The SPS requires Suppliers to deliver on‑site IT Health Check Services, including internal and external penetration testing, vulnerability scanning, and security assessments across its networks, systems and data centres, with clear reporting and remediation guidance. The Framework Agreement may also be used for related ad‑hoc IT security work. This Framework Agreement shall be made up of up to three competent Suppliers who shall be responsible for carrying out annual IT Health Checks (ITHC) to maintain accreditation to PSN(P) and also carry out Cyber Essentials+ (CE+) accreditation.

The SPS shall commence this procurement process in good faith and with the intention of awarding a contract. Following publication of the Contract Notice, an Invitation to Tender (ITT) will be published by SPS and will be made available to bidders on Public Contract Scotland – Tender (PCS-T). Tender responses will then be evaluated by the SPS in accordance with the ITT.