# Annual Penetration Testing for NAO

> A sourced UK public sector contract award published by National Audit Office.

## Key facts

- Buyer: [National Audit Office](/buyers/national-audit-office/contract-awards)
- Supplier: [PRISM INFOSEC LTD](/suppliers/prism-infosec/public-sector-contract-awards)
- Award value: £80,856
- Tender value: £88,000
- Award date: 27 July 2023
- Published: 4 July 2025
- Contract start: 31 July 2023
- Contract end: 30 July 2026
- Stage: awarded
- Procurement category: services
- Notice ID: 1c715748-61b4-48a3-b587-49ce510a0158-853008
- OCID: ocds-b5fd17-23514799-ba8e-4ea6-be50-083add6bf819

## Description

National Audit Office \(NAO\) has awarded a contract to the supplier for the provision of independent assurance around the effectiveness and robustness of its technical security controls, which will include, security testing based on the following models 1\) Annual Penetration Testing 2\) Annual Cyber Essentials Plus Assessment and 3\) Annual CHECK IT Health Check\. The Contract has been called off from the G-Cloud 13 Framework\. The Contract Value in this Notice include VAT\. The initial contract period is 1 year with the option to extend by 2 further periods of 1 year \(1\+1\+1\)\. The contract has been extended until July 2026 and the maximum estimated contract value is £88,000 inclusive of VAT\.

## Related contract awards

- [CPT\_24\_52 Specialist model assurance support](/contracts/ocds-b5fd17-87bd1199-5ba8-49a7-a8f0-e1658011fe90) — National Audit Office
- [CPT\_26\_39 Specialist model assurance support](/contracts/ocds-b5fd17-6bc5942d-7e5a-4ed2-900c-ae594f9e9562) — National Audit Office
- [Cyber Security Assurance and Testing Services](/contracts/ocds-b5fd17-f072b2f0-5d5c-4e76-a7b5-a8705e7e98c5) — National Audit Office
- [CPT\_23\_63 Asset Valuation](/contracts/ocds-b5fd17-99da53a2-d87c-46a6-b0d5-6750e122ccde) — National Audit Office
- [Pen-test Call Off Contract](/contracts/ocds-b5fd17-6d08c178-60d4-46fa-a3ca-2a2942447653) — MCA - Maritime and Coastguard Agency
- [GB-Glasgow: Pen Testing Services - 2025-01590](/contracts/ocds-b5fd17-0f2f41c8-20f7-454c-9c77-87bb4ddb7513) — Student Loans Company
- [Penetration Testing Call-off Contract](/contracts/ocds-b5fd17-136a021f-997c-4d7c-9152-2aceba51535b) — MCA - Maritime and Coastguard Agency
- [PRISM contract second year of existing contract](/contracts/ocds-b5fd17-bbf80383-b353-4e06-af88-cfc0506fc483) — Met Office
- [Cycle Training Services](/contracts/ocds-b5fd17-725a2693-bd9b-4e2c-89c8-9b807c5ad4c2) — London Borough of Southwark
- [Pre Employment Screening](/contracts/ocds-b5fd17-b9bbb675-8670-474b-984e-7194e7b5c534) — STUDENT LOANS COMPANY LIMITED
- [EPR Implementation Delivery Partner - Business Change Services](/contracts/ocds-b5fd17-4cb101a3-0ebf-4a2e-a25b-2ae3c8ad35a1) — United Lincolnshire Teaching Hospitals NHS Trust
- [Taxi and MPV \(1-8 seats\) Passenger Assistant - Taxi and MPV \(1-8 seats\) Passenger Assistant](/contracts/ocds-b5fd17-72db28b1-c882-4e40-8470-acd916a51a98) — East Sussex County Council

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/1c715748-61b4-48a3-b587-49ce510a0158-853008)