--- title: "SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement" ocid: "ocds-r6ebe6-0000834888" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000834888" markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000834888.md" json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000834888.json" source: "Public Contracts Scotland" current_stage: "Tender" buyer: "SCOTTISH PRISON SERVICE" published: "2026-06-18" --- # SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement Buyer: SCOTTISH PRISON SERVICE Current stage: Tender OCID: ocds-r6ebe6-0000834888 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000834888) [Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000834888.json) ## Summary The Scottish Prison Service (SPS) is inviting tenders for the provision of IT Health Check Services under the "SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement". This initiative is focused on enhancing IT security through measures like penetration testing, vulnerability scanning, and security assessments, ensuring continued accreditation to PSN(P) and CE+. The tender falls under the Public Order and Safety industry category with crucial services classified under CPV code 72000000, highlighting its significance in ensuring secure operations. Located in Edinburgh, UKM region, this open procurement process allows for electronic submission of bids until 22 July 2026. The procurement stage is currently active under the open procedure, with a contract expected to begin the same day that submissions close, on 22 July 2026. This framework agreement opens growth opportunities for businesses that specialise in IT security services, particularly those experienced in conducting IT Health Checks and achieving Cyber Essentials accreditation. It offers the chance to become one of three suppliers tasked with maintaining crucial IT security standards for SPS. Companies with expertise in cybersecurity, penetration testing, and IT governance will be well-suited to compete. Engaging in this procurement process can yield substantial growth, particularly for firms looking to expand their public sector client base and secure long-term contracts over the potential three-year duration of this framework, extendable by an additional year. ## Notice The SPS requires Suppliers to deliver on-site IT Health Check Services, including internal and external penetration testing, vulnerability scanning, and security assessments across its networks, systems and data centres, with clear reporting and remediation guidance. The Framework Agreement may also be used for related ad-hoc IT security work. This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation. ### Lot Information Lot 1 The SPS shall commence this procurement process in good faith and with the intention of awarding a contract. Following publication of the Contract Notice, an Invitation to Tender (ITT) will be published by SPS and will be made available to bidders on Public Contract Scotland - Tender (PCS-T). Tender responses will then be evaluated by the SPS in accordance with the ITT. Renewal: 12 months ## Key Details | Field | Value | | --- | --- | | Publication source | Public Contracts Scotland | | Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN558273 | | Notice type | OJEU - F2 - Contract Notice | | Procurement type | Framework | | Procurement category | Services | | Procurement method | Open | | Procurement method details | Open procedure | | Tender suitability | Not specified | | Awardee scale | Not specified | | All stages | Tender | ## Dates | Field | Value | | --- | --- | | Publication date | 18 Jun 2026 | | Submission deadline | 22 Jul 2026 | | Future notice date | Not specified | | Award date | Not specified | | Contract period | Not specified | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | Not specified | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Active | | Lots status | Active | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | SCOTTISH PRISON SERVICE | | Locality | EDINBURGH | | Post town | Edinburgh | | Postcode | EH12 9DJ | | Country | Scotland | | ITL 1 | TLM Scotland | | ITL 2 | TLM1 East Central Scotland | | ITL 3 | TLM13 City of Edinburgh | | Local authority | City of Edinburgh | | Electoral ward | Drum Brae/Gyle | | Westminster constituency | Edinburgh West | | Delivery location | TLM Scotland | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72000000 - IT services: consulting, software development, Internet and support ## Release History - 18 Jun 2026 at 00:00 - Tender - OJEU - F2 - Contract Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN558273 ## Documents - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=JUN558273 SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement - The SPS requires Suppliers to deliver on-site IT Health Check Services, including internal and external penetration testing, vulnerability scanning, and security assessments across its networks, systems and data centres, with clear reporting and remediation guidance. The Framework Agreement may also be used for related ad-hoc IT security work. This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation. ## Notice URLs - http:// - http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343 - http://www.sps.gov.uk - https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000834888 - https://www.publictendersscotland.publiccontractsscotland.gov.uk ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000834888. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000834888.json.