Skip to main content

We've saved some files called cookies on your device. These cookies are:

  • essential for the site to work
  • to help improve our website by collecting and reporting information on how you use it

We would also like to save some cookies to help tailor communications.

BETA
You're viewing an updated version of this service - your feedback will help us to improve it.

Contract Award Notice

PCI QSA pro 2026

  • First published: 08 September 2026
  • Last modified: 08 September 2026
  • Version: N/A
  •  

  • This file may not be fully accessible.

  •  

Information icon

The buyer is not using this website to administer the notice.

To record your interest or obtain additional information or documents please find instructions within the Full Notice Text. (NOTE: Contract Award Notices and Prior Information Notices do not normally require a response)

Contents

Summary

OCID:
Published by:
Glasgow City Council
Authority ID:
AA20167
Publication date:
08 September 2026
Deadline date:
-
Notice type:
Contract Award Notice
Has documents:
No
Has SPD:
No
Has Carbon Reduction Plan:
N/A

Abstract

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds.

This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

Full notice text

Contract award notice

Results of the procurement procedure

Section I: Contracting entity

I.1) Name and addresses

Glasgow City Council

40 John St, City Chambers

Glasgow

G2 1DU

UK

Contact person: Allan Weir

Telephone: +44 1412876426

E-mail: Allan.Weir@glasgow.gov.uk

NUTS: UKM82

Internet address(es)

Main address: www.glasgow.gov.uk

Address of the buyer profile: https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00196

I.1) Name and addresses

Glasgow Life (Culture & Sport Glasgow)

38 Albion Street

Glasgow

G1 1LH

UK

Telephone: +44 1412875923

E-mail: info@glasgowlife.org.uk

NUTS: UKM82

Internet address(es)

Main address: www.glasgowlife.org.uk

Address of the buyer profile: https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA10287

I.2) Joint procurement

The contract involves joint procurement

I.4) Type of the contracting authority

Regional or local authority

I.5) Main activity

General public services

Section II: Object

II.1) Scope of the procurement

II.1.1) Title

PCI QSA pro 2026

Reference number: GCC006549CPU

II.1.2) Main CPV code

72220000

 

II.1.3) Type of contract

Services

II.1.4) Short description

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds.

This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

II.1.6) Information about lots

This contract is divided into lots: No

II.1.7) Total value of the procurement

Value excluding VAT: 275 404.00  GBP

II.2) Description

II.2.2) Additional CPV code(s)

72220000

72222300

79411000

II.2.3) Place of performance

NUTS code:

UKM82

II.2.4) Description of the procurement

The council invites tender bids for the provision of PCI QSA pro 2026.Glasgow City Council requires a Qualified Security Assessor to validate Glasgow City Council’s compliance with the current version of the Payment Card Industry Data Security Standard (PCI DSS), ensure the protection of cardholder data, and obtain the required documentation, including the Attestation of Compliance (AoC) and Report on Compliance (RoC), for both roles the Council holds. At a high level the Services will consist of:

i. Scoping and Readiness Review

ii. Onsite Assessment Activities

iii. Technical Testing

iv. Documentation and Reporting

v. ASV Scanning

vi. Ongoing Support (Ad-hoc support)

For further information please see the GCC006549CPU PCI QSA pro 2026 - ITT on public contract Scotland tender -PCST

II.2.5) Award criteria

Quality criterion: Quality / Weighting: 50

Quality criterion: Fair Work First / Weighting: 5

Cost criterion: Price / Weighting: 45

II.2.11) Information about options

Options: No

II.2.13) Information about European Union funds

The procurement is related to a project and/or programme financed by European Union funds: No

II.2.14) Additional information

Economic operators may be excluded from this competition if they are in any of the situations referred to in regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Section IV: Procedure

IV.1) Description

IV.1.1) Type of procedure

Open procedure

IV.1.8) Information about Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes

IV.2) Administrative information

IV.2.1) Previous publication concerning this procedure

Notice number in the OJ S:

2026/S 000-034067

Section V: Award of contract

Contract No: GCC006549CPU

A contract/lot is awarded: Yes

V.2 Award of contract

V.2.1) Date of conclusion of the contract

11/08/2026

V.2.2) Information about tenders

Number of tenders received: 8

Number of tenders received from SMEs: 8

Number of tenders received from tenderers from EU Member States: 0

Number of tenders received from tenderers from non-EU Member States: 0

Number of tenders received by electronic means: 8

The contract has been awarded to a group of economic operators: No

V.2.3) Name and address of the contractor

1 Sequence Cyber Limited

Acorn House, , 381 Midsummer Blvd,

Milton Keynes,

MK9 3HP

UK

Telephone: +44 2031301723

E-mail: Ron@1sequencecyber.com

NUTS: UK

The contractor is an SME: Yes

V.2.4) Information on value of the contract/lot (excluding VAT)

Total value of the contract/lot: : 275 404.00  GBP

V.2.5) Information about subcontracting

Section VI: Complementary information

VI.3) Additional information

Freedom of Information Act — Information on the FOI Act is contained in Appendix A of the ITT. Bidders must note the implications of this legislation and ensure that any information they wish the council to consider withholding is specifically indicated on the FOI Certificate contained within Technical Envelope within tender portal (NB the council does not bind itself to withhold this information).

Tenderers Amendments — Bidders must enter any clause, condition, amendment to specification or any other qualification they may wish to make conditional to this offer. Bidders will be required to complete the tenderers amendment certificate that is contained as an attachment within PCS-T.

Non–Collusion- Bidders will be required to complete the Non-Collusion certificate contained as an attachment within PCS-T.

Prompt Payment Certificate - Bidders will be required to complete the Prompt Payment certificate contained as an attachment within PCS-T.

Insurance Mandate - All successful suppliers will be required to sign an Insurance Mandate, which will be issued in conjunction with the award letter authorising the Council to request copies of insurance documents from the supplier’s insurance provider. If the mandate is not signed and returned the Council reserves the right to request copies of insurance certificates from bidders at any point during the contract period. This is contained as an attachment within PCS-T.

Professional Integrity - Bidders will be required to answer questions related to professional integrity and to complete the Professional Integrity Certificate contained as an attachment within PCS-T.

Terms and Conditions are located within the attachments area of PCS-T.

Additional information pertaining to this contract notice is contained within the ITT documents. Bidders must ensure they read all attachments within the Buyers Attachments area in line with this contract notice.

The buyer is using PCS-Tender to conduct this ITT exercise. The Project code is 62240.

Community benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/

(SC Ref:840694)

VI.4) Procedures for review

VI.4.1) Review body

Glasgow Sheriff Court & Justice of the Peace Court

PO BOX 23, 1 Carlton Place

Glasgow

G5 9DA

UK

E-mail: glasgow@scotcourts.gov.uk

VI.4.3) Review procedure

Precise information on deadline(s) for review procedures:

Glasgow City Council (“the Council”) must, by notice in writing as soon as possible after the decision has been made, inform all tenderers and candidates concerned of its decision to award the contract, conclude the framework agreement or establish a dynamic purchasing system. The Council must allow a period of at least the relevant standstill period (where the notice is sent by facsimile or electronic means the period is 10 days ending at midnight at the end of the 10th day after that on which the last notice is sent, when sent by other means the period is 15 days) to elapse between the date of despatch of the notice referred to in Regulation 85(1) of the Public Contracts (Scotland) Regulations 2015 (“the Regulations”). The Council is obliged to comply with the Regulations and any eligible economic operator can bring an action in the Sheriff Court or the Court of Session where as a consequence of a breach by the Council, suffers or risks suffering loss or damage. The bringing of court proceedings during the standstill period means that the Council must not enter into the contract, conclude the framework agreement or establish the dynamic purchasing system unless the proceedings are determined, discontinued or disposed of; or the court, by interim order, brings to an end the prohibition. The bringing of court proceedings after the standstill period has elapsed and the remedies that are available to the courts are detailed in the Regulations. Economic Operators can write to the Council seeking further clarification on the notice, to which the Council must respond within 15 days. Economic Operators should be mindful to seek their own independent legal advice when they consider appropriate to do so.

VI.5) Date of dispatch of this notice

07/09/2026

Coding

Commodity categories

ID Title Parent category
79411000 General management consultancy services Business and management consultancy services
72222300 Information technology services Information systems or technology strategic review and planning services
72220000 Systems and technical consultancy services Software programming and consultancy services

Delivery locations

ID Description
100 UK - All

Alert region restrictions

The buyer has restricted the alert for this notice to suppliers based in the following regions.

ID Description
There are no alert restrictions for this notice.

About the buyer

Main contact:
Allan.Weir@glasgow.gov.uk
Admin contact:
N/a
Technical contact:
N/a
Other contact:
N/a

Further information

Date Details
No further information has been uploaded.

0800 222 9004

Lines are open 8:30am to 5pm Monday to Friday.

Rydym yn croesawu galwadau'n Gymraeg.

We welcome calls in Welsh.