Security tenders fail more often than they succeed – not because the process is wrong, but because the evaluation criteria are. Most procurement frameworks are built for commodity services where price and specification tell the whole story. Security is not that kind of service. A poorly structured tender will reliably find the cheapest compliant bid. It will not reliably find the best provider.
This guide walks through how to run a security tender that actually differentiates on quality – from scope definition to reference checking.
Vague specifications produce vague proposals that are difficult to compare. Before issuing an ITT, document the following with specificity:
The more precisely you define what you need, the easier it is to assess whether a provider can deliver it – and the fewer routes there are for underperformance to hide in ambiguity.
The most common procurement error in security is an evaluation matrix that gives too much weight to price and too little to quality indicators. Here is a suggested weighting that better reflects the variables that actually determine service outcomes:
Almost every security provider will list SIA Approved Contractor and NSI accreditation. What the proposal will rarely tell you is the level. For NSI, ask specifically: NSI Gold or NSI Silver? Which service categories does it cover? When was it last audited?
For SIA ACS, ask: where does the company sit in the scheme scoring? Can they provide documentation? These are not difficult questions. If a provider is reluctant to answer them specifically, that reluctance tells you something.
The relevant benchmarks: NSI Gold across all relevant service categories; SIA ACS in the top tier of the scheme; £10 million+ public liability insurance confirmed in writing; directly employed workforce confirmed in writing.
A professionally produced proposal is easy to create. What distinguishes a strong response from a surface- level one is specificity. Ask for: a sample incident report from a current (anonymised) client; a copy of the SLA template they operate against; the names and roles of the account management team who would actually be assigned to your contract; a mobilisation plan with milestones.
Vague answers to specific requests are a reliable indicator of a provider that performs better on paper than in practice.
Request references from clients in comparable sectors and site types to yours – not general testimonials but named contacts who can speak to operational performance. Ask those contacts:
How quickly does the provider respond when there is a problem?
How does the account manager communicate?
Has performance been consistent over the contract period?
Would you re-contract with them?
A security company that performs well will have clients who will say so clearly. One that performs inconsistently will be slow to provide references or will provide contacts who give general answers to specific questions.
For larger contracts, mobilisation – the transition from old provider to new – is a significant operational risk. Ask for a detailed mobilisation plan that includes: timeline from contract award to first operational shift; process for obtaining and transferring access, keys, and security intelligence; induction and training plan for guards assigned to your sites; escalation and communication plan during the mobilisation period.
A provider that cannot produce a credible mobilisation plan has not done it well before.
A structured tool for procurement teams: accreditation checklist, tender evaluation matrix, KPI framework, and red flags guide. Free to download, simply click below:
