---
title: "C002021 PEN Testing"
ocid: "ocds-r6ebe6-0000757598"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000757598"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000757598.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000757598.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "NHS EDUCATION FOR SCOTLAND"
published: "2024-02-07"
---

# C002021 PEN Testing

Buyer: NHS EDUCATION FOR SCOTLAND  
Current stage: Award  
OCID: ocds-r6ebe6-0000757598

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000757598)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000757598.json)

## Summary

The NHS Education for Scotland has awarded a contract for PEN Testing services titled "C002021 PEN Testing." The tender was at the procurement stage of award, with a contract value of £500,000 signed on June 19, 2023. The procurement process was completed, and the award was made to multiple suppliers. The opportunity was in the healthcare industry category, in the UK, specifically in Scotland, and the procurement method used was a selective procedure.

This tender for PEN Testing services by NHS Education for Scotland creates opportunities for cybersecurity service providers, particularly small and medium-sized enterprises (SMEs), to compete in the healthcare sector. Businesses offering cybersecurity solutions and services and with expertise in conducting penetration testing are well-suited to pursue this contract. The contract offers potential growth prospects for suppliers who can deliver CHECK reports with CVSS scores and vulnerability recommendations within specified timelines to NHS Scotland Health Boards.

## Notice

For each agreed testing scope, the NHS Scotland Health Boards requires a written CHECK report with CVSS (latest version throughout the contract) score and recommendations for each reported vulnerability. The report is to be provided to the designated Information Asset Owner for each system and to the NHS Scotland Health Board's representative (this will be agreed with the winning supplier) within 5 working days of the completion of testing.

### Lot Information

Lot 1

The contract was advertised through the Public Contracts Scotland - Tender Portal through the Scottish Government DPS Lot 3 Cybersecurity

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB498245 |
| Notice type | OJEU - F3 - Contract Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Restricted procedure |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 7 Feb 2024 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 19 Jun 2023 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £500,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NHS EDUCATION FOR SCOTLAND |
| Additional buyers | DUMFRIES AND GALLOWAY HEALTH BOARD; HEALTHCARE IMPROVEMENT SCOTLAND; LOTHIAN HEALTH BOARD; NHS 24; NHS AYRSHIRE & ARRAN; NHS BORDERS; NHS FIFE; NHS FORTH VALLEY; NHS GOLDEN JUBILEE; NHS GRAMPIAN; NHS GREATER GLASGOW AND CLYDE; NHS HIGHLAND; NHS LANARKSHIRE; NHS ORKNEY; NHS SHARED BUSINESS SERVICES; NHS SHETLAND; NHS TAYSIDE; NHS WESTERN ISLES; SCOTTISH AMBULANCE SERVICE; THE COMMON SERVICES AGENCY (MORE COMMONLY KNOWN AS NHS NATIONAL SERVICES SCOTLAND) (NSS); THE STATE HOSPITALS BOARD FOR SCOTLAND |
| Locality | EDINBURGH |
| Post town | Edinburgh |
| Postcode | EH3 9DN |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM9 Southern Scotland |
| ITL 3 | TLM95 South Lanarkshire |
| Local authority | South Lanarkshire |
| Electoral ward | Clydesdale East |
| Westminster constituency | Dumfriesshire, Clydesdale and Tweeddale |
| Delivery location | TLM Scotland |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 3 |
| Supplier names | COMMISSUM; DIONACH; TRUSTMARQUE SOLUTIONS |

## CPV Codes

### Divisions

- 71 - Architectural, construction, engineering and inspection services

### Codes

- 71600000 - Technical testing, analysis and consultancy services

## Release History

- 7 Feb 2024 at 00:00 - Award - OJEU - F3 - Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB498245

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=FEB498245
  C002021 PEN Testing - For each agreed testing scope, the NHS Scotland Health Boards requires a written CHECK report with CVSS (latest version throughout the contract) score and recommendations for each reported vulnerability. The report is to be provided to the designated Information Asset Owner for each system and to the NHS Scotland Health Board's representative (this will be agreed with the winning supplier) within 5 working days of the completion of testing.

## Notice URLs

- http://
- http://www.nes.scot.nhs.uk
- http://www.nhsdg.co.uk
- http://www.nhsggc.scot/about-us/procurement/
- http://www.nhslanarkshire.org.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000757598

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000757598. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000757598.json.