CONTRACT NOTICE – NATIONAL

1 Authority Details

1.1

Authority Name and Address

1.2

Address from which documentation may be obtained

1.3

Completed documents must be returned to:

2 Contract Details

2.1

Title

Request for Quotation - ISO27001 Internal Audit Provision

2.2

Description of the goods or services required

What is required?

Social Care Wales has held ISO 27001:2013 certification since 2008.We achieved our most recent triennial recertification in April 2021.

We are seeking to commission an internal audit service to support our ISO 27001:2103 compliance as set out below:

To conduct a phased risk based approach to the review consisting of:

- Audit of compliance with clauses 4 to 10 of the Standard being:

- Context of the organisation

- Leadership

- Planning

- Support

- Operation

- Performance evaluation

- Improvement

- Audit of compliance with the 114 control objectives contained within the Standard

Terms of engagement

- We are advised, by BSI, our certification body that this phase should require an expected fieldwork duration 3-4 days per annum which would cover clauses 4-10 of the Standard and all 114 control objectives contained within the Standard

- Audit dates should be agreed with the client

- Draft report should be provided within 10 working days of the completion of the audit

- Final report should be issued within 10 working days of issuing the draft re-port

- Will follow through any external certification audit findings and remedial ac-tions received by the client

See request for Quote for more information

NOTE: To register your interest in this notice and obtain any additional information please visit the Sell2Wales Web Site at https://www.sell2wales.gov.wales/Search/Search_Switch.aspx?ID=114567.

The buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.sell2wales.gov.wales/sitehelp/help_guides.aspx.

Suppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems.

2.3

Notice Coding and Classification

2.4

Total quantity or scope of tender

Budget:

There is a budget of up to £25,000 (inclusive of any applicable VAT) agreed for this quote.

The Supplier will provide full financial breakdown of the costs for consideration through the evaluation process. The fee quoted should specify:

- The number of days required to undertake each phase of the internal audit

- Proposed cycle/ number of visits (audits) over the duration of the contract

- The qualifications (ISMS lead auditor/ ISMS implementer) and experience of the auditing team

- Be inclusive of all disbursements

- Quote rates for any additional days, where agreed with Social Care Wales

Prices must be quoted in pounds sterling and clearly state if VAT will or will not be charged.

Length of contract:

The contract will run for three years with a first Audit to start in the period of January-March 2022

3 Conditions for Participation

3.1

Minimum standards and qualification required

4 Administrative Information

4.1

Type of Procedure

Single stage

4.2

Reference number attributed to the notice by the contracting authority

N/a

4.3

Time Limits

4.5

Language or languages in which tenders or requests to participate can be drawn up

4.6

Tender Submission Postbox

5 Other Information

5.1

Additional Information

(WA Ref:114567)

The buyer considers that this contract is suitable for consortia bidding.

5.2

Additional Documentation

5.3

Publication date of this notice