---
title: "Cyber Assessment Framework Independent Assurance"
ocid: "ocds-r6ebe6-0000845488"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000845488"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000845488.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000845488.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "Social Security Scotland"
published: "2026-10-12"
---

# Cyber Assessment Framework Independent Assurance

Buyer: Social Security Scotland  
Current stage: Award  
OCID: ocds-r6ebe6-0000845488

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000845488)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000845488.json)

## Summary

Social Security Scotland procured independent cyber resilience audits of its digital systems and architecture, carried out in line with the Scottish Government’s GovAssure process. This is a specialist cyber security assurance service: the work involves assessing the agency’s systems and architecture rather than supplying general IT support. The requirement was managed by Social Security Scotland, whose base is in Dundee, and delivery is identified as being in Scotland. It was let as one requirement. Community benefits form part of the contract; the expected benefits depend on the value and volume of assessments requested.

The procurement is complete and has been awarded to Deloitte LLP. The contract is active and was signed on 1 October 2026, with a contract value of £150,000. The award date and contract period are not stated. The competition used a restricted procedure under the Cyber Security Services 3 framework. There was one lot, covering audits of the agency’s digital systems and architecture, with two optional one-year extensions. Four bids were received. The published outcome does not give the evaluation criteria or the awarded contract duration, so the £150,000 is the stated contract value rather than a value for an expressly defined term.

For suppliers competing for a future requirement of this kind, credibility rests on being able to deliver independent cyber resilience audits against the GovAssure process and assess both digital systems and architecture. This award shows that Social Security Scotland buys specialist assurance through a restricted competition using the Cyber Security Services 3 framework, rather than sourcing general cyber support through an unrestricted tender. A capable competitor would need suitable cyber security assessment expertise, the capacity to undertake audits of a public agency’s technology environment, and the ability to provide assurance independently. The requirement was substantial enough to attract four bids and included community benefits linked to the volume and value of assessments. Suppliers able to combine specialist audit capability with delivery of those benefits would be well placed when this buyer next needs comparable assurance.

## Notice

The provision of cyber resilience audits in-line with the Gov Assure process.

### Lot Information

Lot 1

Provision of cyber resilience audits of the agency's digital systems and architecture in-line with the Gov Assure process.

Options: Two additional optional extension periods of one year each.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT566504 |
| Notice type | PCS Notice - Website Contract Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Restricted procedure |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 12 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £150,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Social Security Scotland |
| Locality | DUNDEE |
| Postcode area | Dundee |
| Postcode | DD1 4BF |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM0 Eastern Scotland |
| ITL 3 | TLM03 Angus and Dundee City |
| Local authority | Dundee City |
| Electoral ward | West End |
| Westminster constituency | Dundee Central |
| Delivery location | TLM Scotland |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Deloitte LLP |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72225000 - System quality assurance assessment and review services

## Release History

- 12 Oct 2026 at 01:00 - Award - PCS Notice - Website Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT566504

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT566504
  Cyber Assessment Framework Independent Assurance - The provision of cyber resilience audits in-line with the Gov Assure process.

## Notice URLs

- http://
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000845488
- https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/
- https://www.socialsecurity.gov.scot/

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000845488. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000845488.json.