Award GB FTS

PCI DSS Assurance for services integrating with Worldpay (UKVI merchant codes)

Home Office

Stage: Award

the latest stage the buyer has published
Buyer: Home Office
Supplier: ALEXANDER MANN SOLUTIONS LIMITED

taken from the supplier contact on the notice
Value: £70K

VAT basis not stated · GBP
Awarded: 10 Jun 2026

the signed contract date on the notice
End date: 10 Sep 2026

signed
First published: 1 Jul 2026

last seen 1 Jul 2026

What the buyer published

Home Office Technical Services require an accredited Payment Card Industry (PCI) Data Security Standards Qualified Security Assessor (QSA) to undertake a formal assessment of in-scope services that integrate with Worldpay using UKVI merchant codes. The engagement will secure an independent assessment, define any remediation required and provide the necessary compliance certification where achieved. The work supports the integrity of migrant journey services and aligns with the directive to prioritise live service management and compliance while reducing exposure to card-scheme sanctions. Supplier will provide a PCI SSC-accredited QSA (from a company on the PCI SSC list of approved assessors) to plan and execute an outcome-based PCI DSS assessment across the services listed below, deliver a certificate of compliance or a prioritised remediation plan per service, and support structured knowledge transfer to Home Office teams.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date 10 Sep 2026, signed

Why we call this Governance, risk and audit

Judged against the rules we publish. How we decide.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Bought on its own, as a separate contract The cyber work is a separate contract.