Penetration testing and security consultancy

Concepts

• inverness
• information technology
• forestry & land scotland
• scottish natural heritage
• penetration testing
• internal manual penetration testing
• ad hoc security consultancy services
• security consultancy
• consultants
• security policy framework

Location

Inverness

Description

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months.

Total Quantity or Scope

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. The contract is also expected to be used by Forestry Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS. Full details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are: - external/internal manual penetration testing, social engineering firewall configuration/testing, PSN compliance - advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review certification - automated penetration testing.

Renewal Options

Optional 12-month extension.

Award Criteria

CPV Codes

• 72222300 - Information technology services

Indicators

• Bids should cover the whole contract.
• Renewals are available.
• Financial restrictions apply.
• Professional qualifications are sought.
• Staff qualifications are relevant.
• Award on basis of price.

Other Information

All completed SPDs at Stage 1 must be submitted via the Public Contracts Scotland portal. Please ensure you allow enough time to upload your response. This is a two-stage 'restricted' procurement exercise. Only completed SPDs are requested at this stage. The candidates providing the most suitable/relevant responses to Question 4C1.2 of the SPD, assuming they pass the SPD mandatory exclusion questions, will be short-listed to Stage 2 and invited to submit a formal tender. NOTE: To register your interest in this notice and obtain any additional information please visit the Public Contracts Scotland Web Site at https://www.publiccontractsscotland.gov.uk/Search/Search_Switch.aspx?ID=641863. The buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.publiccontractsscotland.gov.uk/sitehelp/help_guides.aspx. Suppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems. (SC Ref:641863) Download the ESPD document here: https://www.publiccontractsscotland.gov.uk/ESPD/ESPD_Download.aspx?id=641863