Tender GB FTS

PCI QSA pro 2026

Glasgow City Council

Stage: Tender

the latest stage the buyer has published
Buyer: Glasgow City Council
Value: £450K

VAT basis not stated · GBP
Deadline: 19 May 2026

from notice 034067-2026
Planned end: For subscribers only
First published: 15 Apr 2026

last seen 15 Apr 2026

What the buyer published

Glasgow City Council requires s supplier to validate its compliance with the current version of the PCI Data Security Standard (PCI DSS), ensure protection of cardholder data, and obtain the necessary documentation Attestation of Compliance (AoC) and Report on Compliance (RoC) for both roles the council holds. This procurement will be conducted via the Public Contracts Scotland - Tender portal (PCS-T). We will apply a one stage Open procedure. Bidders must self-certify their adherence to the conditions of participation via the SPD in PSC-T, and may be required to submit Means of Proof before contract award. Bidders must refer to the specific requirements listed in Section III in this OJEU Contract Notice when completing the SPD in PCS-T.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

● Tender on record

◌ Award none

● End date For subscribers only

Why we call this Governance, risk and audit

Judged against the rules we publish. How we decide.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Bought on its own, as a separate contract The cyber work is a separate contract.