Payment Card Industries - Data Security Standards Assessment and Support

Durham County Council. Combined from multiple notices.

What the buyer published

The primary objectives of the contract are to:\r

â€¢ Review the works completed in each previous year\r

â€¢ Ensure compliance at PCI - DSS current version\r

â€¢ Assist in the completion of relevant SAQs - Currently A, B, & C\r

â€¢ Provide Advice and Guidance as and when required on\r

o Information Security, reviewing and updating security policy documentation\r

o System Upgrades as and when required\r

o Penetration Testing\r

o Card Recon Licences (Scan our systems for Card Data)\r

o Ad-hoc Support\r

The expected start date for the proposed contract is 01 April 2024. \r

The expected end date for the proposed contract is 31 March 2026.\r

The proposed contract is to be let with an option to extend for a further 24 months from the actual end date.

We combine all notices into one record, so it only appears here once.

Notice	Published	Stage
3902bc58-19cf-4783-889d-6d824088004a-703897	4 Dec 2023	tender
080097fb-afa8-41b2-8b8d-15e1933d597f-703907	4 Dec 2023	tender
155e0a6f-0096-4a6c-9e57-8c225d24fe58-737908	4 Apr 2024	award

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

● Tender on record

● Award on record

● End date For subscribers only

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Licence and subscription renewals A renewal of a security product licence or subscription.