---
title: "PCI QSA pro 2026"
ocid: "ocds-r6ebe6-0000827084"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000827084"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000827084.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000827084.json"
source: "Public Contracts Scotland"
current_stage: "Tender"
buyer: "GLASGOW CITY COUNCIL"
published: "2026-04-15"
---

# PCI QSA pro 2026

Buyer: GLASGOW CITY COUNCIL  
Current stage: Tender  
OCID: ocds-r6ebe6-0000827084

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000827084)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000827084.json)

## Summary

Glasgow City Council has initiated a procurement process seeking a supplier to validate compliance with the Payment Card Industry Data Security Standard (PCI DSS). This tender, titled "PCI QSA Pro 2026," falls under the general public services category and targets businesses in the services sector. The procurement employs an open procedure method, with electronic submissions to be made through the Public Contracts Scotland Portal (PCS-T). Bids are to be submitted by 19 May 2026, with contract awards commencing on the same day. The contract duration spans from 11 June 2026 to 11 June 2029, with the possibility of extension for up to 24 additional months. The primary focus is on ensuring the protection of cardholder data and obtaining relevant compliance documentation.

The tender presents a significant opportunity for businesses specialising in data security and compliance services. Companies with experience in conducting onsite assessments, technical testing, and providing ongoing support for PCI compliance are well-suited to compete. The contract requires a Qualified Security Assessor capable of conducting readiness reviews, technical testing, and issuing necessary reports such as Attestation of Compliance (AoC) and Report on Compliance (RoC). With an estimated value of £450,000, this tender offers promising growth potential for companies able to meet the rigorous technical and financial criteria set forth by the council. Businesses demonstrating past success in similar projects are encouraged to bid, providing a detailed methodology regarding community benefits as specified in the tender documentation.

## Notice

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds. This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

### Lot Information

Lot 1

The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council's compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of: i. Scoping and Readiness Review ii. Onsite Assessment Activities iii. Technical Testing iv. Documentation and Reporting v. ASV Scanning vi. Ongoing Support (Ad-hoc support) For further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST. Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Renewal: Option to extend for periods of up to an additional 24 months (in total) at the sole discretion of Glasgow City Council.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553880 |
| Notice type | OJEU - F2 - Contract Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 15 Apr 2026 |
| Submission deadline | 19 May 2026 |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 11 Jun 2026 - 11 Jun 2029 |
| Recurrence | This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards. |

## Values

| Field | Value |
| --- | --- |
| Tender value | £450,000 |
| Lots value | £450,000 |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Active |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | GLASGOW CITY COUNCIL |
| Additional buyers | GLASGOW LIFE (CULTURE & SPORT GLASGOW) |
| Locality | GLASGOW |
| Post town | Glasgow |
| Postcode | G2 1DU |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM3 West Central Scotland |
| ITL 3 | TLM32 Glasgow City |
| Local authority | Glasgow City |
| Electoral ward | Anderston/City/Yorkhill |
| Westminster constituency | Glasgow East |
| Delivery location | TLM82 Glasgow City |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support
- 79 - Business services: law, marketing, consulting, recruitment, printing and security

### Codes

- 72220000 - Systems and technical consultancy services
- 72222300 - Information technology services
- 79411000 - General management consultancy services

## Release History

- 15 Apr 2026 at 00:00 - Tender - OJEU - F2 - Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553880

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=APR553880
  PCI QSA pro 2026 - Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds. This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

## Notice URLs

- http://
- http://www.glasgow.gov.uk
- http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000827084
- https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/
- https://www.publictendersscotland.publiccontractsscotland.gov.uk

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000827084. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000827084.json.