-0682ac"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0682ac"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0682ac.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0682ac.json"
source: "Find A Tender Service"
current_stage: "Tender"
buyer: "GLASGOW CITY COUNCIL"
published: "2026-04-15"
---

# PCI QSA pro 2026

Buyer: GLASGOW CITY COUNCIL  
Current stage: Tender  
OCID: ocds-h6vhtk-0682ac

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0682ac)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0682ac.json)

## Summary

Glasgow City Council is seeking a supplier to validate its compliance with the PCI Data Security Standard (PCI DSS) through the tender titled "PCI QSA pro 2026". This procurement process falls under the services category and is focused on systems and technical consultancy services in the Glasgow area, with a contract valued at £450,000. The procedure is an open stage process conducted via the Public Contracts Scotland - Tender portal, with the submission deadline set for 19th May 2026 and the contract period running from 11th June 2026 to 11th June 2029, with options for a 24-month extension. The tender involves mandatory community benefit outcomes and bidders must confirm their adherence to these requirements. Glasgow City Council's address is 40 John St, City Chambers, Glasgow, UKM82, and the contact person is Allan Weir (email: Allan.Weir@glasgow.gov.uk).

This tender presents profitable opportunities for businesses specialised in systems and technical consultancy services, particularly those experienced in compliance validation within the regulatory frameworks. Ideal candidates would be Qualified Security Assessors capable of conducting comprehensive assessments and delivering services including scoping, readiness reviews, technical testing, and ongoing support. Engaging in this tender allows businesses to foster growth through securing a robust contract with Glasgow City Council, a significant regional authority. By contributing to the community benefit outcomes, participating firms can also enhance their corporate social responsibility profiles. Bidders must demonstrate relevant experience with similar complexities and scale to Glasgow City Council, ensuring readiness for immediate contract responsibilities upon awarding.

## Notice

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds. This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

### Lot Information

Lot 1

The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council's compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of: i. Scoping and Readiness Review ii. Onsite Assessment Activities iii. Technical Testing iv. Documentation and Reporting v. ASV Scanning vi. Ongoing Support (Ad-hoc support) For further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Renewal: Option to extend for periods of up to an additional 24 months (in total) at the sole discretion of Glasgow City Council.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/034067-2026 |
| Notice type | Tender Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 15 Apr 2026 |
| Submission deadline | 19 May 2026 |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 10 Jun 2026 - 11 Jun 2029 |
| Recurrence | This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards. |

## Values

| Field | Value |
| --- | --- |
| Tender value | £450,000 |
| Lots value | £450,000 |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Active |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | GLASGOW CITY COUNCIL |
| Additional buyers | GLASGOW LIFE (CULTURE & SPORT GLASGOW) |
| Locality | GLASGOW |
| Post town | Glasgow |
| Postcode | G2 1DU |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM3 West Central Scotland |
| ITL 3 | TLM32 Glasgow City |
| Local authority | Glasgow City |
| Electoral ward | Anderston/City/Yorkhill |
| Westminster constituency | Glasgow East |
| Delivery location | TLM82 Glasgow City |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support
- 79 - Business services: law, marketing, consulting, recruitment, printing and security

### Codes

- 72220000 - Systems and technical consultancy services
- 72222300 - Information technology services
- 79411000 - General management consultancy services

## Release History

- 15 Apr 2026 at 09:46 - Tender - Tender Notice - https://www.find-tender.service.gov.uk/Notice/034067-2026

## Notice URLs

- http://www.glasgow.gov.uk
- http://www.glasgowlife.org.uk
- http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000827084
- https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/
- https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00196
- https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA10287
- https://www.publictendersscotland.publiccontractsscotland.gov.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0682ac. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0682ac.json.