Award GB CF

Cyber Security Assurance and Testing Services

National Audit Office

Stage: Award

the latest stage the buyer has published
Buyer: National Audit Office
Supplier: Prism Infosec Ltd

named in the award notice
Value: £155K

net · GBP
Awarded: 3 Jun 2026

the award date on the notice
End date: For subscribers only
Where: London, England
First published: 20 Aug 2026

last seen 20 Aug 2026

What the buyer published

The National Audit Office awarded a contract to Prism Infosec Ltd through the Crown Commercial Services G-Cloud 14 framework. The supplier will provide independent cyber security assurance and testing services, including penetration testing, Cyber Essentials and Cyber Essentials Plus assessments, IT Health Checks (ITHC), and Microsoft 365 security reviews. The contract commenced on Monday 3rd August 2026 and will run for an initial three-year term until Thursday 2nd August 2029, with the option to extend for a further 12 months until Friday 2nd August 2030. The total estimated contract value is £155,000 (inclusive of VAT) over the full four-year term.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date For subscribers only

Why we call this Governance, risk and audit

Judged against the rules we publish. How we decide.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.