---
title: "Cyber Security Assurance Services Framework"
ocid: "ocds-r6ebe6-0000767446"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000767446"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000767446.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000767446.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "CITY OF EDINBURGH COUNCIL"
published: "2025-08-06"
---

# Cyber Security Assurance Services Framework

Buyer: CITY OF EDINBURGH COUNCIL  
Current stage: Award  
OCID: ocds-r6ebe6-0000767446

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000767446)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000767446.json)

## Summary

The City of Edinburgh Council has successfully completed the procurement process for its "Cyber Security Assurance Services Framework," aimed at enhancing its ability to procure secure digital services. This procurement falls under the services category, with a focus on IT and digital security, designated by the CPV code 72000000. The process followed a restricted procedure, which is a selective procurement method. The tender process has moved through the award stage as of 6th August 2025, with several contracts now active across different lots, each valued at GBP 750,000. The awarded contracts cover essential services such as penetration testing, digital forensics, and security audits, among others, and will be delivered primarily within the Edinburgh area, identified by the region code UKM75.

This framework provides substantial growth opportunities for businesses specialising in cybersecurity, particularly SMEs and large enterprises capable of offering penetration testing, threat intelligence, and incident response services. Given the need for high-level digital security assessments and consultations, the framework is ideal for firms with accreditations like CREST or CHECK, and those who are Microsoft or AWS partners. Such businesses can expand their service offerings and client base while supporting the public sector’s digital security needs. Furthermore, with ongoing opportunities for renewal and additional framework lots, this tender supports sustained engagement with the City of Edinburgh Council, promising recurring business and collaboration over an extended period.

## Notice

The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

### Lot Information

Threat Intelligence

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Threat Intelligence

Renewal: Possible extension up to 24 months.

Vulnerability Assessments

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Vulnerability Assessments

Renewal: Possible extension up to 24 months.

Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and - Security assurance and reporting of proposed new technologies and services. Suppliers must also provide: - Advice and consultation on proposed and existing cloud developments, - Advice and consultation on proposed and existing cloud infrastructure configurations, and - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.

Renewal: Possible extension up to 24 months.

Incident Response, Digital Forensics, Data Breach Assessment & Recovery

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Incident Response, - Digital Forensics, - Data Breach Assessment and Recovery.

Renewal: Possible extension up to 24 months.

Security Audit - PCI, Security Architecture/Design Review, Compliance & Regulatory Services.

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Security Audit - PCI, - Security Architecture/Design Review, - Compliance and Regulatory Services.

Renewal: Possible extension up to 24 months.

Data & Hardware Sanitisation

The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments. These include: - Data and Hardware Sanitisation

Renewal: Possible extension up to 24 months.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445 |
| Notice type | OJEU - F3 - Contract Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Restricted procedure |
| Tender suitability | Not specified |
| Awardee scale | Large, SME |
| All stages | Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 6 Aug 2025 |
| Submission deadline | 31 Jul 2024 |
| Future notice date | Not specified |
| Award date | 6 Aug 2025 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £750,000 |
| Lots value | £750,000 |
| Awards value | Not specified |
| Contracts value | £750,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | CITY OF EDINBURGH COUNCIL |
| Locality | EDINBURGH |
| Post town | Edinburgh |
| Postcode | EH8 8BG |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM1 East Central Scotland |
| ITL 3 | TLM13 City of Edinburgh |
| Local authority | City of Edinburgh |
| Electoral ward | City Centre |
| Westminster constituency | Edinburgh East and Musselburgh |
| Delivery location | TLM75 City of Edinburgh |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 4 |
| Supplier names | ENTSERV; NCC GROUP SECURITY SERVICES; REDCENTRIC SOLUTIONS; TRUSTMARQUE SOLUTIONS |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 6 Aug 2025 at 00:00 - Award - OJEU - F3 - Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445
- 2 Jul 2024 at 00:00 - Tender - OJEU - F2 - Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUL508803

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUL508803
  Cyber Security Assurance Services Framework - The City of Edinburgh Council is focused on establishing a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=AUG536445
  Cyber Security Assurance Services Framework - The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.

## Notice URLs

- http://
- http://www.edinburgh.gov.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000767446
- https://www.publictendersscotland.publiccontractsscotland.gov.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000767446. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000767446.json.