NRD PARTNERS LTD

IT Health Check (ITHC) Penetration Testing

NRD Partners delivers IT Health Check penetration testing for public sector systems, identifying vulnerabilities, attack paths, and control weaknesses. Assessments align to UK Government and NCSC guidance, providing evidence-based findings and practical remediation advice to support accreditation, assurance, and informed risk-based security decisions across critical digital services and platforms.

Features

• CHECK-aligned penetration testing for critical public-sector systems
• Infrastructure, application, and cloud security testing
• Risk-based attack path and vulnerability analysis
• Testing aligned to NCSC and UK Government guidance
• Scoping tailored to system criticality and assurance needs
• Evidence-led findings with clear technical validation
• Minimal disruption testing approach for live environments
• Independent assessment by experienced security professionals

Benefits

• Identifies exploitable vulnerabilities before adversaries do
• Improves confidence in system security posture
• Reduces risk to critical public-sector services
• Supports accreditation and assurance requirements
• Enables prioritised, risk-based remediation decisions
• Strengthens resilience against real-world attack techniques
• Provides clear evidence for security assurance
• Improves understanding of technical security weaknesses

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@nrdpartners.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

597818781686331

Contact

Majid Ali
07718990799
info@nrdpartners.co.uk

About the service

• Service categories:

  Cloud Support Services

  Security Services

  • Security strategy
  • Security risk management
  • Security design
  • Security incident management
  • Security audit services

Service scope

• Service constraints: No

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Support levels: No Constraints

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Pricing

• Discount for educational organisations: Yes

Architecture roles

Security architect

Role level	UK Rate	Offshore Rate
Security architect	£1,450.00
Principal security architect	£1,150.00

Solution architect

Role level	UK Rate	Offshore Rate
Associate solution architect	£1,450.00
Solution architect	£1,450.00
Principal solution architect	£1,150.00

Technical architect

Role level	UK Rate	Offshore Rate
Lead technical architect	£1,450.00
Principal technical architect	£1,150.00

Chief digital and data roles

Chief information security officer

Role level	UK Rate	Offshore Rate
Chief information security officer	£1,450.00

Cyber security roles

Cyber security audit and assurance

Role level	UK Rate	Offshore Rate
Lead cyber security audit and assurance	£1,450.00
Principal cyber security audit and assurance	£1,150.00

Cyber security governance and risk management

Role level	UK Rate	Offshore Rate
Principal cyber security governance and risk manager	£1,150.00

Cyber security testing

Role level	UK Rate	Offshore Rate
Lead cyber security penetration testing	£1,450.00
Principal cyber security testing	£1,150.00

Cyber security secure design

Role level	UK Rate	Offshore Rate
Lead cyber security secure systems architecture and design	£1,450.00
Principal cyber security secure systems architecture and design	£1,150.00

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: Yes
• PCI DSS certification accredited by: PCI DSS Qualified Security Assessor
• PCI DSS accreditation date: Friday 23 January 2026
• What the PCI DSS doesn’t cover: Requirements 1-11
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 93365356-2ec5-4617-a9aa-291c8111331b
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Creation of outreach activities to create a pipeline of employees for the future contract delivery

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@nrdpartners.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.