Award GB CF

2025-028 IT Health Checks and Associated Security Services

Ofgem

Stage: Award

the latest stage the buyer has published
Buyer: Ofgem
2 suppliers: Sapphire Technologies Ltd

CGI IT UK Ltd

named in the award notice. The value is for the whole contract, not one firm’s share.
Value: £750K

net · GBP
Awarded: 21 Jan 2026

the award date on the notice
End date: For subscribers only
Where: London, England
First published: 5 Feb 2026

last seen 5 Feb 2026

What the buyer published

Ofgem requires a supplier to deliver third party services aligned with the independently approved National Cyber Security Centre (NCSC) CHECK scheme. These services include penetration testing, IT Health Checks, and related security testing and associated services across a wide variety of applications and platforms.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date For subscribers only

Why we call this Penetration testing

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Bought on its own, as a separate contract The cyber work is a separate contract.