Network and Information Security (NIS) Audit Services for HSCNI

{
  "id": "049430-2026",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2026-05-27T10:14:58+01:00",
  "ocid": "ocds-h6vhtk-0559e2",
  "buyer": {
    "id": "GB-PPON-PWNJ-1991-NGDW",
    "name": "Business Services Organisation (BSO) Procurement and Logistics Service (PaLS)"
  },
  "awards": [
    {
      "id": "1",
      "items": [
        {
          "id": "1",
          "relatedLot": "1",
          "additionalClassifications": [
            {
              "id": "72000000",
              "scheme": "CPV",
              "description": "IT services: consulting, software development, Internet and support"
            },
            {
              "id": "72200000",
              "scheme": "CPV",
              "description": "Software programming and consultancy services"
            },
            {
              "id": "72220000",
              "scheme": "CPV",
              "description": "Systems and technical consultancy services"
            },
            {
              "id": "72223000",
              "scheme": "CPV",
              "description": "Information technology requirements review services"
            },
            {
              "id": "72224000",
              "scheme": "CPV",
              "description": "Project management consultancy services"
            },
            {
              "id": "72227000",
              "scheme": "CPV",
              "description": "Software integration consultancy services"
            },
            {
              "id": "72800000",
              "scheme": "CPV",
              "description": "Computer audit and testing services"
            },
            {
              "id": "72810000",
              "scheme": "CPV",
              "description": "Computer audit services"
            }
          ]
        }
      ],
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-06567907",
          "name": "ARCANUM INFORMATION SECURITY LIMITED"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "mainProcurementCategory": "services"
    },
    {
      "id": "2",
      "items": [
        {
          "id": "2",
          "relatedLot": "2",
          "additionalClassifications": [
            {
              "id": "72000000",
              "scheme": "CPV",
              "description": "IT services: consulting, software development, Internet and support"
            },
            {
              "id": "72200000",
              "scheme": "CPV",
              "description": "Software programming and consultancy services"
            },
            {
              "id": "72220000",
              "scheme": "CPV",
              "description": "Systems and technical consultancy services"
            },
            {
              "id": "72223000",
              "scheme": "CPV",
              "description": "Information technology requirements review services"
            },
            {
              "id": "72224000",
              "scheme": "CPV",
              "description": "Project management consultancy services"
            },
            {
              "id": "72227000",
              "scheme": "CPV",
              "description": "Software integration consultancy services"
            },
            {
              "id": "72800000",
              "scheme": "CPV",
              "description": "Computer audit and testing services"
            },
            {
              "id": "72810000",
              "scheme": "CPV",
              "description": "Computer audit services"
            }
          ]
        }
      ],
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-06567907",
          "name": "ARCANUM INFORMATION SECURITY LIMITED"
        }
      ],
      "relatedLots": [
        "2"
      ],
      "mainProcurementCategory": "services"
    }
  ],
  "tender": {
    "id": "6190559",
    "lots": [
      {
        "id": "1",
        "status": "complete"
      },
      {
        "id": "2",
        "status": "complete"
      }
    ],
    "title": "Network and Information Security (NIS) Audit Services for HSCNI",
    "status": "complete",
    "documents": [
      {
        "id": "conflictOfInterest",
        "description": "Not published",
        "documentType": "conflictOfInterest"
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "An Assured Audit Service Provider from the National Cyber Security Centre (NCSC) Cyber Resilience Audit Scheme is to complete an on-site Network and Information Security (NIS) Compliance Audit of the essential service and supporting network and information systems. The objective of the NIS Audit Services is to assist the NIS Competent Authority (CA) in assessing the OES level of compliance with regulation 10 of the Network and Information Systems Regulations 2018. The Compliance Audit will use the (NCSC) Cyber Assessment Framework (CAF) which determines the minimum standard expected from the OES. Assessment will be made against each Contributing Outcome and associated Indicators of Good Practice (IGP) and “Not Good” practice as outlined in the CAF. The scope of the NIS Compliance Audit is to be against the OES essential service, as defined by the OES. This will encompass all critical network and information systems and processes necessary for the continued delivery of the essential service.",
    "procurementMethod": "open",
    "procurementMethodDetails": "Open procedure"
  },
  "parties": [
    {
      "id": "GB-PPON-PWNJ-1991-NGDW",
      "name": "Business Services Organisation (BSO) Procurement and Logistics Service (PaLS)",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKN06",
        "country": "GB",
        "locality": "Belfast",
        "postalCode": "BT12 6HU",
        "countryName": "United Kingdom",
        "streetAddress": "77 Boucher Crescent"
      },
      "details": {
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          },
          {
            "id": "GB-NIR",
            "scheme": "UK_CA_DEVOLVED_REGULATIONS",
            "description": "Northern Irish devolved regulations apply"
          }
        ]
      },
      "identifier": {
        "id": "PWNJ-1991-NGDW",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "email": "ict.sourcing@hscni.net"
      }
    },
    {
      "id": "GB-COH-06567907",
      "name": "ARCANUM INFORMATION SECURITY LIMITED",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKL16",
        "country": "GB",
        "locality": "Bedwas, Caerphilly",
        "postalCode": "CF83 8ER",
        "countryName": "United Kingdom",
        "streetAddress": "Ty Penywaun, Mountain Road"
      },
      "details": {
        "url": "https://arcanum-cyber.com",
        "vcse": false,
        "scale": "sme",
        "shelteredWorkshop": false,
        "publicServiceMissionOrganization": false
      },
      "identifier": {
        "id": "06567907",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "tenders@arcanumis.com"
      },
      "additionalIdentifiers": [
        {
          "id": "PBDX-6436-JYGN",
          "scheme": "GB-PPON"
        }
      ]
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "1",
      "title": "Lot 1: BHSCT, NIAS",
      "value": {
        "amount": 150000,
        "currency": "GBP",
        "amountGross": 180000
      },
      "period": {
        "endDate": "2030-05-17T23:59:59+01:00",
        "startDate": "2026-05-18T00:00:00+01:00",
        "maxExtentDate": "2031-05-17T23:59:59+01:00"
      },
      "status": "active",
      "awardID": "1",
      "renewal": {
        "description": "The inclusion of a 12-month extension option is primarily to provide flexibility in the event that follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to factors such as resource availability, changes in regulatory requirements, or unforeseen operational constraints. By allowing for an extension, we ensure continuity of service without the need for a new procurement process, maintain compliance with NIS obligations, and avoid any gaps that could impact audit readiness or certification status."
      },
      "documents": [
        {
          "id": "049430-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/049430-2026",
          "format": "text/html",
          "noticeType": "UK7",
          "description": "Contract details notice on Find a Tender",
          "documentType": "contractNotice",
          "datePublished": "2026-05-27T10:14:58+01:00"
        }
      ],
      "dateSigned": "2026-05-11T00:00:00+01:00",
      "hasRenewal": true,
      "agreedMetrics": [
        {
          "id": "1",
          "title": "Completion of audits in accordance with the agreed audit plan and timetable",
          "description": " 100% of audits completed by their scheduled due dates",
          "observations": [
            {
              "id": "frequency",
              "period": {
                "durationInMonths": 1
              }
            }
          ]
        },
        {
          "id": "2",
          "title": "Final Audit reports submitted in full by Monday 30th November 2026",
          "description": "100% of audit reports submitted to Trust by Monday 30th November 2026",
          "observations": [
            {
              "id": "frequency",
              "period": {
                "durationInMonths": 1
              }
            }
          ]
        }
      ],
      "aboveThreshold": true
    },
    {
      "id": "2",
      "title": "Lot 2: SEHSCT, SHSCT, WHSCT, NHSCT",
      "value": {
        "amount": 300000,
        "currency": "GBP",
        "amountGross": 360000
      },
      "period": {
        "endDate": "2030-05-17T23:59:59+01:00",
        "startDate": "2026-05-18T00:00:00+01:00",
        "maxExtentDate": "2031-05-17T23:59:59+01:00"
      },
      "status": "active",
      "awardID": "2",
      "renewal": {
        "description": "The inclusion of a 12-month extension option is primarily to provide flexibility in the event that follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to factors such as resource availability, changes in regulatory requirements, or unforeseen operational constraints. By allowing for an extension, we ensure continuity of service without the need for a new procurement process, maintain compliance with NIS obligations, and avoid any gaps that could impact audit readiness or certification status."
      },
      "documents": [
        {
          "id": "049430-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/049430-2026",
          "format": "text/html",
          "noticeType": "UK7",
          "description": "Contract details notice on Find a Tender",
          "documentType": "contractNotice",
          "datePublished": "2026-05-27T10:14:58+01:00"
        }
      ],
      "dateSigned": "2026-05-11T00:00:00+01:00",
      "hasRenewal": true,
      "agreedMetrics": [
        {
          "id": "1",
          "title": "Completion of audits in accordance with the agreed audit plan and timetable",
          "description": " 100% of audits completed by their scheduled due dates",
          "observations": [
            {
              "id": "frequency",
              "period": {
                "durationInMonths": 1
              }
            }
          ]
        },
        {
          "id": "2",
          "title": "Final Audit reports submitted in full by Monday 30th November 2026",
          "description": "100% of audit reports submitted to Trust by Monday 30th November 2026",
          "observations": [
            {
              "id": "frequency",
              "period": {
                "durationInMonths": 1
              }
            }
          ]
        }
      ],
      "aboveThreshold": true
    }
  ],
  "initiationType": "tender"
}

{
  "id": "038212-2026",
  "tag": [
    "award",
    "contract"
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "value": 2,
        "measure": "bids",
        "relatedLot": "1"
      },
      {
        "id": "2",
        "value": 2,
        "measure": "finalStageBids",
        "relatedLot": "1"
      },
      {
        "id": "3",
        "value": 1,
        "measure": "smeFinalStageBids",
        "relatedLot": "1"
      },
      {
        "id": "4",
        "value": 0,
        "measure": "vcseFinalStageBids",
        "relatedLot": "1"
      },
      {
        "id": "5",
        "value": 2,
        "measure": "bids",
        "relatedLot": "2"
      },
      {
        "id": "6",
        "value": 2,
        "measure": "finalStageBids",
        "relatedLot": "2"
      },
      {
        "id": "7",
        "value": 1,
        "measure": "smeFinalStageBids",
        "relatedLot": "2"
      },
      {
        "id": "8",
        "value": 0,
        "measure": "vcseFinalStageBids",
        "relatedLot": "2"
      }
    ]
  },
  "date": "2026-04-27T16:31:15+01:00",
  "ocid": "ocds-h6vhtk-0559e2",
  "buyer": {
    "id": "GB-PPON-PWNJ-1991-NGDW",
    "name": "Regional Business Services Organisation, Procurement and Logistics Service"
  },
  "awards": [
    {
      "id": "1",
      "date": "2026-04-24T00:00:00+01:00",
      "items": [
        {
          "id": "1",
          "relatedLot": "1",
          "deliveryAddresses": [
            {
              "region": "UKN",
              "country": "GB",
              "countryName": "United Kingdom"
            }
          ],
          "additionalClassifications": [
            {
              "id": "72000000",
              "scheme": "CPV",
              "description": "IT services: consulting, software development, Internet and support"
            }
          ]
        }
      ],
      "title": "Lot 1: BHSCT, NIAS",
      "value": {
        "amount": 150000,
        "currency": "GBP",
        "amountGross": 180000
      },
      "status": "pending",
      "renewal": {
        "description": "The inclusion of a 12-month extension option is primarily to provide flexibility in the event\nthat follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to\nfactors such as resource availability, changes in regulatory requirements, or unforeseen\noperational constraints. By allowing for an extension, we ensure continuity of service\nwithout the need for a new procurement process, maintain compliance with NIS\nobligations, and avoid any gaps that could impact audit readiness or certification status."
      },
      "documents": [
        {
          "id": "038212-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/038212-2026",
          "format": "text/html",
          "noticeType": "UK6",
          "description": "Contract award notice on Find a Tender",
          "documentType": "awardNotice",
          "datePublished": "2026-04-27T16:31:15+01:00"
        }
      ],
      "suppliers": [
        {
          "id": "GB-COH-06567907",
          "name": "ARCANUM INFORMATION SECURITY LIMITED"
        }
      ],
      "hasRenewal": true,
      "milestones": [
        {
          "id": "1",
          "type": "futureSignatureDate",
          "status": "scheduled",
          "dueDate": "2026-05-11T23:59:59+01:00"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2030-05-11T23:59:59+01:00",
        "startDate": "2026-05-12T00:00:00+01:00",
        "maxExtentDate": "2031-05-11T23:59:59+01:00"
      },
      "standstillPeriod": {
        "endDate": "2026-05-10T23:59:59+01:00"
      },
      "mainProcurementCategory": "services",
      "assessmentSummariesDateSent": "2026-04-27T00:00:00+01:00"
    },
    {
      "id": "2",
      "date": "2026-04-24T00:00:00+01:00",
      "items": [
        {
          "id": "2",
          "relatedLot": "2",
          "deliveryAddresses": [
            {
              "region": "UKN",
              "country": "GB",
              "countryName": "United Kingdom"
            }
          ],
          "additionalClassifications": [
            {
              "id": "72000000",
              "scheme": "CPV",
              "description": "IT services: consulting, software development, Internet and support"
            }
          ]
        }
      ],
      "title": "Lot 2: SEHSCT, SHSCT, WHSCT, NHSCT",
      "value": {
        "amount": 300000,
        "currency": "GBP",
        "amountGross": 360000
      },
      "status": "pending",
      "renewal": {
        "description": "The inclusion of a 12-month extension option is primarily to provide flexibility in the event\nthat follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to\nfactors such as resource availability, changes in regulatory requirements, or unforeseen\noperational constraints. By allowing for an extension, we ensure continuity of service\nwithout the need for a new procurement process, maintain compliance with NIS\nobligations, and avoid any gaps that could impact audit readiness or certification status"
      },
      "documents": [
        {
          "id": "038212-2026",
          "url": "https://www.find-tender.service.gov.uk/Notice/038212-2026",
          "format": "text/html",
          "noticeType": "UK6",
          "description": "Contract award notice on Find a Tender",
          "documentType": "awardNotice",
          "datePublished": "2026-04-27T16:31:15+01:00"
        }
      ],
      "suppliers": [
        {
          "id": "GB-COH-06567907",
          "name": "ARCANUM INFORMATION SECURITY LIMITED"
        }
      ],
      "hasRenewal": true,
      "milestones": [
        {
          "id": "1",
          "type": "futureSignatureDate",
          "status": "scheduled",
          "dueDate": "2026-05-11T23:59:59+01:00"
        }
      ],
      "relatedLots": [
        "2"
      ],
      "aboveThreshold": true,
      "contractPeriod": {
        "endDate": "2030-05-11T23:59:59+01:00",
        "startDate": "2026-05-12T00:00:00+01:00",
        "maxExtentDate": "2031-05-11T23:59:59+01:00"
      },
      "standstillPeriod": {
        "endDate": "2026-05-10T23:59:59+01:00"
      },
      "mainProcurementCategory": "services",
      "assessmentSummariesDateSent": "2026-04-27T00:00:00+01:00"
    }
  ],
  "tender": {
    "id": "6190559",
    "lots": [
      {
        "id": "1",
        "status": "complete",
        "description": null
      },
      {
        "id": "2",
        "status": "complete",
        "description": null
      }
    ],
    "title": "Network and Information Security (NIS) Audit Services for HSCNI",
    "status": "complete",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "An Assured Audit Service Provider from the National Cyber Security Centre (NCSC) Cyber Resilience Audit Scheme is to complete an on-site Network and Information Security (NIS) Compliance Audit of the essential service and supporting network and information systems. The objective of the NIS Audit Services is to assist the NIS Competent Authority (CA) in assessing the OES level of compliance with regulation 10 of\nthe Network and Information Systems Regulations 2018.\nThe Compliance Audit will use the (NCSC) Cyber Assessment Framework (CAF) which determines the minimum standard expected from the OES. Assessment will be made against each Contributing Outcome and associated Indicators of Good Practice (IGP) and\"Not Good\" practice as outlined in the CAF. \nThe scope of the NIS Compliance Audit is to be against the OES essential service, asdefined by the OES. This will encompass all critical network and information systems and\nprocesses necessary for the continued delivery of the essential service.",
    "procurementMethod": "open",
    "procurementMethodDetails": "Open procedure"
  },
  "buyerID": [],
  "parties": [
    {
      "id": "GB-PPON-PWNJ-1991-NGDW",
      "name": "Regional Business Services Organisation, Procurement and Logistics Service",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKN06",
        "country": "GB",
        "locality": "Belfast",
        "postalCode": "BT12 6HU",
        "countryName": "United Kingdom",
        "streetAddress": "77 Boucher Crescent"
      },
      "details": {
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          },
          {
            "id": "GB-NIR",
            "scheme": "UK_CA_DEVOLVED_REGULATIONS",
            "description": "Northern Irish devolved regulations apply"
          }
        ]
      },
      "identifier": {
        "id": "PWNJ-1991-NGDW",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "email": "etenders@hscni.net"
      }
    },
    {
      "id": "GB-COH-06567907",
      "name": "ARCANUM INFORMATION SECURITY LIMITED",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKL16",
        "country": "GB",
        "locality": "Bedwas, Caerphilly",
        "postalCode": "CF83 8ER",
        "countryName": "United Kingdom",
        "streetAddress": "Ty Penywaun, Mountain Road"
      },
      "details": {
        "url": "https://arcanum-cyber.com",
        "vcse": false,
        "scale": "sme",
        "shelteredWorkshop": false,
        "publicServiceMissionOrganization": false
      },
      "identifier": {
        "id": "06567907",
        "scheme": "GB-COH"
      },
      "contactPoint": {
        "email": "tenders@arcanumis.com"
      },
      "additionalIdentifiers": [
        {
          "id": "PBDX-6436-JYGN",
          "scheme": "GB-PPON"
        }
      ]
    }
  ],
  "language": "en",
  "initiationType": "tender"
}

{
  "id": "018049-2026",
  "tag": [
    "tender"
  ],
  "date": "2026-02-27T15:21:26Z",
  "ocid": "ocds-h6vhtk-0559e2",
  "buyer": {
    "id": "GB-PPON-PWNJ-1991-NGDW",
    "name": "Business Services Organisation (BSO) Procurement and Logistics Service (PaLS)."
  },
  "tender": {
    "id": "6190559",
    "lots": [
      {
        "id": "1",
        "title": "Lot 1:  BHSCT, NIAS",
        "value": {
          "amount": 150000,
          "currency": "GBP",
          "amountGross": 180000
        },
        "status": "active",
        "renewal": {
          "description": "The inclusion of a 12-month extension option is primarily to provide flexibility in the event that follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to factors such as resource availability, changes in regulatory requirements, or unforeseen operational constraints. By allowing for an extension, we ensure continuity of service without the need for a new procurement process, maintain compliance with NIS obligations, and avoid any gaps that could impact audit readiness or certification status."
        },
        "hasRenewal": true,
        "description": "Belfast Health and Social Care Trust (BHSCT) and Northern Ireland Ambulance Service (NIAS)",
        "awardCriteria": {
          "criteria": [
            {
              "name": "AC01 - Methodology",
              "type": "quality",
              "numbers": [
                {
                  "number": 10,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "AC02 – Project Plan",
              "type": "quality",
              "numbers": [
                {
                  "number": 25,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "AC03 – Associated Risks",
              "type": "quality",
              "numbers": [
                {
                  "number": 25,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "Price",
              "type": "price",
              "numbers": [
                {
                  "number": 30,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "Social Value",
              "type": "quality",
              "numbers": [
                {
                  "number": 10,
                  "weight": "percentageExact"
                }
              ]
            }
          ]
        },
        "contractPeriod": {
          "endDate": "2030-04-29T23:59:59+01:00",
          "startDate": "2026-04-30T00:00:00+01:00",
          "maxExtentDate": "2031-04-29T23:59:59+01:00"
        }
      },
      {
        "id": "2",
        "title": "Lot 2: SEHSCT, SHSCT, WHSCT, NHSCT",
        "value": {
          "amount": 300000,
          "currency": "GBP",
          "amountGross": 360000
        },
        "status": "active",
        "renewal": {
          "description": "The inclusion of a 12-month extension option is primarily to provide flexibility in the event that follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to factors such as resource availability, changes in regulatory requirements, or unforeseen operational constraints. By allowing for an extension, we ensure continuity of service without the need for a new procurement process, maintain compliance with NIS obligations, and avoid any gaps that could impact audit readiness or certification status."
        },
        "hasRenewal": true,
        "description": "Southern Health and Social Care Trust (SHSCT), South Eastern Health and Social Care Trust (SEHSCT), Northern Health and Social Care Trust (NHSCT), and Western Health and Social Care Trust (WHSCT)",
        "awardCriteria": {
          "criteria": [
            {
              "name": "AC01 - Methodology",
              "type": "quality",
              "numbers": [
                {
                  "number": 10,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "AC02 – Project Plan",
              "type": "quality",
              "numbers": [
                {
                  "number": 25,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "AC03 – Associated Risks",
              "type": "quality",
              "numbers": [
                {
                  "number": 25,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "Price",
              "type": "price",
              "numbers": [
                {
                  "number": 30,
                  "weight": "percentageExact"
                }
              ]
            },
            {
              "name": "Social Value",
              "type": "quality",
              "numbers": [
                {
                  "number": 10,
                  "weight": "percentageExact"
                }
              ]
            }
          ]
        },
        "contractPeriod": {
          "endDate": "2030-04-29T23:59:59+01:00",
          "startDate": "2026-04-30T00:00:00+01:00",
          "maxExtentDate": "2031-04-29T23:59:59+01:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72200000",
            "scheme": "CPV",
            "description": "Software programming and consultancy services"
          },
          {
            "id": "72220000",
            "scheme": "CPV",
            "description": "Systems and technical consultancy services"
          },
          {
            "id": "72223000",
            "scheme": "CPV",
            "description": "Information technology requirements review services"
          },
          {
            "id": "72224000",
            "scheme": "CPV",
            "description": "Project management consultancy services"
          },
          {
            "id": "72227000",
            "scheme": "CPV",
            "description": "Software integration consultancy services"
          },
          {
            "id": "72800000",
            "scheme": "CPV",
            "description": "Computer audit and testing services"
          },
          {
            "id": "72810000",
            "scheme": "CPV",
            "description": "Computer audit services"
          }
        ]
      },
      {
        "id": "2",
        "relatedLot": "2",
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72200000",
            "scheme": "CPV",
            "description": "Software programming and consultancy services"
          },
          {
            "id": "72220000",
            "scheme": "CPV",
            "description": "Systems and technical consultancy services"
          },
          {
            "id": "72223000",
            "scheme": "CPV",
            "description": "Information technology requirements review services"
          },
          {
            "id": "72224000",
            "scheme": "CPV",
            "description": "Project management consultancy services"
          },
          {
            "id": "72227000",
            "scheme": "CPV",
            "description": "Software integration consultancy services"
          },
          {
            "id": "72800000",
            "scheme": "CPV",
            "description": "Computer audit and testing services"
          },
          {
            "id": "72810000",
            "scheme": "CPV",
            "description": "Computer audit services"
          }
        ]
      }
    ],
    "title": "Network and Information Security (NIS) Audit Services for HSCNI",
    "value": {
      "amount": 450000,
      "currency": "GBP",
      "amountGross": 540000
    },
    "status": "active",
    "documents": [
      {
        "id": "conflictOfInterest",
        "description": "Not published",
        "documentType": "conflictOfInterest"
      },
      {
        "id": "018049-2026",
        "url": "https://www.find-tender.service.gov.uk/Notice/018049-2026",
        "format": "text/html",
        "noticeType": "UK4",
        "description": "Tender notice on Find a Tender",
        "documentType": "tenderNotice",
        "datePublished": "2026-02-27T15:21:26Z"
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "awardPeriod": {
      "endDate": "2026-04-30T23:59:59+01:00"
    },
    "description": "An Assured Audit Service Provider from the National Cyber Security Centre (NCSC) Cyber Resilience Audit Scheme is to complete an on-site Network and Information Security (NIS) Compliance Audit of the essential service and supporting network and information systems. The objective of the NIS Audit Services is to assist the NIS Competent Authority (CA) in assessing the OES level of compliance with regulation 10 of the Network and Information Systems Regulations 2018. \nThe Compliance Audit will use the (NCSC) Cyber Assessment Framework (CAF) which determines the minimum standard expected from the OES. Assessment will be made against each Contributing Outcome and associated Indicators of Good Practice (IGP) and “Not Good” practice as outlined in the CAF. \nThe scope of the NIS Compliance Audit is to be against the OES essential service, as defined by the OES. This will encompass all critical network and information systems and processes necessary for the continued delivery of the essential service.",
    "tenderPeriod": {
      "endDate": "2026-03-26T15:00:00+00:00"
    },
    "contractTerms": {
      "financialTerms": "One invoice per Trust to be submitted upon the completion of Final Audit Report"
    },
    "enquiryPeriod": {
      "endDate": "2026-03-13T15:00:00+00:00"
    },
    "aboveThreshold": true,
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "electronicSubmissionPolicy": "allowed"
    },
    "procurementMethod": "open",
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "https://etendersni.gov.uk",
    "procurementMethodDetails": "Open procedure"
  },
  "parties": [
    {
      "id": "GB-PPON-PWNJ-1991-NGDW",
      "name": "Business Services Organisation (BSO) Procurement and Logistics Service (PaLS).",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKN06",
        "country": "GB",
        "locality": "Belfast",
        "postalCode": "BT12 6HU",
        "countryName": "United Kingdom",
        "streetAddress": "77 Boucher Crescent"
      },
      "details": {
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          },
          {
            "id": "GB-NIR",
            "scheme": "UK_CA_DEVOLVED_REGULATIONS",
            "description": "Northern Irish devolved regulations apply"
          }
        ]
      },
      "identifier": {
        "id": "PWNJ-1991-NGDW",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "email": "ict.sourcing@hscni.net"
      }
    }
  ],
  "language": "en",
  "initiationType": "tender"
}

{
  "id": "037752-2025",
  "tag": [
    "planning"
  ],
  "date": "2025-07-07T13:27:48+01:00",
  "ocid": "ocds-h6vhtk-0559e2",
  "buyer": {
    "id": "GB-PPON-PWNJ-1991-NGDW",
    "name": "Business Services Organisation Procurement and Logistics Service"
  },
  "tender": {
    "id": "ocds-h6vhtk-0559e2",
    "lots": [
      {
        "id": "1",
        "status": "planning",
        "contractPeriod": {
          "endDate": "2026-12-31T23:59:59+00:00",
          "startDate": "2026-01-01T00:00:00+00:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72222100",
            "scheme": "CPV",
            "description": "Information systems or technology strategic review services"
          },
          {
            "id": "72224000",
            "scheme": "CPV",
            "description": "Project management consultancy services"
          },
          {
            "id": "72246000",
            "scheme": "CPV",
            "description": "Systems consultancy services"
          }
        ]
      }
    ],
    "title": "Preliminary Market Engagement Questionnaire - Network and Information Systems (NIS) Compliance Audit",
    "status": "planning",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "This is a Prior Information Notice to seek engagement with the market place to gather information associated with the supply and delivery of a Network and Information Systems (NIS) Compliance Audit. To this end the Business Services Organisation, Procurement and Logistics Service on behalf of Health and Social Care Northern Ireland (HSCNI), wish to engage with potential suppliers to obtain a market view of the potential requirements through the completion of a Questionnaire. Any interested suppliers are required to submit their response through the eTendersNI secure messaging area of the Call for Tender (CfT) Ref: 6008215. All correspondence in relation to this Pre-Market Engagement exercise must be communicated via the eTendersNI secure messaging area. Suppliers will be required to submit their completed Questionnaire no later than 3pm on 25 July 2025. To register on eTendersNI and access the Questionnaire, please use the following link: - https://etendersni.gov.uk and locate CfT Ref: 6008215. Suppliers should also note that any interest shown does not constitute a commitment to participate in any future tendering exercise.",
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PWNJ-1991-NGDW",
      "name": "Business Services Organisation Procurement and Logistics Service",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKN06",
        "country": "GB",
        "locality": "Belfast",
        "postalCode": "BT12 6HU",
        "countryName": "United Kingdom",
        "streetAddress": "77 Boucher Cresent"
      },
      "details": {
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PWNJ-1991-NGDW",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "email": "ict.sourcing@hscni.net"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "037752-2025",
        "url": "https://www.find-tender.service.gov.uk/Notice/037752-2025",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2025-07-07T13:27:48+01:00"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2025-07-25T23:59:59+01:00",
        "description": "This is a Prior Information Notice to seek engagement with the market place to gather information associated with the supply and delivery of a Network and Information Systems (NIS) Compliance Audit. To this end the Business Services Organisation, Procurement and Logistics Service on behalf of Health and Social Care Northern Ireland (HSCNI), wish to engage with potential suppliers to obtain a market view of the potential requirements through the completion of a Questionnaire. Any interested suppliers are required to submit their response through the eTendersNI secure messaging area of the Call for Tender (CfT) Ref: 6008215. All correspondence in relation to this Pre-Market Engagement exercise must be communicated via the eTendersNI secure messaging area. Suppliers will be required to submit their completed Questionnaire no later than 3pm on 25 July 2025. To register on eTendersNI and access the Questionnaire, please use the following link: - https://etendersni.gov.uk and locate CfT Ref: 6008215. Suppliers should also note that any interest shown does not constitute a commitment to participate in any future tendering exercise."
      }
    ]
  },
  "initiationType": "tender"
}