# Security Penetration and IT Health Check

> A sourced UK public sector contract award published by WATER SERVICES REGULATION AUTHORITY.

## Key facts

- Buyer: WATER SERVICES REGULATION AUTHORITY
- Supplier: [SAPPHIRE TECHNOLOGIES LIMITED](/suppliers/sapphire-technologies/public-sector-contract-awards)
- Award value: £39,890
- Tender value: £39,890
- Award date: 17 December 2018
- Published: 21 January 2019
- Contract start: 4 January 2019
- Contract end: 3 January 2021
- Stage: awarded
- Procurement category: services
- Notice ID: 40d5b5b5-42dc-4ba8-8534-3b2d2353fe33-265078
- OCID: ocds-b5fd17-a38b0e3e-f9d2-494b-af3e-96236614dd98

## Description

The objective is to ensure that Ofwat has a secure, robust and managed network infrastructure in place that satisfies the NCSC and their PSN accreditation and Ofwat's Internal Auditors\. Scope The areas of expertise or services that we may require are: • CLAS consultants with expertise in accrediting organisations to the PSN; • Penetration testing and system health checks \(compliant to security standards and NCSC's CHECK service\); • Phishing simulation program; • Computer and server forensics; • Auditing; • Security policy advice and support \(and any legal interfaces\); • Information risk, the information assurance maturity model \(IAMM\) and the information risk return to Cabinet Office \(that now includes the Security Policy Framework \[SPF\] return\); • HMG Cyber security initiatives; • Network Access Security; • Boundary security and remote working security; • Encryption of information assets at rest; • Mobile device security; • Email encryption and web security; • Website security; • Business continuity; • Cloud security principles and their implementation; • Security strategy and vision; and • Training and education across the areas listed above\. For the support service we require an agreement where we can contact the supplier and request help on one or more of the areas above\. Some of these services may be required at short notice although the Customer will endeavour to give a minimum two weeks notice of any requirement\. We currently have a known requirement for biannual security penetration and IT health checks to be conducted in January and June each year\. This is currently a mandatory requirement for our PSN accreditation process\. We would require the agreement to include at least the minimum number of days required to conduct two IT Health check and penetration tests each year plus an additional 4 days that may be called on for any of the areas listed above\. \(A sampling approach is acceptable when considering the penetration testing of its laptop population as all models are the same make and model and have a similar configuration\)\. Additional information: For further information, please contact: procurement@ofwat\.gsi\.gov\.uk

## Related contract awards

- [Ofwat Consultancy Framework](/contracts/ocds-b5fd17-b3d20afb-e99c-4be6-b05b-fbe9b11a7135) — WATER SERVICES REGULATION AUTHORITY
- [Board Effectiveness Review](/contracts/ocds-b5fd17-88e0c074-30e7-4f8d-8a3e-45d02c81d7a3) — WATER SERVICES REGULATION AUTHORITY
- [Call off for Special Financial Support](/contracts/ocds-b5fd17-b5bef191-46a4-4c8e-ad14-c1a917156d49) — WATER SERVICES REGULATION AUTHORITY
- [C-MeX and D-MeX Shadow Year Research for Price Review 2019](/contracts/ocds-b5fd17-04268b0c-bb98-48cb-967f-202189a9cc65) — WATER SERVICES REGULATION AUTHORITY
- [IT Health Check Call Off Contract Jun26 - Jun28](/contracts/ocds-b5fd17-7b2577c3-c933-48d0-a3e0-fb32f076f9a0) — Ministry of Defence
- [C338953 Renewal of Vulnerability Management v2](/contracts/ocds-b5fd17-bdacae46-3173-4286-9ffc-8724294362f1) — NHS Business Services Authority
- [C338953 Renewal of Vulnerability Manaagement](/contracts/ocds-b5fd17-62777e41-61ff-4c7f-be89-105a8d8d4da1) — NHS Business Services Authority
- [C256788 Renewal of Tenable Software 2024](/contracts/ocds-b5fd17-7a3d5980-7113-4dbe-b7e1-a838a0514d6a) — NHSBSA
- [Taxi and MPV \(1-8 seats\) Passenger Assistant - Taxi and MPV \(1-8 seats\) Passenger Assistant](/contracts/ocds-b5fd17-72db28b1-c882-4e40-8470-acd916a51a98) — East Sussex County Council
- [QLT354 2026-08-26 \(0900\) Leiston - Roman Hill Primary School, Lowestoft \(4 seats and a PA\) - AWARD](/contracts/ocds-b5fd17-3418d9ed-524a-41de-8487-25e33a827cf8) — Suffolk County Council Passenger Transport
- [QBR087 2026-08-26 \(0900\) Lowestoft / Worlingham - The Woodview Project, Worlingham \(6 seats and a PA\) - AWARD](/contracts/ocds-b5fd17-75a81455-cf68-41f3-8b47-ece5ddb308f0) — Suffolk County Council Passenger Transport
- [QOC940 2026-08-25 \(0900\) Lowestoft - Ness Point School, Gt Yarmouth \(4 seats\) - AWARD](/contracts/ocds-b5fd17-4dc15fef-5535-4fdf-b910-40ae6110e71d) — Suffolk County Council Passenger Transport

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/40d5b5b5-42dc-4ba8-8534-3b2d2353fe33-265078)