Source: https://tendernation.io/opportunities/01a13bf1-0011-71cb-81d1-a76780967335/security-penetration-and-it-health-check awarded GB open procedure Suitable for SMEs # Security Penetration and IT Health Check [Water Services Regulation Authority](https://tendernation.io/buyers/water-services-regulation-authority) Estimated value £19,945 Published 18 Nov 2016 Deadline Closed 25 Nov 2015 ## Who can bid - Buyer says suitable for SMEs The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid. - Small contract value Valued under £135,018 including VAT, the lowest Procurement Act threshold for goods and services. - Open procedure Anyone can submit a full tender; there is no shortlisting stage. [More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses) ## About this tender The objective is to ensure that Ofwat has a secure, robust and managed network infrastructure in place that satisfies the CESG and their PSN accreditation and Ofwat’s Internal Auditors. The areas of expertise or services that we may require are: • CLAS consultants with expertise in accrediting organisations to the PSN; • Penetration testing and system health checks (compliant to security standards and CESG’s CHECK service); • Computer and server forensics; • Auditing; • Security policy advice and support (and any legal interfaces); • Information risk, the information assurance maturity model (IAMM) and the information risk return to Cabinet Office (that now includes the Security Policy Framework \[SPF\] return); • HMG Cyber security initiatives; • Network Access Security; • Boundary security and remote working security; • Encryption of information assets at rest; • Mobile device security; • Email encryption and web security; • Website security; • Business continuity; • Cloud security principles and their implementation; • Security strategy and vision; and • Training and education across the areas listed above. The support service we are looking for must be a flexible agreement where we can contact the supplier at short notice and request help on one of the areas above. We do have specific requirements that we can already identify as necessary within the next 12 months: Security penetration test and health checks to be conducted in early to mid-January 2016 and June 2016. This is a mandatory requirement for our PSN accreditation process. Re-accreditation to the PSN is in the spring of 2016. (A sampling approach is acceptable when considering the penetration testing of its laptop population as all models are the same make and model and have a similar configuration). Read full description ## CPV classification Computer support and consultancy services Source Contracts Finder (UK) [View official notice](https://www.contractsfinder.service.gov.uk/notice/329fab31-adc9-11e6-9901-0019b9f3037b) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile Water Services Regulation Authority: past awards and live tenders](https://tendernation.io/buyers/water-services-regulation-authority) [Sector More IT services tenders](https://tendernation.io/sectors/it-services) ## More tenders like this [SONI090 – Client-Side Advisor · SONI Ltd · 32 days left · 20 Nov 2026](https://tendernation.io/opportunities/01a154e4-4736-72ba-9b73-0e325c4a96e5/soni090-client-side-advisor) [Software implementation services – DNS - Metada Platform - licence a související implementační, konzultační, analytické a školicí služby · DIAMO, státní podnik · 36 days left · 23 Nov 2026](https://tendernation.io/opportunities/01a15183-8989-719a-85fd-f036dc09b9df/czechia-software-implementation-services-dns-metada-platform-licence-a-s) [IT services: consulting, software development, Internet and support – Integrale ICT-dienstverlening · Stichting TWijs · 42 days left · 30 Nov 2026](https://tendernation.io/opportunities/01a15183-8078-70d7-8df3-40f25f4d83c5/netherlands-it-services-consulting-software-development-internet-and-suppor) [Software supply services – CRE\_2026\_092 Renouvellement des licences Varonis · CREOS Luxembourg S.A. · 27 days left · 15 Nov 2026](https://tendernation.io/opportunities/01a15183-411c-7086-9da9-540c2fa32c64/luxembourg-software-supply-services-cre-2026-092-renouvellement-des-licences) [Software supply services – Vergabe zur Ablösung der bestehenden SAP-Lösung im Bereich Personal · Westfälische Verkehrsgesellschaft mbH · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-0636-71ff-ab09-9dda4a94f77c/germany-software-supply-services-vergabe-zur-ablosung-der-bestehenden-sap-lo) [Computer facilities management services – IT-tjänster · Kalmar Läns Museum · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-8774-723e-83a8-af2cae60c2ed/sweden-computer-facilities-management-services-it-tjanster)