--- title: "Penetration testing and security consultancy" ocid: "ocds-r6ebe6-0000641863" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000641863" markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000641863.md" json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000641863.json" source: "Public Contracts Scotland" current_stage: "Award" buyer: "SCOTTISH NATURAL HERITAGE" published: "2021-04-23" --- # Penetration testing and security consultancy Buyer: SCOTTISH NATURAL HERITAGE Current stage: Award OCID: ocds-r6ebe6-0000641863 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000641863) [Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000641863.json) ## Summary The procurement process involves Scottish Natural Heritage (operating as NatureScot), located in Inverness, UK, which is seeking to appoint consultants for penetration testing and security consultancy services under a selective procurement method. The initial contract term is set for 24 months, with the possibility of a 12-month extension, and it has an estimated value of £150,000. The tender period was active until 22nd February 2021, with a second stage invitation planned for 1st March 2021. The procurement falls under the service category in the environmental protection industry. This tender presents significant opportunities for businesses specialised in cybersecurity and IT services, particularly those capable of performing penetration testing, social engineering assessments, and security consultancy. Small and medium-sized enterprises (SMEs) that provide such expertise can leverage this opportunity, particularly given that the procurement is intended to cater not only to NatureScot but also to Forestry & Land Scotland. Interested bidders should prepare to demonstrate their qualifications and compliance with ISO standards to align with the selection criteria outlined in the tender. ## Notice Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. ### Lot Information Lot 1 Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. The contract is also expected to be used by Forestry & Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS. Full details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are: - external/internal manual penetration testing, social engineering & firewall configuration/testing, PSN compliance - advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review & certification - automated penetration testing.. All completed SPDs at Stage 1 must be submitted via the Public Contracts Scotland portal. Please ensure you allow enough time to upload your response. Renewal: Optional 12-month extension. ## Key Details | Field | Value | | --- | --- | | Publication source | Public Contracts Scotland | | Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR412888 | | Notice type | OJEU - F3 - Contract Award Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Selective | | Procurement method details | Restricted procedure | | Tender suitability | Not specified | | Awardee scale | SME | | All stages | Tender, Award | ## Dates | Field | Value | | --- | --- | | Publication date | 23 Apr 2021 | | Submission deadline | 22 Feb 2021 | | Future notice date | Not specified | | Award date | 19 Apr 2021 | | Contract period | Not specified | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £150,000 | | Lots value | £150,000 | | Awards value | Not specified | | Contracts value | £150,000 | ## Status | Field | Value | | --- | --- | | Tender status | Complete | | Lots status | Complete | | Awards status | Not specified | | Contracts status | Active | ## Buyer | Field | Value | | --- | --- | | Main buyer | SCOTTISH NATURAL HERITAGE | | Locality | INVERNESS | | Post town | Inverness | | Postcode | IV3 8NW | | Country | Scotland | | ITL 1 | TLM Scotland | | ITL 2 | TLM2 Highlands and Islands | | ITL 3 | TLM20 Highlands and Islands | | Local authority | Highland | | Electoral ward | Inverness West | | Westminster constituency | Inverness, Skye and West Ross-shire | | Delivery location | TLM Scotland | ## Supplier | Field | Value | | --- | --- | | Number of suppliers | 4 | | Supplier names | ARCULUS; BARRIER NETWORKS; DIONACH; QUORUM CYBER SECURITY | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72222300 - Information technology services ## Release History - 23 Apr 2021 at 00:00 - Award - OJEU - F3 - Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR412888 - 22 Jan 2021 at 00:00 - Tender - OJEU - F2 - Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JAN404838 ## Documents - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JAN404838 Penetration testing and security consultancy - Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR412888 Penetration testing and security consultancy - Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. ## Notice URLs - http:// - http://www.nature.scot - http://www.publiccontractsscotland.gov.uk - https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000641863 ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000641863. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000641863.json.