- Scope of the procurement
- Lot 1. Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
- Lot 2. Incident Response, Digital Forensics, Data Breach Assessment & Recovery
- Lot 3. Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
- Lot 4. Threat Intelligence
- Lot 5. Vulnerability Assessments
- Lot 6. Data & Hardware Sanitisation
Section one: Contracting authority
one.1) Name and addresses
City of Edinburgh Council
Waverley Court
Edinburgh
EH8 8BG
Contact
Shane Newell
Country
United Kingdom
NUTS code
UKM75 - Edinburgh, City of
Internet address(es)
Main address
Buyer's address
https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290
one.4) Type of the contracting authority
Regional or local authority
one.5) Main activity
General public services
Section two: Object
two.1) Scope of the procurement
two.1.1) Title
Cyber Security Assurance Services Framework
Reference number
CT1218
two.1.2) Main CPV code
- 72000000 - IT services: consulting, software development, Internet and support
two.1.3) Type of contract
Services
two.1.4) Short description
The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
two.1.6) Information about lots
This contract is divided into lots: Yes
two.1.7) Total value of the procurement (excluding VAT)
Value excluding VAT: £750,000
two.2) Description
two.2.1) Title
Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
Lot No
1
two.2.2) Additional CPV code(s)
- 72000000 - IT services: consulting, software development, Internet and support
two.2.3) Place of performance
NUTS codes
- UKM75 - Edinburgh, City of
two.2.4) Description of the procurement
The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
These include:
- Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and
- Security assurance and reporting of proposed new technologies and services.
Suppliers must also provide:
- Advice and consultation on proposed and existing cloud developments,
- Advice and consultation on proposed and existing cloud infrastructure configurations, and
- Advice and consultation on cloud technologies to support ongoing management of our cloud operations.
two.2.5) Award criteria
Quality criterion - Name: Delivery of Services / Weighting: 30
Quality criterion - Name: Advice and Consultancy / Weighting: 30
Quality criterion - Name: Account Management and Staffing / Weighting: 15
Quality criterion - Name: Business continuity / Weighting: 10
Quality criterion - Name: The Environment / Weighting: 5
Quality criterion - Name: Fair Work Practices / Weighting: 5
Quality criterion - Name: Community Benefits / Weighting: 5
Price - Weighting: 50
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Incident Response, Digital Forensics, Data Breach Assessment & Recovery
Lot No
2
two.2.2) Additional CPV code(s)
- 72000000 - IT services: consulting, software development, Internet and support
two.2.3) Place of performance
NUTS codes
- UKM75 - Edinburgh, City of
two.2.4) Description of the procurement
The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
These include:
- Incident Response,
- Digital Forensics,
- Data Breach Assessment and Recovery.
two.2.5) Award criteria
Quality criterion - Name: Quality from Lot 1 / Weighting: 50
Price - Weighting: 50
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
Lot No
3
two.2.2) Additional CPV code(s)
- 72000000 - IT services: consulting, software development, Internet and support
two.2.3) Place of performance
NUTS codes
- UKM75 - Edinburgh, City of
two.2.4) Description of the procurement
The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
These include:
- Security Audit – PCI,
- Security Architecture/Design Review,
- Compliance and Regulatory Services.
two.2.5) Award criteria
Quality criterion - Name: Quality from Lot 1 / Weighting: 50
Price - Weighting: 50
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Threat Intelligence
Lot No
4
two.2.2) Additional CPV code(s)
- 72000000 - IT services: consulting, software development, Internet and support
two.2.3) Place of performance
NUTS codes
- UKM75 - Edinburgh, City of
two.2.4) Description of the procurement
The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
These include:
- Threat Intelligence
two.2.5) Award criteria
Quality criterion - Name: Quality from Lot 1 / Weighting: 50
Price - Weighting: 50
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Vulnerability Assessments
Lot No
5
two.2.2) Additional CPV code(s)
- 72000000 - IT services: consulting, software development, Internet and support
two.2.3) Place of performance
NUTS codes
- UKM75 - Edinburgh, City of
two.2.4) Description of the procurement
The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
These include:
- Vulnerability Assessments
two.2.5) Award criteria
Quality criterion - Name: Quality from Lot 1 / Weighting: 50
Price - Weighting: 50
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Data & Hardware Sanitisation
Lot No
6
two.2.2) Additional CPV code(s)
- 72000000 - IT services: consulting, software development, Internet and support
two.2.3) Place of performance
NUTS codes
- UKM75 - Edinburgh, City of
two.2.4) Description of the procurement
The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
These include:
- Data and Hardware Sanitisation
two.2.5) Award criteria
Quality criterion - Name: Quality from Lot 1 / Weighting: 50
Price - Weighting: 50
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
Section four. Procedure
four.1) Description
four.1.1) Type of procedure
Restricted procedure
four.1.3) Information about a framework agreement or a dynamic purchasing system
The procurement involves the establishment of a framework agreement
four.1.8) Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement: Yes
four.2) Administrative information
four.2.1) Previous publication concerning this procedure
Notice number: 2024/S 000-020020
Section five. Award of contract
Lot No
1
Title
Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
6 August 2025
five.2.2) Information about tenders
Number of tenders received: 4
Number of tenders received from SMEs: 4
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 4
Number of tenders received by electronic means: 4
The contract has been awarded to a group of economic operators: Yes
five.2.3) Name and address of the contractor
Trustmarque Solutions Ltd
Marlborough House, Westminster Place, York Business Park,
York.
YO26 6RW
Country
United Kingdom
NUTS code
- UKE21 - York
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
Redcentric Solutions Limited
Central House, Beckwith Knowle
Harrogate
HG3 1UG
Country
United Kingdom
NUTS code
- UKE2 - North Yorkshire
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.3) Name and address of the contractor
Entserv UK Ltd
Royal Pavilion, Wellesley Road
Aldershot
GU11 1PZ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
Yes
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £750,000
Section five. Award of contract
Lot No
3
Title
Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
6 August 2025
five.2.2) Information about tenders
Number of tenders received: 4
Number of tenders received from SMEs: 4
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 4
Number of tenders received by electronic means: 4
The contract has been awarded to a group of economic operators: Yes
five.2.3) Name and address of the contractor
Trustmarque Solutions Ltd
Marlborough House, Westminster Place, York Business Park,
York.
YO26 6RW
Country
United Kingdom
NUTS code
- UKE21 - York
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
Redcentric Solutions Limited
Central House, Beckwith Knowle
Harrogate
HG3 1UG
Country
United Kingdom
NUTS code
- UKE2 - North Yorkshire
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.3) Name and address of the contractor
Entserv UK Ltd
Royal Pavilion, Wellesley Road
Aldershot
GU11 1PZ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
Yes
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £750,000
Section five. Award of contract
Lot No
4
Title
Threat Intelligence
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
6 August 2025
five.2.2) Information about tenders
Number of tenders received: 4
Number of tenders received from SMEs: 4
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 4
Number of tenders received by electronic means: 4
The contract has been awarded to a group of economic operators: Yes
five.2.3) Name and address of the contractor
Trustmarque Solutions Ltd
Marlborough House, Westminster Place, York Business Park,
York.
YO26 6RW
Country
United Kingdom
NUTS code
- UKE21 - York
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
Redcentric Solutions Limited
Central House, Beckwith Knowle
Harrogate
HG3 1UG
Country
United Kingdom
NUTS code
- UKE2 - North Yorkshire
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.3) Name and address of the contractor
Entserv UK Ltd
Royal Pavilion, Wellesley Road
Aldershot
GU11 1PZ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
Yes
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £750,000
Section five. Award of contract
Lot No
5
Title
Vulnerability Assessments
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
6 August 2025
five.2.2) Information about tenders
Number of tenders received: 4
Number of tenders received from SMEs: 4
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 4
Number of tenders received by electronic means: 4
The contract has been awarded to a group of economic operators: Yes
five.2.3) Name and address of the contractor
Trustmarque Solutions Ltd
Marlborough House, Westminster Place, York Business Park,
York.
YO26 6RW
Country
United Kingdom
NUTS code
- UKE21 - York
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
Redcentric Solutions Limited
Central House, Beckwith Knowle
Harrogate
HG3 1UG
Country
United Kingdom
NUTS code
- UKE2 - North Yorkshire
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.3) Name and address of the contractor
Entserv UK Ltd
Royal Pavilion, Wellesley Road
Aldershot
GU11 1PZ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
Yes
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £750,000
Section five. Award of contract
Lot No
6
Title
Data & Hardware Sanitisation
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
6 August 2025
five.2.2) Information about tenders
Number of tenders received: 4
Number of tenders received from SMEs: 4
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 4
Number of tenders received by electronic means: 4
The contract has been awarded to a group of economic operators: Yes
five.2.3) Name and address of the contractor
Trustmarque Solutions Ltd
Marlborough House, Westminster Place, York Business Park,
York.
YO26 6RW
Country
United Kingdom
NUTS code
- UKE21 - York
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
Redcentric Solutions Limited
Central House, Beckwith Knowle
Harrogate
HG3 1UG
Country
United Kingdom
NUTS code
- UKE2 - North Yorkshire
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.3) Name and address of the contractor
Entserv UK Ltd
Royal Pavilion, Wellesley Road
Aldershot
GU11 1PZ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
Yes
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £750,000
Section five. Award of contract
Lot No
2
Title
Incident Response, Digital Forensics, Data Breach Assessment & Recovery
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
6 August 2025
five.2.2) Information about tenders
Number of tenders received: 3
Number of tenders received from SMEs: 3
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 3
Number of tenders received by electronic means: 3
The contract has been awarded to a group of economic operators: Yes
five.2.3) Name and address of the contractor
Redcentric Solutions Limited
Central House, Beckwith Knowle
Harrogate
HG3 1UG
Country
United Kingdom
NUTS code
- UKE2 - North Yorkshire
The contractor is an SME
Yes
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.3) Name and address of the contractor
Entserv UK Ltd
Royal Pavilion, Wellesley Road
Aldershot
GU11 1PZ
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
Yes
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £750,000
Section six. Complementary information
six.3) Additional information
Contained in tender documentation
(SC Ref:806607)
six.4) Procedures for review
six.4.1) Review body
Sheriff Court
Sheriff Court House, 27 Chambers Street
Edinburgh
EH1 1LB
Country
United Kingdom
six.4.3) Review procedure
Precise information on deadline(s) for review procedures
An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.