---
title: "Provision of an ISO27001 Internal Auditor - Readvertised"
ocid: "ocds-kuma6s-146365"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-kuma6s-146365"
markdown_url: "https://d3tenders.com/contract/ocds-kuma6s-146365.md"
json_url: "https://d3tenders.com/contract/ocds-kuma6s-146365.json"
source: "Sell2Wales"
current_stage: "Award"
buyer: "SOCIAL CARE WALES"
published: "2025-01-08"
---

# Provision of an ISO27001 Internal Auditor - Readvertised

Buyer: SOCIAL CARE WALES  
Current stage: Award  
OCID: ocds-kuma6s-146365

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-kuma6s-146365)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-kuma6s-146365.json)

## Summary

Social Care Wales, located in Cardiff, has awarded a contract under the title "Provision of an ISO27001 Internal Auditor - Readvertised" to Tmc3 Limited based in Liverpool. This procurement falls under the category of services, specifically focusing on internal auditing services (CPV codes 72810000, 79212000, and 79212200). The contract was signed on 8th January 2025, following an open procurement method. The tendering process aimed at ensuring the continued effectiveness and compliance of Social Care Wales' Information Security Management System (ISMS) in accordance with the ISO 27001 standard. The transition to the 27001:2022 standard is expected to be completed by February 2025.

This tender presents significant opportunities for businesses specialising in auditing and information security services to gain a foothold in the public sector. The contract involves comprehensive responsibilities such as preparing audit scopes, reviewing ISMS documentation, and conducting internal audits to ensure compliance and effectiveness. Businesses with expertise in ISO 27001 standards, risk assessments, and implementing corrective actions will find this tender particularly suited to their capabilities. Moreover, the opportunity to work with a national authority like Social Care Wales can enhance business profiles and open doors for future collaborations and tenders within the governmental sector.

## Notice

IntroductionISO 27001 is an internationally recognised standard for managing and maintaininginformation security within businesses. It outlines the requirements for an information security management system (ISMS), and provides a framework for establishing, implementing, maintaining and continually improving business information security.Social Care Wales has held ISO 27001:2013 certification since 2008, achieving our most recent triennial recertification in April 2024. We are amid transitioning to the 27001:2022 standard and are due to transition in February 2025.What is required / 'The Requirements'We are seeking the provision of an ISO 27001 Internal Auditor to evaluate and ensure the continued effectiveness and compliance of our Information Security Management System (ISMS) in accordance with the ISO 27001 standard.The audit should be performed independently and aligned with the requirements of the ISO IEC 27001:2013 (ISO 27001) standard.The Internal Auditor will:- Prepare and agree an ISMS audit scope and engagement letter with Social Care Wales;- Review and assess the ISMS documentation, including policies, procedures, and controls in line with the standard;- Plan and execute internal audits, including the preparation of audit plans and schedules;- Interview relevant personnel and gather evidence to assess compliance and effectiveness;- Evaluate the implementation of risk assessments and treatment plans;- Analyse audit findings and prepare detailed reports outlining strengths, weaknesses, and recommendations for improvement;- Present findings to senior management and relevant stakeholders;- Follow up on previous audit findings to ensure corrective actions have been implemented;- Follow through any external certification audit findings and remedial actions received by Social Care Wales.Please see Specification for more detail

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Sell2Wales |
| Latest notice | https://www.sell2wales.gov.wales/search/search_switch.aspx?ID=146365 |
| Notice type | S2W Notice - Website Contract Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Not specified |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 8 Jan 2025 |
| Submission deadline | 12 Dec 2024 |
| Future notice date | Not specified |
| Award date | 8 Jan 2025 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Not specified |
| Lots status | Not specified |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | SOCIAL CARE WALES |
| Locality | CARDIFF |
| Post town | Cardiff |
| Postcode | CF10 1EW |
| Country | Wales |
| ITL 1 | TLL Wales |
| ITL 2 | TLL5 South East Wales |
| ITL 3 | TLL52 Cardiff and Vale of Glamorgan |
| Local authority | Cardiff |
| Electoral ward | Cathays |
| Westminster constituency | Cardiff South and Penarth |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | TMC3 |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support
- 79 - Business services: law, marketing, consulting, recruitment, printing and security

### Codes

- 72810000 - Computer audit services
- 79212000 - Auditing services
- 79212200 - Internal audit services

## Release History

- 8 Jan 2025 at 09:54 - Award - S2W Notice - Website Contract Award Notice - https://www.sell2wales.gov.wales/search/search_switch.aspx?ID=146365
- 28 Nov 2024 at 08:47 - Tender - S2W Notice - Website Invitation to Tender Notice - https://www.sell2wales.gov.wales/search/search_switch.aspx?ID=146365

## Documents

- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=12
  28th November 2024 - Appendix 5 - Social Care Wales' branding guidelines
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=13
  28th November 2024 - Atodiad 6 - Ffurf y Tendr
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=14
  28th November 2024 - Appendix 6 - Form of Tender
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=15
  28th November 2024 - Social Care Wales - Terms and Conditions
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=3
  28th November 2024 - Atodiad 1 - Holiadur Cyn Cymhwyso
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=4
  28th November 2024 - Appendix 1 - Pre Qualification Questionnaire
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=5
  28th November 2024 - Atodiad 2 - Dogfen Ymateb Materion Technegol / Ansawdd
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=6
  28th November 2024 - Appendix 2 - Technical / Quality Response Document
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=7
  28th November 2024 - Atodiad 3 - Dogfen Ymateb Materion Ariannol / Prisio
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=8
  28th November 2024 - Appendix 3 - Financial / Pricing Response Document
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=9
  28th November 2024 - Atodiad 4 - Canllawiau ton llais Gofal Cymdeithasol Cymru
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=10
  28th November 2024 - Appendix 4 - Social Care Wales' tone of voice guidelines
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=11
  28th November 2024 - Atodiad 5 - Canllawiau brandio Gofal Cymdeithasol Cymru
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=1
  28th November 2024 - Gwahoddiad i Dendro - Ail Hysbyseb
- https://www.sell2wales.gov.wales/Notice/Download/DocumentDownload.aspx?id=NOV494765&idx=2
  28th November 2024 - Invitation to Tender - Readvertised

## Notice URLs

- http://www.sell2wales.gov.wales
- http://www.socialcare.wales

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-kuma6s-146365. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-kuma6s-146365.json.