RFP QuestBeta
Awarded · ResultStage · contract

National Audit Office

Annual Penetration Testing for NAO

IT ServicesCPV 72000000
Value£81k
Awarded17 Jul 2023
Published30 Aug 2023
RegionLondon
Outcome — awarded

This is a contract result notice, not an open opportunity. Details from the official award data.

Contract value in context
£81ktotal contract value
median £120k
this tender£0£3.5m

This sits in the lower-middle of the IT Services band — a mid-scale opportunity. Based on 36,449 valued IT Services tenders in our corpus.

The brief

National Audit Office (NAO) has awarded a contract to the supplier for the provision of independent assurance around the effectiveness and robustness of its technical security controls, which will include, security testing based on the following models 1) Annual Penetration Testing 2) Annual Cyber Essentials Plus Assessment and 3) Annual CHECK IT Health Check.

The Contract has been called off from the G-Cloud 13 Framework.

The Contract Value in this Notice include VAT.

The initial contract period is 1 year with the option to extend by 2 further periods of 1 year (1+1+1).

The contract has been extended until July 2026 and the maximum estimated contract value is £88,000 inclusive of VAT.

The gates

What this notice demands of you

3 named, none in explicit obligation language. Each one is quoted from the notice.

Cyber EssentialsCertification & assessment schemes
…s and robustness of its technical security controls, which will include, security testing based on the following models 1) Annual Penetration Testing 2) Annual Cyber Essentials Plus Assessment and 3) Annual CHECK IT Health Check.…
Cyber Essentials PlusCertification & assessment schemes
…s and robustness of its technical security controls, which will include, security testing based on the following models 1) Annual Penetration Testing 2) Annual Cyber Essentials Plus Assessment and 3) Annual CHECK IT Health Check.…
G-Cloud / Digital MarketplaceFrameworks & routes to market
The Contract has been called off from the G-Cloud 13 Framework.

Matched against the notice text, so this is a floor — the tender pack will demand things the notice never mentions. “Says must” means the quoted sentence itself used obligation language; anything ambiguous is left as a mention.

What this bid requires

Skills, tools & certifications

Detected from the notice — the capabilities and credentials this bid calls for. Click one to see who wins that work.

Buyer intelligence

Make the case to bid

Reveal who to approach at National Audit Office, and generate a go-to-market strategy from their news, accounts and people.

Sign up free to unlock buyer intelligence

Free to start. Named contacts come from published notices; the strategy is generated from the buyer’s news, accounts and people.

Source & provenance
OCID
1c715748-61b4-48a3-b587-49ce510a0158
Stage
contract · Contract
Source
Contracts Finder
Buyer ref
CPT_23_31
View the original notice on Contracts Finder

Contains public sector information licensed under the Open Government Licence v3.0. Source data © Crown copyright.

Market context

Who wins this kind of work

The suppliers and buyers around this opportunity — drawn from official award data. Drag to orbit; click a node to explore.

Top suppliers & buyers in IT Services

This view needs WebGL, which this browser has turned off.

National Audit Office’s tender network

This view needs WebGL, which this browser has turned off.
Also open now

Similar open tenders

Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

City of Bradford Metropolitan District Council

Closes 14 Sept 2026IT Services
£250kValue