Tender GB FTS

SPS-02269 - SPS IT Health Check and Cyber Essentials Framework Agreement

Scottish Prison Service

Stage: Tender

the latest stage the buyer has published
Buyer: Scottish Prison Service
Value: Not published
Deadline: 22 Jul 2026

from notice 057583-2026
Planned end: Not published

Not published. This contract is not in Renewals.
First published: 18 Jun 2026

last seen 18 Jun 2026

What the buyer published

The SPS requires Suppliers to deliver on‑site IT Health Check Services, including internal and external penetration testing, vulnerability scanning, and security assessments across its networks, systems and data centres, with clear reporting and remediation guidance. The Framework Agreement may also be used for related ad‑hoc IT security work. This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

● Tender on record

◌ Award none

◌ End date not published

Why we call this Multi-service and framework contracts

Judged against the rules we publish. How we decide.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.