Penetration Testing and IT Security Health Check Services

The Council is seeking experienced security providers to deliver penetration testing and IT health checks on an ad-hoc basis. Work will be purchased in blocks of 10 consultancy days and may include vulnerability assessments, security testing, and PSN compliance checks (internal and external). All testing must combine automated and manual techniques using industry best practices from NCSC and OWASP to identify weaknesses including known vulnerabilities, configuration faults, and cyber awareness gaps. The Council intends to establish an open framework agreement with up to 3 successful providers. The initial framework term is 3 years, with plans to establish a successor framework (12 months) before expiry. The Council reserves the right to adjust scope and procure additional security requirements throughout the contract term.