Certified Hosting & Cybersecurity Partner Required

Project type: B2B subcontracting / ongoing managed services
Location: United Kingdom preferred
Engagement: Initial implementation plus ongoing hosting, cybersecurity and support
Client: Cashsend Ltd, UK software development company

Project overview

Cashsend Ltd is preparing a tender submission for the design, development, implementation and ongoing support of a public-sector airport website in the United Kingdom.

We intend to act as the prime contractor, delivering the website design, software development, integrations and project management.

We are seeking one established company to act as our specialist subcontractor, providing secure hosting, managed cybersecurity services, technical assurance and supporting compliance documentation.

Required services

- Secure, reliable cloud hosting for a public-facing website, including appropriate UK GDPR safeguards.
- ISO/IEC 27001:2022-certified information security management, with certification scope covering the relevant services.
- Hosting infrastructure configuration, firewalls, encryption, access controls, monitoring and vulnerability management.
- Regular backups, disaster recovery arrangements and business continuity support.
- Security monitoring, incident detection, response and escalation.
- Penetration testing and vulnerability assessments, either directly or through qualified specialists.
- Technical assistance with a detailed Tier 1 Supplier Cybersecurity Questionnaire.
- Security policies, relevant supporting evidence, service-level agreements and documented responsibilities.
- Ongoing managed hosting, cybersecurity maintenance and technical support throughout the contract.

Mandatory supplier requirements

Applicants must:

1. Be an established, registered business, rather than an individual freelancer offering certification held by an unrelated organisation.
2. Hold valid ISO/IEC 27001:2022 certification, with a certificate and scope statement available for verification.
3. Demonstrate relevant experience hosting and securing commercial, government or other security-sensitive websites.
4. Be willing to be formally named as Cashsend Ltd's subcontractor in a UK public procurement submission.
5. Be able to provide a written subcontracting commitment and evidence for security due diligence.
6. Explain which security obligations their certification covers and which obligations would remain with Cashsend Ltd.
7. Be available for prompt discussions and preparation of a quotation.

Cyber Essentials Plus certification is highly desirable.

Please include in your response

- Company name, website and registration details.
- ISO 27001 certificate, certification body, scope and expiry date.
- Whether you hold Cyber Essentials Plus.
- Hosting infrastructure and proposed data-hosting locations.
- Relevant project experience.
- Availability for a rapid tender-stage review.
- Indicative implementation/setup cost.
- Annual hosting and cybersecurity management fees.
- Costs for penetration testing, disaster recovery and additional support.
- Confirmation that you are willing to participate as a declared subcontractor.

### Timing

This is time-sensitive. We are preparing a procurement submission with a reported deadline of **19 October 2026**.

We are seeking an initial response and indicative quotation as soon as possible.

Please respond only if your organisation can provide the necessary certification evidence and genuinely deliver the proposed services.

Cashsend Ltd