Competition with a shortlist
Competitive procedure with a selection stage: suppliers were shortlisted before being invited to bid.
Key facts
- Buyer
- Driver & Vehicle Licensing Agency · National or federal agency/office
- Supplier
- NCC Services Limited SME
- Value
- £100,000
- Procedure
- Call-off from a framework agreement
- Sector
- IT services · Computer testing services (CPV 72820000)
- Region
- Wales
- Official notice
- View on Contracts Finder
- Timeline
-
- Contract date3 Jul 2025
- Published1 Jul 2026Published 363 days after the contract date
Description
This requirement is for a Cyber Security health check company to perform vulnerability assessments and penetration tests on the DVLA infrastructure and applications (both physical and cloud based). In addition to performing on site testing the company must have a fully mature and documented remote testing solution in place, in order to remotely connect to our network. They must be PCI ASV approved and hold CESG, CHECK CERTIFIED GREEN LIGHT, CREST STAR, & Cyber Essential status. Criteria can be broken down as follows: • Must have experience of working with an internal Government Cyber Security teams to develop penetration testing strategies. • Must evidence how they have developed long term client partnerships in order to deliver required training and skills transfer. • Following the completion of the engagement the supplier must explain how they would provide guidance and recommendations on how to maintain the service alongside suggested next steps. • Fully mature remote testing solut…
About the supplier
NCC Services Limited: every public contract they have won, plus their Companies House record (company 02802141).