Opportunity

Penetration testing and security consultancy

  • Scottish Natural Heritage

F02: Contract notice

Notice reference: 2021/S 000-001352

Published 22 January 2021, 2:56pm



Section one: Contracting authority

one.1) Name and addresses

Scottish Natural Heritage

Great Glen House, Leachkin Road

Inverness

IV3 8NW

Contact

Procurement Team

Email

contract.advertising@nature.scot

Telephone

+44 1463725097

Country

United Kingdom

NUTS code

UKM62 - Inverness & Nairn and Moray, Badenoch & Strathspey

Internet address(es)

Main address

http://www.nature.scot

Buyer's address

https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00383

one.2) Information about joint procurement

The contract is awarded by a central purchasing body

one.3) Communication

The procurement documents are available for unrestricted and full direct access, free of charge, at

www.publiccontractsscotland.gov.uk

Additional information can be obtained from the above-mentioned address

Tenders or requests to participate must be submitted electronically via

www.publiccontractsscotland.gov.uk

one.4) Type of the contracting authority

National or federal Agency/Office

one.5) Main activity

Environment


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

Penetration testing and security consultancy

Reference number

PP1165

two.1.2) Main CPV code

  • 72222300 - Information technology services

two.1.3) Type of contract

Services

two.1.4) Short description

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.

two.1.5) Estimated total value

Value excluding VAT: £150,000

two.1.6) Information about lots

This contract is divided into lots: No

two.2) Description

two.2.2) Additional CPV code(s)

  • 72222300 - Information technology services

two.2.3) Place of performance

NUTS codes
  • UKM - SCOTLAND

two.2.4) Description of the procurement

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.

The contract is also expected to be used by Forestry & Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS.

Full details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are:

- external/internal manual penetration testing, social engineering & firewall configuration/testing, PSN compliance

- advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review & certification

- automated penetration testing.

two.2.5) Award criteria

Quality criterion - Name: Quality / Weighting: 50

Price - Weighting: 50

two.2.6) Estimated value

Value excluding VAT: £150,000

two.2.7) Duration of the contract, framework agreement or dynamic purchasing system

Duration in months

24

This contract is subject to renewal

Yes

Description of renewals

Optional 12-month extension.

two.2.9) Information about the limits on the number of candidates to be invited

Envisaged number of candidates: 6

Objective criteria for choosing the limited number of candidates:

The number of candidates short-listed to Stage 2 (Invitation to Tender) will very much depend on the volume and quality of SPD responses received at Stage 1.

two.2.10) Information about variants

Variants will be accepted: No

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No

two.2.14) Additional information

All completed SPDs at Stage 1 must be submitted via the Public Contracts Scotland portal. Please ensure you allow enough time to upload your response.


Section three. Legal, economic, financial and technical information

three.1) Conditions for participation

three.1.2) Economic and financial standing

Minimum level(s) of standards possibly required

Please see Questions 4B5a, 4B5b & 4B5c of the SPD for details of insurance requirements. Evidence of cover will only be requested from the successful bidder(s).

three.1.3) Technical and professional ability

List and brief description of selection criteria

Please refer to Question 4C1.2 of the SPD for details of the weighted selection criterion that will be used to short-list candidates to Stage 2.

three.2) Conditions related to the contract

three.2.3) Information about staff responsible for the performance of the contract

Obligation to indicate the names and professional qualifications of the staff assigned to performing the contract


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Restricted procedure

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes

four.2) Administrative information

four.2.2) Time limit for receipt of tenders or requests to participate

Date

22 February 2021

Local time

5:00pm

four.2.3) Estimated date of dispatch of invitations to tender or to participate to selected candidates

1 March 2021

four.2.4) Languages in which tenders or requests to participate may be submitted

English

four.2.6) Minimum time frame during which the tenderer must maintain the tender

Duration in months: 3 (from the date stated for receipt of tender)


Section six. Complementary information

six.1) Information about recurrence

This is a recurrent procurement: No

six.2) Information about electronic workflows

Electronic ordering will be used

Electronic invoicing will be accepted

Electronic payment will be used

six.3) Additional information

This is a two-stage 'restricted' procurement exercise. Only completed SPDs are requested at this stage. The candidates providing the most suitable/relevant responses to Question 4C1.2 of the SPD, assuming they pass the SPD mandatory exclusion questions, will be short-listed to Stage 2 and invited to submit a formal tender.

NOTE: To register your interest in this notice and obtain any additional information please visit the Public Contracts Scotland Web Site at https://www.publiccontractsscotland.gov.uk/Search/Search_Switch.aspx?ID=641863.

The buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.publiccontractsscotland.gov.uk/sitehelp/help_guides.aspx.

Suppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems.

(SC Ref:641863)

Download the ESPD document here: https://www.publiccontractsscotland.gov.uk/ESPD/ESPD_Download.aspx?id=641863

six.4) Procedures for review

six.4.1) Review body

Inverness Sheriff Court

Inverness Justice Centre, Longman Road

Inverness

IV1 1AH

Email

inverness@scotcourts.gov.uk

Telephone

+44 1463230782

Country

United Kingdom