UHB Infrastructure & Software Pen Testing - Market Engagement

The Trust intends to engage a service provider for conducting a “call-off” contract penetration testing services on the Trusts infrastructure and systems (internal/external) to identify potential vulnerabilities and weaknesses that could be exploited by attackers. The primary objective of the penetration testing is to enhance the security posture of the Trusts infrastructure/systems and reduce the risk of cyber-attacks.<br/><br/>As stated above the penetration testing will be conducted on our internal/external infrastructure which is a requirement as part of the Data Security Protection Toolkit. Penetration testing on our in-house developed systems and or commercial solution will be required which may be internally used or externally facing.<br/><br/>As part of the on-going Cyber security programme and addressing the complex threat landscape facing the National Health Service (NHS), UHB wishes to enhance the capabilities of its Cyber Security. <br/>The scope of work for the penetration testing service provider will include but not limited to the following: (See briefing note document)<br/><br/>The purpose of this Prior Information Notice is to enable UHB to gain a better understanding of what sort of providers and how many exist in the market, and improve the confidentiality, integrity, availability and authenticity of its systems and infrastructure.<br/><br/>Suppliers who are able to offer a solution relevant to this requirement are invited to express an interest and respond to a market engagement questionnaire. Further details on how to do this are contained within the additional information section of this notice.<br/><br/>Potential bidders are asked to note that the route to market has not yet been decided and therefore the procurement timetable has not been finalised. The Authority will make a final decision on the most appropriate route market following this engagement exercise. This may be a direct award via an existing public sector framework agreement or alternatively, the Authority may decide to run a competitive process via a mini-competition under a framework or an openly advertised procedure. If the latter, the publication of the ITT will include the publication of a Contract Notice, a Contracts Finder notice, and the ITT documents will be published on the Authority’ Atamis e-tendering system.