Award GB PCS

SPS-02246 Vulnerability Assessment Tool

Scottish Prison Service. Combined from multiple notices.

Stage: Award

the latest stage the buyer has published
Buyer: Scottish Prison Service
Supplier: Sapphire Technologies

named on the notice
Value: £23.1K

net (signed contract) · GBP
Awarded: 16 Jan 2025

the signed contract date on the notice
End date: For subscribers only
Where: Scotland

the buyer's address on the notice
First published: 31 Oct 2024

last seen 4 Feb 2025

What the buyer published

The SPS requires relevant tools to provide its IT department with visibility of vulnerabilities which may exist on the corporate systems. The Goods shall allow the SPS to do this in a safe and automated way. The principal objective of this Contract is to mitigate against known threats and vulnerabilities and to provide a tool set that allows nominated SPS Representatives to prioritise actions for all vulnerabilities and to monitor and manage this for compliance with Cyber Essentials Plus certification.

The buyer published this contract more than once.

We combine all notices into one record, so it only appears here once.

Notice	Published	Type	Stage
OCT517301	31 Oct 2024	Quick quote award	planning
NOV517538	4 Nov 2024	Tender notice	tender
FEB523194	4 Feb 2025	Award notice	award

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

● Planning on record

● Tender on record

● Award on record

● End date For subscribers only

Why we call this Penetration testing

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Bought on its own, as a separate contract The cyber work is a separate contract.