HEALTH AND SOCIAL CARE INFORMATION CENTRE
HSCIC/DH Security Testing Services Call-Off - Framework RM1557vi
This is a contract result notice, not an open opportunity. Details from the official award data.
This sits below the typical range for Business Services contracts — a smaller, more accessible award. Based on 57,319 valued Business Services tenders in our corpus.
HSCIC on behalf of Department of Health have contracted with a Primary and Secondary supplier for requirements relating to specialist security testing services, which are: • Security Testing and Vulnerability Analysis - such as Penetration testing, the provision of suitably (Check or Crest) qualified individuals able to perform application and infrastructure security testing in line with CESG requirements; • Security Assessment and audits – the provision of CLAS/ISO27001 Lead Auditors, who can perform all tests/audits against government standards/ISO27001/good practice; • Security consultancy – the provision of suitably (Check or Crest) qualified individuals to deliver specific security-related advice and consultancy in the areas of, but not limited to technology, architecture, risk assessment, risk treatment (as part of the ISO27001 ISMS risk assessment report) and threat assessment; • Security assurance – the provision of suitably (Check or Crest) qualified individuals to carry out assurance activities, including but not limited to supplier compliance reviews; • Forensics and investigations – the provision of suitably (Check or Crest) qualified individuals to conduct forensic and investigatory work, including but not limited to on site forensics, general security investigations and disk analysis.
This is the secondary contract.
What the notice asks for
Such as Penetration testing, the provision
such as Penetration testing, the provision of suitably (Check or Crest) qualified individuals able to perform application and infrastructure security testing in line with CESG requirements;.
The provision of suitably (Check or Crest)
the provision of suitably (Check or Crest) qualified individuals to deliver specific security-related advice and consultancy in the areas of, but not limited to technology, architecture, risk assessment, risk treatment (as part of the ISO27001 ISMS risk assessment report) and threat assessment;.
Sentences from the notice that state an obligation, surfaced automatically and shown in the order they appear. Not an exhaustive list — always confirm against the tender documents.
What this notice demands of you
1 named, none in explicit obligation language. Each one is quoted from the notice.
Security Assessment and audits – the provision of CLAS/ISO27001 Lead Auditors, who can perform all tests/audits against government standards/ISO27001/good practice;
Matched against the notice text, so this is a floor — the tender pack will demand things the notice never mentions. “Says must” means the quoted sentence itself used obligation language; anything ambiguous is left as a mention.
Make the case to bid
Reveal who to approach at HEALTH AND SOCIAL CARE INFORMATION CENTRE, and generate a go-to-market strategy from their news, accounts and people.
Free to start. Named contacts come from published notices; the strategy is generated from the buyer’s news, accounts and people.
- OCID
- 9c7984d4-3a3d-42c3-be58-a969f60c340f
- Stage
- contract · Contract
- Source
- Contracts Finder
- Buyer ref
- HCON00084B4
Contains public sector information licensed under the Open Government Licence v3.0. Source data © Crown copyright.
Who wins this kind of work
The suppliers and buyers around this opportunity — drawn from official award data. Drag to orbit; click a node to explore.
Top suppliers & buyers in Business Services
HEALTH AND SOCIAL CARE INFORMATION CENTRE’s tender network