Skip to main content

We've saved some files called cookies on your device. These cookies are:

  • essential for the site to work
  • to help improve our website by collecting and reporting information on how you use it

We would also like to save some cookies to help tailor communications.

BETA
You're viewing an updated version of this service - your feedback will help us to improve it.

Contract Notice

PCI QSA pro 2026

  • First published: 16 April 2026
  • Last modified: 16 April 2026
  • Version: N/A
  • This file may not be fully accessible.

  •  

Information icon

The buyer is not using this website to administer the notice.

To record your interest or obtain additional information or documents please find instructions within the Full Notice Text. (NOTE: Contract Award Notices and Prior Information Notices do not normally require a response)

Information icon
You are viewing an expired notice.

Contents

Summary

OCID:
Published by:
Glasgow City Council
Authority ID:
AA20167
Publication date:
16 April 2026
Deadline date:
19 May 2026
Notice type:
Contract Notice
Has documents:
No
Has SPD:
No
Has Carbon Reduction Plan:
N/A

Abstract

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds.

This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

Full notice text

Contract notice

Section I: Contracting authority

I.1) Name and addresses

Glasgow City Council

40 John St, City Chambers

Glasgow

G2 1DU

UK

Contact person: Allan Weir

Telephone: +44 1412876426

E-mail: Allan.Weir@glasgow.gov.uk

NUTS: UKM82

Internet address(es)

Main address: www.glasgow.gov.uk

Address of the buyer profile: https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00196

I.1) Name and addresses

Glasgow Life (Culture & Sport Glasgow)

38 Albion Street

Glasgow

G1 1LH

UK

Telephone: +44 1412875923

E-mail: info@glasgowlife.org.uk

NUTS: UKM82

Internet address(es)

Main address: www.glasgowlife.org.uk

Address of the buyer profile: https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA10287

I.2) Joint procurement

The contract involves joint procurement

I.3) Communication

The procurement documents are available for unrestricted and full direct access, free of charge at:

https://www.publictendersscotland.publiccontractsscotland.gov.uk


Additional information can be obtained from the abovementioned address


Tenders or requests to participate must be sent electronically to:

https://www.publictendersscotland.publiccontractsscotland.gov.uk


I.4) Type of the contracting authority

Regional or local authority

I.5) Main activity

General public services

Section II: Object

II.1) Scope of the procurement

II.1.1) Title

PCI QSA pro 2026

Reference number: GCC006549CPU

II.1.2) Main CPV code

72220000

 

II.1.3) Type of contract

Services

II.1.4) Short description

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds.

This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

II.1.5) Estimated total value

Value excluding VAT: 450 000.00  GBP

II.1.6) Information about lots

This contract is divided into lots: No

II.2) Description

II.2.2) Additional CPV code(s)

72220000

72222300

79411000

II.2.3) Place of performance

NUTS code:

UKM82

II.2.4) Description of the procurement

The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council’s compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of:

i. Scoping and Readiness Review

ii. Onsite Assessment Activities

iii. Technical Testing

iv. Documentation and Reporting

v. ASV Scanning

vi. Ongoing Support (Ad-hoc support)

For further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST

II.2.5) Award criteria

Criteria below:

Quality criterion: Quality / Weighting: 50

Quality criterion: Fair Work First / Weighting: 5

Cost criterion: Price / Weighting: 45

II.2.6) Estimated value

Value excluding VAT: 450 000.00  GBP

II.2.7) Duration of the contract, framework agreement or dynamic purchasing system

Start: 11/06/2026

End: 11/06/2029

This contract is subject to renewal: Yes

Description of renewals:

Option to extend for periods of up to an additional 24 months (in total) at the sole discretion of Glasgow City Council.

II.2.9) Information about the limits on the number of candidates to be invited

II.2.10) Information about variants

Variants will be accepted: No

II.2.11) Information about options

Options: No

II.2.13) Information about European Union funds

The procurement is related to a project and/or programme financed by European Union funds: No

II.2.14) Additional information

Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Section III: Legal, economic, financial and technical information

III.1) Conditions for participation

III.1.1) Suitability to pursue the professional activity, including requirements relating to enrolment on professional or trade registers

List and brief description of conditions:

Not applicable

III.1.2) Economic and financial standing

List and brief description of selection criteria:

Bidders must comply with the undernoted financial requirements in order to participate in the tendering process:-

SPD Section 4B: Economic and Financial Standing

SPD Questions:

4B.1 - Balance sheet and Trading Performance

4B.5 - Insurance

Request for Documentation: Once the Evaluation of Price and Quality has been completed, the recommended Bidder will be expected to provide all documentation as specified in the SPD. Bidders must supply the relevant information within 5 working days. Failure to provide this information within the specified time may result in your bid being rejected and the Council proceeding with the procurement exercise to the next appropriate bidder.


Minimum level(s) of standards required:

Bidders must comply with the undernoted financial requirements in order to participate in the tendering process:-

Trading Performance

An overall positive outcome on pre tax profits over a 3 year period. Exceptional items can be excluded from the calculation.

The above would be expressed in the ratio Pre-Tax Profit/Turnover

Balance Sheet strength

Net worth of the organisation must be positive at the time of evaluation and organisation must not be subject to an insolvency process. Intangibles can be included for purposes of the Total Assets figure. The above would be expressed in the ratio Total Assets/Total Liabilities

Bidders that are only required to file abbreviated accounts, must submit full sets of account for the last two individual years filed, in order for the three year profitability requirement to be verified

Bidder should have no outstanding issues, with regard to statutory filing requirements with Companies House.

Bidder who have been trading for less than the 3 years noted above must provide evidence that they are complying with the above minimum financial requirements for the period in which they have been trading.

The Council reserves the right at its own discretion to seek such other information from the Applicant in accordance with Regulation 61(7) or Regulation 61(8) of the Public Contracts (Scotland) Regulations 2015 to prove the Applicant’s economic and financial standing.

Any Bidder that fails to achieve or exceed the criteria as stated above will be excluded at this stage.

4B.5 It is a requirement of this contract that bidders hold, or can commit to obtain prior to the commencement of any subsequently awarded contract, the types and levels of insurance indicated below:

Professional Risk Indemnity: minimum 1 million GBP in respect of each claim and in the aggregate. To be maintained for 3. years on completion of their service.

Employer's (Compulsory) Liability: minimum 10million GBP in respect of each claim without limit to the number of claims.

Public Liability: minimum 5million GBP in respect of each claim without limit to the number of claims.

Please see the ITT for full details.

III.1.3) Technical and professional ability

List and brief description of selection criteria:

SPD Section 4C: Technical and Professional ability

SPD Questions:

4C.1.2 - Relevant examples

4C.10 - Proportion (%) to be Sub-Contracted


Minimum level(s) of standards required:

SPD 4C.1.2 Statement - Bidders will be required to provide examples that demonstrate that they have the relevant experience to deliver the services/supplies as described in part II.2.4 of the Find a Tender Service Contract Notice or the relevant section of the Site Notice.

Please provide two relevant examples of supplies and/or services carried out during the last three years as specified in the Contract Notice:

(Examples from both public and or private sector customers and clients may be provided).

Minimum number of relevant examples: 2

Maximum number of relevant examples: 2

Bidders shall be asked to provide the following information in relation to each of their relevant examples provided:

- Confirmation that the services were carried out during the timeframe set out in the question

- Information to demonstrate that the client was of a similar size and/or complexity to Glasgow City Council

- Description of the services delivered

- Information relating to key sub-contractors and / or specialist sub-contractors used

A response document is provided for full details to be provided.

Bidders responses to 4C.1.2 shall be evaluated and each of the two examples shall be evaluated individually. The Bidder must achieve a rating of at least 60 from the Scoring Methodology table provided in the ITT for each of the two examples provided individually, to be considered to have “passed” this question, ie, two examples each scoring at least 60. Failure to achieve a rating of at least 60 for each example provided shall see the Bidder excluded from further evaluation.

The scoring methodology for question 4C.1.2 is described in the ITT.

III.2) Conditions related to the contract

III.2.2) Contract performance conditions

Performance requirements related to this contract can be found within the Procurement Documents within the PCS-T portal.

III.2.3) Information about staff responsible for the performance of the contract

Obligation to indicate the names and professional qualifications of the staff assigned to performing the contract

Section IV: Procedure

IV.1) Description

IV.1.1) Type of procedure

Open procedure

IV.1.8) Information about Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes

IV.2) Administrative information

IV.2.2) Time limit for receipt of tenders or requests to participate

Date: 19/05/2026

Local time: 12:00

IV.2.4) Languages in which tenders or requests to participate may be submitted

EN

IV.2.6) Minimum time frame during which the tenderer must maintain the tender

Tender must be valid until: 16/09/2026

IV.2.7) Conditions for opening of tenders

Date: 19/05/2026

Local time: 12:00

Section VI: Complementary information

VI.1) Information about recurrence

This is a recurrent procurement: Yes

Estimated timing for further notices to be published:

This contract has an initial term of 36 months with options to extend for periods of up to 24 months (in total). Reprocurement may therefore take place any time from 2030 onwards.

VI.2) Information about electronic workflows

Electronic invoicing will be accepted

Electronic payment will be used

VI.3) Additional information

Freedom of Information Act — Information on the FOI Act is contained in Appendix A of the ITT. Bidders must note the implications of this legislation and ensure that any information they wish the council to consider withholding is specifically indicated on the FOI Certificate contained within Technical Envelope within tender portal (NB the council does not bind itself to withhold this information).

Tenderers Amendments — Bidders must enter any clause, condition, amendment to specification or any other qualification they may wish to make conditional to this offer. Bidders will be required to complete the tenderers amendment certificate that is contained as an attachment within PCS-T.

Non–Collusion- Bidders will be required to complete the Non-Collusion certificate contained as an attachment within PCS-T.

Prompt Payment Certificate - Bidders will be required to complete the Prompt Payment certificate contained as an attachment within PCS-T.

Insurance Mandate - All successful suppliers will be required to sign an Insurance Mandate, which will be issued in conjunction with the award letter authorising the Council to request copies of insurance documents from the supplier’s insurance provider. If the mandate is not signed and returned the Council reserves the right to request copies of insurance certificates from bidders at any point during the contract period. This is contained as an attachment within PCS-T.

Professional Integrity - Bidders will be required to answer questions related to professional integrity and to complete the Professional Integrity Certificate contained as an attachment within PCS-T.

Terms and Conditions are located within the attachments area of PCS-T.

Additional information pertaining to this contract notice is contained within the ITT documents. Bidders must ensure they read all attachments within the Buyers Attachments area in line with this contract notice.

The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 62240.

Community benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/

The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 62240. For more information see: http://www.publiccontractsscotland.gov.uk/info/InfoCentre.aspx?ID=2343

Community benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/

A summary of the expected community benefits has been provided as follows:

Community benefit outcomes for this contract are mandatory and will be based on minimum community benefits points -120. The minimum community benefits thresholds are set out in the Community Benefits Menu within the Buyer Attachment Area of PCS-T.

Bidders must confirm that they will meet these obligations in full by completing the relevant areas within the Community Benefits Menu.

Bidders are also required to provide a supporting Methodology for each of the Themes they are offering from the Menu, detailing how the

Community Benefit outcomes will be delivered.

The Community Benefits Menu and Methodology template can be found within the Community Benefits section on Public Contracts Scotland –

Tender (PCS-T).

(SC Ref:827084)

VI.4) Procedures for review

VI.4.1) Review body

Glasgow Sheriff Court & Justice of the Peace Court

PO BOX 23, 1 Carlton Place

Glasgow

G5 9DA

UK

E-mail: glasgow@scotcourts.gov.uk

VI.4.3) Review procedure

Precise information on deadline(s) for review procedures:

Glasgow City Council (“the Council”) must, by notice in writing as soon as possible after the decision has been made, inform all tenderers and candidates concerned of its decision to award the contract, conclude the framework agreement or establish a dynamic purchasing system. The Council must allow a period of at least the relevant standstill period (where the notice is sent by facsimile or electronic means the period is 10 days ending at midnight at the end of the 10th day after that on which the last notice is sent, when sent by other means the period is 15 days) to elapse between the date of despatch of the notice referred to in Regulation 85(1) of the Public Contracts (Scotland) Regulations 2015 (“the Regulations”). The Council is obliged to comply with the Regulations and any eligible economic operator can bring an action in the Sheriff Court or the Court of Session where as a consequence of a breach by the Council, suffers or risks suffering loss or damage. The bringing of court proceedings during the standstill period means that the Council must not enter into the contract, conclude the framework agreement or establish the dynamic purchasing system unless the proceedings are determined, discontinued or disposed of; or the court, by interim order, brings to an end the prohibition. The bringing of court proceedings after the standstill period has elapsed and the remedies that are available to the courts are detailed in the Regulations. Economic Operators can write to the Council seeking further clarification on the notice, to which the Council must respond within 15 days. Economic Operators should be mindful to seek their own independent legal advice when they consider appropriate to do so.

VI.5) Date of dispatch of this notice

15/04/2026

Coding

Commodity categories

ID Title Parent category
79411000 General management consultancy services Business and management consultancy services
72222300 Information technology services Information systems or technology strategic review and planning services
72220000 Systems and technical consultancy services Software programming and consultancy services

Delivery locations

ID Description
100 UK - All

Alert region restrictions

The buyer has restricted the alert for this notice to suppliers based in the following regions.

ID Description
There are no alert restrictions for this notice.

About the buyer

Main contact:
Allan.Weir@glasgow.gov.uk
Admin contact:
N/a
Technical contact:
N/a
Other contact:
N/a

Further information

Date Details
No further information has been uploaded.

0800 222 9004

Lines are open 8:30am to 5pm Monday to Friday.

Rydym yn croesawu galwadau'n Gymraeg.

We welcome calls in Welsh.