Contract award notice
Results of the procurement procedure
Section I: Contracting 
        entity
      
I.1) Name and addresses
  City of Edinburgh Council
  Waverley Court
  Edinburgh
  EH8 8BG
  UK
  
            Contact person: Shane Newell
  
            E-mail: shane.newell@edinburgh.gov.uk
  
            NUTS: UKM75
  Internet address(es)
  
              Main address: http://www.edinburgh.gov.uk
  
              Address of the buyer profile: https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspxD=AA00290
 
I.4) Type of the contracting authority
Regional or local authority
I.5) Main activity
General public services
Section II: Object
II.1) Scope of the procurement
  II.1.1) Title
Cyber Security Assurance Services Framework
            Reference number: CT1218
  II.1.2) Main CPV code
  72000000
 
  II.1.3) Type of contract
  Services
  II.1.4) Short description
  The City of Edinburgh Council is awarding a robust Framework for the procurement of secure digital services. It aims to enhance the Councils ability to assess and select IT service providers that meet stringent security requirements, ensuring the delivery of secure and reliable digital services.
  II.1.6) Information about lots
  
            This contract is divided into lots:
            
        Yes
      
  II.1.7) Total value of the procurement
  Value excluding VAT: 
				750 000.00 
				  GBP
 
II.2) Description
  
          Lot No: 1
  
    II.2.1) Title
    Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
    II.2.2) Additional CPV code(s)
    72000000
    II.2.3) Place of performance
    NUTS code:
    UKM75
    II.2.4) Description of the procurement
    The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
    These include:
    - Penetration testing and vulnerability assessments against industry standards at application, component, and full stack levels, and
    - Security assurance and reporting of proposed new technologies and services.
    Suppliers must also provide:
    - Advice and consultation on proposed and existing cloud developments,
    - Advice and consultation on proposed and existing cloud infrastructure configurations, and
    - Advice and consultation on cloud technologies to support ongoing management of our cloud operations.
    II.2.5) Award criteria
    
                    Quality criterion: Delivery of Services
                    / Weighting: 30
    
                    Quality criterion: Advice and Consultancy
                    / Weighting: 30
    
                    Quality criterion: Account Management and Staffing
                    / Weighting: 15
    
                    Quality criterion: Business continuity
                    / Weighting: 10
    
                    Quality criterion: The Environment
                    / Weighting: 5
    
                    Quality criterion: Fair Work Practices
                    / Weighting: 5
    
                    Quality criterion: Community Benefits
                    / Weighting: 5
    
                    Price
                    
                      / Weighting: 
                      50
    II.2.11) Information about options
    
            Options:
            
              No
            
    II.2.13) Information about European Union funds
    
            The procurement is related to a project and/or programme financed by European Union funds:
            
              No
            
   
  
          Lot No: 2
  
    II.2.1) Title
    Incident Response, Digital Forensics, Data Breach Assessment & Recovery
    II.2.2) Additional CPV code(s)
    72000000
    II.2.3) Place of performance
    NUTS code:
    UKM75
    II.2.4) Description of the procurement
    The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
    These include:
    - Incident Response,
    - Digital Forensics,
    - Data Breach Assessment and Recovery.
    II.2.5) Award criteria
    
                    Quality criterion: Quality from Lot 1
                    / Weighting: 50
    
                    Price
                    
                      / Weighting: 
                      50
    II.2.11) Information about options
    
            Options:
            
              No
            
    II.2.13) Information about European Union funds
    
            The procurement is related to a project and/or programme financed by European Union funds:
            
              No
            
   
  
          Lot No: 3
  
    II.2.1) Title
    Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
    II.2.2) Additional CPV code(s)
    72000000
    II.2.3) Place of performance
    NUTS code:
    UKM75
    II.2.4) Description of the procurement
    The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
    These include:
    - Security Audit – PCI,
    - Security Architecture/Design Review,
    - Compliance and Regulatory Services.
    II.2.5) Award criteria
    
                    Quality criterion: Quality from Lot 1
                    / Weighting: 50
    
                    Price
                    
                      / Weighting: 
                      50
    II.2.11) Information about options
    
            Options:
            
              No
            
    II.2.13) Information about European Union funds
    
            The procurement is related to a project and/or programme financed by European Union funds:
            
              No
            
   
  
          Lot No: 4
  
    II.2.1) Title
    Threat Intelligence
    II.2.2) Additional CPV code(s)
    72000000
    II.2.3) Place of performance
    NUTS code:
    UKM75
    II.2.4) Description of the procurement
    The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
    These include:
    - Threat Intelligence
    II.2.5) Award criteria
    
                    Quality criterion: Quality from Lot 1
                    / Weighting: 50
    
                    Price
                    
                      / Weighting: 
                      50
    II.2.11) Information about options
    
            Options:
            
              No
            
    II.2.13) Information about European Union funds
    
            The procurement is related to a project and/or programme financed by European Union funds:
            
              No
            
   
  
          Lot No: 5
  
    II.2.1) Title
    Vulnerability Assessments
    II.2.2) Additional CPV code(s)
    72000000
    II.2.3) Place of performance
    NUTS code:
    UKM75
    II.2.4) Description of the procurement
    The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
    These include:
    - Vulnerability Assessments
    II.2.5) Award criteria
    
                    Quality criterion: Quality from Lot 1
                    / Weighting: 50
    
                    Price
                    
                      / Weighting: 
                      50
    II.2.11) Information about options
    
            Options:
            
              No
            
    II.2.13) Information about European Union funds
    
            The procurement is related to a project and/or programme financed by European Union funds:
            
              No
            
   
  
          Lot No: 6
  
    II.2.1) Title
    Data & Hardware Sanitisation
    II.2.2) Additional CPV code(s)
    72000000
    II.2.3) Place of performance
    NUTS code:
    UKM75
    II.2.4) Description of the procurement
    The City of Edinburgh Council intends to establish a Framework Agreement that will provide the Council with a range of ICT information and system security assessments.
    These include:
    - Data and Hardware Sanitisation
    II.2.5) Award criteria
    
                    Quality criterion: Quality from Lot 1
                    / Weighting: 50
    
                    Price
                    
                      / Weighting: 
                      50
    II.2.11) Information about options
    
            Options:
            
              No
            
    II.2.13) Information about European Union funds
    
            The procurement is related to a project and/or programme financed by European Union funds:
            
              No
            
   
 
Section IV: Procedure
IV.1) Description
  IV.1.1) Type of procedure
  
                        Restricted procedure
                        
  
                    IV.1.3) Information about a framework agreement or a dynamic purchasing system
                  
  The procurement involves the establishment of a framework agreement
  IV.1.8) Information about Government Procurement Agreement (GPA)
  
                The procurement is covered by the Government Procurement Agreement:
                
        Yes
      
 
IV.2) Administrative information
  IV.2.1) Previous publication concerning this procedure
  Notice number in the OJ S:
  2024/S 000-020020
 
Section V: Award of contract
          Lot No: 1
          Title: Essential Services: Penetration Testing, Security Assurance & Reporting, Advice & Consultation
        A contract/lot is awarded:
        
        Yes
      
V.2 Award of contract
V.2.1) Date of conclusion of the contract
06/08/2025
V.2.2) Information about tenders
                Number of tenders received: 4
                Number of tenders received from SMEs: 4
                Number of tenders received from tenderers from EU Member States: 0
                Number of tenders received from tenderers from non-EU Member States: 4
                Number of tenders received by electronic means: 4
              The contract has been awarded to a group of economic operators:
              
        Yes
      
V.2.3) Name and address of the contractor
  Trustmarque Solutions Ltd
  Marlborough House, Westminster Place, York Business Park,
  York.
  YO26 6RW
  UK
  
            NUTS: UKE21
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  Redcentric Solutions Limited
  Central House, Beckwith Knowle
  Harrogate
  HG3 1UG
  UK
  
            NUTS: UKE2
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  NCC Group Security Services Limited
  XYZ Building, 2 Hardman Boulevard, Spinningfields,
  MANCHESTER
  M3 3AQ
  UK
  
            NUTS: UK
  The contractor is an SME:
        No
      
 
V.2.3) Name and address of the contractor
  Entserv UK Ltd
  Royal Pavilion, Wellesley Road
  Aldershot
  GU11 1PZ
  UK
  
            NUTS: UK
  The contractor is an SME:
        Yes
      
 
                V.2.4) Information on value of the contract/lot (excluding VAT)
              
Total value of the contract/lot: 
					: 750 000.00 
					  GBP
V.2.5) Information about subcontracting
Section V: Award of contract
          Lot No: 2
          Title: Incident Response, Digital Forensics, Data Breach Assessment & Recovery
        A contract/lot is awarded:
        
        Yes
      
V.2 Award of contract
V.2.1) Date of conclusion of the contract
06/08/2025
V.2.2) Information about tenders
                Number of tenders received: 3
                Number of tenders received from SMEs: 3
                Number of tenders received from tenderers from EU Member States: 0
                Number of tenders received from tenderers from non-EU Member States: 3
                Number of tenders received by electronic means: 3
              The contract has been awarded to a group of economic operators:
              
        Yes
      
V.2.3) Name and address of the contractor
  Redcentric Solutions Limited
  Central House, Beckwith Knowle
  Harrogate
  HG3 1UG
  UK
  
            NUTS: UKE2
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  NCC Group Security Services Limited
  XYZ Building, 2 Hardman Boulevard, Spinningfields,
  MANCHESTER
  M3 3AQ
  UK
  
            NUTS: UK
  The contractor is an SME:
        No
      
 
V.2.3) Name and address of the contractor
  Entserv UK Ltd
  Royal Pavilion, Wellesley Road
  Aldershot
  GU11 1PZ
  UK
  
            NUTS: UK
  The contractor is an SME:
        Yes
      
 
                V.2.4) Information on value of the contract/lot (excluding VAT)
              
Total value of the contract/lot: 
					: 750 000.00 
					  GBP
V.2.5) Information about subcontracting
Section V: Award of contract
          Lot No: 3
          Title: Security Audit – PCI, Security Architecture/Design Review, Compliance & Regulatory Services.
        A contract/lot is awarded:
        
        Yes
      
V.2 Award of contract
V.2.1) Date of conclusion of the contract
06/08/2025
V.2.2) Information about tenders
                Number of tenders received: 4
                Number of tenders received from SMEs: 4
                Number of tenders received from tenderers from EU Member States: 0
                Number of tenders received from tenderers from non-EU Member States: 4
                Number of tenders received by electronic means: 4
              The contract has been awarded to a group of economic operators:
              
        Yes
      
V.2.3) Name and address of the contractor
  Trustmarque Solutions Ltd
  Marlborough House, Westminster Place, York Business Park,
  York.
  YO26 6RW
  UK
  
            NUTS: UKE21
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  Redcentric Solutions Limited
  Central House, Beckwith Knowle
  Harrogate
  HG3 1UG
  UK
  
            NUTS: UKE2
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  NCC Group Security Services Limited
  XYZ Building, 2 Hardman Boulevard, Spinningfields,
  MANCHESTER
  M3 3AQ
  UK
  
            NUTS: UK
  The contractor is an SME:
        No
      
 
V.2.3) Name and address of the contractor
  Entserv UK Ltd
  Royal Pavilion, Wellesley Road
  Aldershot
  GU11 1PZ
  UK
  
            NUTS: UK
  The contractor is an SME:
        Yes
      
 
                V.2.4) Information on value of the contract/lot (excluding VAT)
              
Total value of the contract/lot: 
					: 750 000.00 
					  GBP
V.2.5) Information about subcontracting
Section V: Award of contract
          Lot No: 4
          Title: Threat Intelligence
        A contract/lot is awarded:
        
        Yes
      
V.2 Award of contract
V.2.1) Date of conclusion of the contract
06/08/2025
V.2.2) Information about tenders
                Number of tenders received: 4
                Number of tenders received from SMEs: 4
                Number of tenders received from tenderers from EU Member States: 0
                Number of tenders received from tenderers from non-EU Member States: 4
                Number of tenders received by electronic means: 4
              The contract has been awarded to a group of economic operators:
              
        Yes
      
V.2.3) Name and address of the contractor
  Trustmarque Solutions Ltd
  Marlborough House, Westminster Place, York Business Park,
  York.
  YO26 6RW
  UK
  
            NUTS: UKE21
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  Redcentric Solutions Limited
  Central House, Beckwith Knowle
  Harrogate
  HG3 1UG
  UK
  
            NUTS: UKE2
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  NCC Group Security Services Limited
  XYZ Building, 2 Hardman Boulevard, Spinningfields,
  MANCHESTER
  M3 3AQ
  UK
  
            NUTS: UK
  The contractor is an SME:
        No
      
 
V.2.3) Name and address of the contractor
  Entserv UK Ltd
  Royal Pavilion, Wellesley Road
  Aldershot
  GU11 1PZ
  UK
  
            NUTS: UK
  The contractor is an SME:
        Yes
      
 
                V.2.4) Information on value of the contract/lot (excluding VAT)
              
Total value of the contract/lot: 
					: 750 000.00 
					  GBP
V.2.5) Information about subcontracting
Section V: Award of contract
          Lot No: 5
          Title: Vulnerability Assessments
        A contract/lot is awarded:
        
        Yes
      
V.2 Award of contract
V.2.1) Date of conclusion of the contract
06/08/2025
V.2.2) Information about tenders
                Number of tenders received: 4
                Number of tenders received from SMEs: 4
                Number of tenders received from tenderers from EU Member States: 0
                Number of tenders received from tenderers from non-EU Member States: 4
                Number of tenders received by electronic means: 4
              The contract has been awarded to a group of economic operators:
              
        Yes
      
V.2.3) Name and address of the contractor
  Trustmarque Solutions Ltd
  Marlborough House, Westminster Place, York Business Park,
  York.
  YO26 6RW
  UK
  
            NUTS: UKE21
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  Redcentric Solutions Limited
  Central House, Beckwith Knowle
  Harrogate
  HG3 1UG
  UK
  
            NUTS: UKE2
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  NCC Group Security Services Limited
  XYZ Building, 2 Hardman Boulevard, Spinningfields,
  MANCHESTER
  M3 3AQ
  UK
  
            NUTS: UK
  The contractor is an SME:
        No
      
 
V.2.3) Name and address of the contractor
  Entserv UK Ltd
  Royal Pavilion, Wellesley Road
  Aldershot
  GU11 1PZ
  UK
  
            NUTS: UK
  The contractor is an SME:
        Yes
      
 
                V.2.4) Information on value of the contract/lot (excluding VAT)
              
Total value of the contract/lot: 
					: 750 000.00 
					  GBP
V.2.5) Information about subcontracting
Section V: Award of contract
          Lot No: 6
          Title: Data & Hardware Sanitisation
        A contract/lot is awarded:
        
        Yes
      
V.2 Award of contract
V.2.1) Date of conclusion of the contract
06/08/2025
V.2.2) Information about tenders
                Number of tenders received: 4
                Number of tenders received from SMEs: 4
                Number of tenders received from tenderers from EU Member States: 0
                Number of tenders received from tenderers from non-EU Member States: 4
                Number of tenders received by electronic means: 4
              The contract has been awarded to a group of economic operators:
              
        Yes
      
V.2.3) Name and address of the contractor
  Trustmarque Solutions Ltd
  Marlborough House, Westminster Place, York Business Park,
  York.
  YO26 6RW
  UK
  
            NUTS: UKE21
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  Redcentric Solutions Limited
  Central House, Beckwith Knowle
  Harrogate
  HG3 1UG
  UK
  
            NUTS: UKE2
  The contractor is an SME:
        Yes
      
 
V.2.3) Name and address of the contractor
  NCC Group Security Services Limited
  XYZ Building, 2 Hardman Boulevard, Spinningfields,
  MANCHESTER
  M3 3AQ
  UK
  
            NUTS: UK
  The contractor is an SME:
        No
      
 
V.2.3) Name and address of the contractor
  Entserv UK Ltd
  Royal Pavilion, Wellesley Road
  Aldershot
  GU11 1PZ
  UK
  
            NUTS: UK
  The contractor is an SME:
        Yes
      
 
                V.2.4) Information on value of the contract/lot (excluding VAT)
              
Total value of the contract/lot: 
					: 750 000.00 
					  GBP
V.2.5) Information about subcontracting
Section VI: Complementary information
VI.3) Additional information
Contained in tender documentation
(SC Ref:806607)
VI.4) Procedures for review
  VI.4.1) Review body
  
    Sheriff Court
    Sheriff Court House, 27 Chambers Street
    Edinburgh
    EH1 1LB
    UK
   
  VI.4.3) Review procedure
  Precise information on deadline(s) for review procedures:
  An economic operator that suffers or risks suffering loss or damage attributable to a breach of duty under Public Contracts (Scotland) Regulations 2015 may bring proceedings in the Sheriff Court or Court of Session. A claim for an ineffectiveness order must be made within 30 days of the Contract Award Notice being published in the Find a Tender Service within 30 days of the date those who expressed an interest in or otherwise bid for the contract were informed of the conclusion of the contract or in any other case within 6 months from the date on which the contract was entered into.
 
VI.5) Date of dispatch of this notice
06/08/2025