Award GB CF

The Provision of IT Security Testing

Health & Safety Executive

Stage: Award

the latest stage the buyer has published
Buyer: Health & Safety Executive
Supplier: Cyberis Ltd

named in the award notice
Value: £177K

net · GBP
Awarded: 9 Sep 2025

the award date on the notice
End date: For subscribers only
Where: North West, England
First published: 6 Jan 2026

last seen 6 Jan 2026

What the buyer published

Security testing that provides the level of assurance required by HSE and our stakeholders must be performed to the CHECK standard overseen by the National Cyber Security Centre. This requires testers to maintain certification that guarantees a level of expertise and experience that is not available to HSE. HSE have a need for frequent security testing of services we have developed, have been developed on our behalf or have a legal obligation to provide. HSE do not have the requisite skills or tools to meet the various criteria of assurance bodies. HSE must provide assurances to our parent body, the Department for Work and Pensions (DWP), Cabinet Office (CO), and the HSE board that we are safe to do work with. This includes our obligations to be GDPR and DPA 2018 compliant.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date For subscribers only

Why we call this Penetration testing

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.