Contract

NP606825 Cycognito Surface Attack Monitoring Tool

  • The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

F03: Contract award notice

Notice identifier: 2025/S 000-020866

Procurement identifier (OCID): ocds-h6vhtk-051211

Published 13 May 2025, 2:14pm



Section one: Contracting authority

one.1) Name and addresses

The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

1 South Gyle Crescent

Edinburgh

EH12 9EB

Email

andrew.thong@nhs.scot

Telephone

+44 1312756000

Country

United Kingdom

NUTS code

UKM - Scotland

Internet address(es)

Main address

http://www.nss.nhs.scot/browse/procurement-and-logistics

Buyer's address

https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA11883

one.2) Information about joint procurement

The contract is awarded by a central purchasing body

one.4) Type of the contracting authority

Body governed by public law

one.5) Main activity

Health


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

NP606825 Cycognito Surface Attack Monitoring Tool

two.1.2) Main CPV code

  • 72000000 - IT services: consulting, software development, Internet and support

two.1.3) Type of contract

Services

two.1.4) Short description

Provision of the Attack Surface Management platform and associated supporting activities.

two.1.6) Information about lots

This contract is divided into lots: No

two.1.7) Total value of the procurement (excluding VAT)

Value excluding VAT: £52,091

two.2) Description

two.2.3) Place of performance

NUTS codes
  • UKM - Scotland

two.2.4) Description of the procurement

This product highlights vulnerabilities that could be exploited by cyber attackers. This information is available in a disparate form to those who seek to harness it, but Cycognito manages it and presents it in a risk prioritised manner.

This has been procured using the Scottish Government Software Value Added Reseller Services Framework.

two.2.5) Award criteria

Price

two.2.11) Information about options

Options: No

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Award of a contract without prior publication of a call for competition in the cases listed below

  • The services can be provided only by a particular economic operator for the following reason:
    • protection of exclusive rights, including intellectual property rights

Explanation:

This is a new contract with the existing supplier.

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes


Section five. Award of contract

A contract/lot is awarded: Yes

five.2) Award of contract

five.2.1) Date of conclusion of the contract

1 April 2025

five.2.2) Information about tenders

Number of tenders received: 1

Number of tenders received from SMEs: 0

Number of tenders received from tenderers from other EU Member States: 0

Number of tenders received from tenderers from non-EU Member States: 1

Number of tenders received by electronic means: 1

The contract has been awarded to a group of economic operators: No

five.2.3) Name and address of the contractor

Computacenter

Haston House, 2 Redheughs Rigg, South Gyle

Edinburgh

EH12 9DQ

Telephone

+44 1313172373

Country

United Kingdom

NUTS code
  • UK - United Kingdom
The contractor is an SME

No

five.2.4) Information on value of contract/lot (excluding VAT)

Total value of the contract/lot: £52,091


Section six. Complementary information

six.3) Additional information

(SC Ref:798527)

six.4) Procedures for review

six.4.1) Review body

Sheriff Court House

27 Chambers Street

Edinburgh

EH1 1LB

Country

United Kingdom

six.4.3) Review procedure

Precise information on deadline(s) for review procedures

Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts:

An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts(Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.