Search UK public tenders and contract notices

Cyber Security Operations Centre (SOC) and SIEM Services

NATIONAL ENERGY SYSTEM OPERATOR LIMITED · delivery region not published

Managed SOC and SIEM services for continuous monitoring, threat detection, and response…

• Information technology services
• Security services
• Security software package

Cyber Security 4

Government Commercial Agency · Central government · delivery region not published

This RM3764.4 Cyber Security 4 let under Procurement Act 2023 gives contracting authorities access to cyber security services. It will replace the existing Cyber Security Services 3 DPS - https://www.gca.gov.uk/agreements/RM3764.3. When contacting GCA regarding this…

• IT services: consulting, software development, Internet and support

Cyber Security and Resilience Assurance

Nuclear Decommissioning Authority · Central government · delivery region not published

Cyber Security and Resilience Assurance…

• Software testing

UKRI-6251 Cyber Security – Managed Service and Detection Response & Security Operations Centre service

UK Research and Innovation · Central government · Nationwide (UK)

UKRI-6251 Cyber Security – Managed Service and Detection Response & Security Operations Centre service. A Cyber Security provider to deliver collaborative SOC services, working with the existing STFC cyber security team…

Likely replaces the contract held by NORMCYBER LIMITED · ends 2 May 2027

• Security software development services
• Computer support and consultancy services
• Security services

Cyber Security and Physical Security awareness training.

Met Office · Central government · Nationwide (UK)

Office wishes to investigate a new approach to cyber and physical security awareness training. The new approach aims to provide staff with a solid security awareness induction, regular basic awareness and refresher training on core…

• Training software package
• Safety training services

Cyber security infrastructure software

Mayor's Office for Policing and Crime · Central government · delivery region not published

Crime (MOPAC) who are the Contracting Authority as defined in Section 2 of the Procurement Act 2023. Cyber security infrastructure software…

• IT software package

Cyber Security Services

Tameside Metropolitan Borough Council · Local authority · North West England

Azure, and virtualised infrastructure, supporting approximately 240 users. GMPF does not have a dedicated in-house cyber security team. Cyber responsibilities are distributed across general IT staff alongside broader operational duties. While the Fund has invested…

• IT services: consulting, software development, Internet and support

Cyber Security Bench Contract

Department for Business & Trade · Central government · Nationwide (UK)

The Department for Business and Trade intends to procure a Cyber Capability Bench Contract to provide specialist cyber…

• Information technology services
• Computer audit and testing services
• Security software development services

Security and Resilience Framework

Foreign, Commonwealth and Development Office · Central government · Nationwide (UK)

limited to security, stabilisation, governance, justice, serious organised crime, counter terrorism, strategic communications, defence support and cyber security. Requirements will generally be commissioned via call off further competitions…

• Security services
• Civil defence services
• Consular services
• +12

Security Systems Maintenance and Small Works Services

Scottish Parliamentary Corporate Body · Scotland

Matched lot: Lot 1. interested in understanding supplier capability relating to: Complex integrated security environments Public sector and critical infrastructure environments Cyber security and secure remote support arrangements Manufacturer accreditations and partnerships Response and support models Delivery of small works…

The Scottish Parliamentary Corporate Body (SPCB) is undertaking early market engagement in advance of a planned procurement for…

• Security services
• Surveillance and security systems and devices

Enhanced Security Operations Managed Service

Student Loans Company · Central government · Nationwide (UK)

Security Operations Managed Service - Breach Attack Simulation (BAS) Service (2026-TR-0109c) • Requirement D: Enhanced Security Operations Managed Service - Cyber Threat Intelligence (CTI) Service (2026-TR-0109d) • Requirement E: Enhanced Security Operations Managed Service - Digital Forensics…

• IT services: consulting, software development, Internet and support

Security Operation Centre

Bournemouth University · Education · South West England

provision of a co-managed Security Operations Centre (SOC) service to enhance and future-proof its cyber security operations capability. The University is seeking market feedback from experienced Managed Security Service Providers to better understand available…

• System and support services

Webinar Invitation: Cyber Accelerator Programme - Design Partnerships

Department for Science, Innovation & Technology · Central government · Nationwide (UK)

will use structured, pro bono design partnerships between public-sector organisations with identified cyber challenges and innovative cyber SMEs capable of developing and testing solutions. Participation will not provide funding, an assurance of future work…

• Computer-related professional services

Army Directorate of Digital, Security and Intelligence Industry Engagement Event 2026

Ministry of Defence · Central government · Nationwide (UK), South East England

challenge: 1.1 How do we enhance 1.2 Security against emerging Threats 1.3 Information systems, intelligence, surveillance, and decision-making capabilities to the war-fighter 1.4 Cyber and electromagnetic activity on the battlefield 2. The Framework…

• Information technology services

Health Security Campus - Pillar 2A: Project Delivery Partner (PDP)

Secretary of State for Health and Social Care acting as part of the Crown through UK Health Security Agency · Central government · delivery region not published

cycles. The PDP will also manage programme communications and information, lead BIM coordination, and ensure technology and cyber?security requirements are met. Overall, the PDP will provide UKHSA with clear programme leadership, strong controls, and delivery…

• Project management consultancy services

SPS-02306 SOC services (Security Operations Centre)

Scottish Prison Service · Scotland

meet the requirements of the Scottish Government’s Public Sector Action Plan around Cyber Resilience. The SPS is seeking to establish a Security Operations Centre (SOC) service to support the monitoring and management of cyber threats…

• Information technology services
• Computer support and consultancy services

Cyber Resilience Solution

United Lincolnshire Teaching Hospitals NHS Trust · Central government · East Midlands

All-in-one solution, offering a secure backup for appliances and software across the wider Lincolnshire Integrated Care…

• Software package and information systems

PRO005111-Services-Framework-Supply, Deliver and Maintenance of Physical Security Systems

United Utilities Water Limited · North West England

standards and regulatory expectations relevant to the water industry • Requirements applicable to Critical National Infrastructure (CNI) • Cyber and physical security convergence considerations • Compliance with recognised industry accreditations and certifications…

• Security, fire-fighting, police and defence equipment
• Architectural, construction, engineering and inspection services
• Installation services (except software)

Request for Information (RFI) Advanced Penetration Testing and Forensic Analysis enquiry for Cyber Risk Assurance

Ministry of Defence · Central government · delivery region not published

Defence (MoD) is seeking information from suppliers within the Defence Security Sector regarding their capability to perform advanced Penetration Testing, including forensic analysis, to support Cyber Risk Assurance for a capability currently being acquired…

• Information systems or technology strategic review and planning services

Independent Living Skills App for Young People

Neath Port Talbot County Borough Council · Local authority · Wales (Cymru)

following areas: • Potential approaches to app development and delivery • User engagement and accessibility considerations • Data protection, cyber security and information governance considerations • Hosting and technical requirements • Ongoing maintenance and support arrangements • Indicative development and implementation timescales…

• Programming services of application software
• Custom software development services
• Software programming and consultancy services
• +1

2025-108 Accredited MSc Programme in Energy Regulation

Ofgem · Nationwide (UK)

balancing, ancillary, local flexibility), revenue stacking, congestion •strategies to ensure the energy ecosystem is resilient to cyber and security attacks and can unlock flexibility •smart systems and data architecture (data access, interoperability, governance) •cyber resilience…

• Higher education services
• Adult and other education services

2026 WS3201649050 OT Network Services (Routers, Switches)

Anglian Water Services · East of England

Regulations 2018, the NCSC Cyber Assessment Framework (CAF), and wider industry best practice. Providing access to accredited technical expertise, vendor specialisms, and value-added services that enhance the performance, security, and reliability of our OT estate…

• Networks

Pre-Market Engagement: Automated Teller Machines (ATM) and Currency Services

NETWORK RAIL INFRASTRUCTURE LIMITED · Nationwide (UK)

Matched lot: Lot 1. technology, innovation and market capabilities. Explore commercial models, including revenue generation opportunities. Understand approaches to safety, sustainability, cyber security and resilience. Gather feedback on foreign currency services and other value-added solutions. Identify any additional services…

Network Rail (NR) is looking to procure a partner to provide, manage, operate and maintain Automated Teller Machine…

• Automatic cash dispensers
• Banking services
• Financial markets administration services
• +1

Apprenticeships and Education Services Framework

Salisbury NHS Foundation Trust · Central government · Nationwide (UK)

Matched lot: Lot 4 - Digital and Data Education Services. technology education services, including but not limited to technical training, digital skills development, data literacy, analytics, cyber security and related workforce development programmes…

Procurement of a framework solution for both clinical and non-clinical apprenticeships and education related services. The offering…

Likely replaces the contract held by Listed in Additional Unformation section III

• Education and training services

SEL ICB (Bexley) Primary Care Acute Respiratory Infection (ARI) Hub

NHS North East London Integrated Care Board · NHS & health · Greater London

Matched lot: Lot 1. registered practice without delay. • Operate a secure clinical record-sharing process compliant with NHS information governance, cyber security and data protection requirements. • Maintain access to NHS Smartcards, NHSmail and other nationally mandated digital services required…

NHS South East London Integrated Care Board intends to commission a time-limited Primary Care Acute Respiratory Infection…

• Health services

Technology Enabled Community Care (TECC)

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

that meets the requirements of PPN 006 as outlined in the PPN, OR Excused in exceptional circumstances • Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will…

• Devices for the elderly
• Alarm systems
• Communications infrastructure
• +4

Procedure Consumables 2027

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

that meets the requirements of PPN 006 as outlined in the PPN, OR Excused in exceptional circumstances. • Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will…

• Medical consumables

Microbiology Services

The Royal Marsden NHS Foundation Trust · Central government · Greater London

term sustainability of the service • Digital inter-operability and compliance to NHS and U.K. information governance and cyber security regulations Business Continuity • Long-term workforce strategy incorporating recruitment, staff development and retention • Robust business continuity plan…

• Pathology services

IT Infrastructure Project

Reclaim Fund Limited · North West England

operational technology environment and will include service desk, end user support, infrastructure management, Microsoft 365 administration, cyber security support, service management and associated technical consultancy services. RFL will conduct the procurement through Crown Commercial Service…

• Computer-related services
• Computer support and consultancy services

Fire Command and Control - CFRS

Cornwall Council · Local authority · South West England

Improved usability for operators, supervisors, and support staff • Improved reporting, assurance, management information, and auditability • Improved cyber resilience, security, and supportability with accreditation • Improved interoperability with partner organisations and other emergency services • Improved resilience for communications…

• Software package and information systems

Fire Command and Control - CFRS

Cornwall Council · Local authority · South West England

Improved usability for operators, supervisors, and support staff • Improved reporting, assurance, management information, and auditability • Improved cyber resilience, security, and supportability with accreditation • Improved interoperability with partner organisations and other emergency services • Improved resilience for communications…

• Software package and information systems

Renal Replacement Therapies Services Technologies and Consumables

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

that meets the requirements of PPN 006 as outlined in the PPN, OR Excused in exceptional circumstances •Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will…

• Renal fluid
• Blood plasma filters
• Dialysis filters
• +11

Decontamination Consumables

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

that meets the requirements of PPN 006 as outlined in the PPN, OR Excused in exceptional circumstances. - Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will…

• Paper sterilisation pouches or wraps
• Automated swab test kits
• Chemical products
• +15

Neuromodulation Devices and Associated Products

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

that meets the requirements of PPN 006 as outlined in the PPN, OR Excused in exceptional circumstances •Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will…

Likely replaces the contract “Syringes, Needles and Associated Products” · ends 30 Jun 2029

• Stimulator
• Catheters
• Infusion pumps
• +2

Medical Examination Gloves

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

valid Carbon Reduction Plan (CRP) link on their website that meets the requirements of PPN 006. • Cyber Security Tenderers that handle patient or personal data, or provide IT systems, services, or devices, must either: • hold…

• Disposable gloves

Surgical Gloves

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

valid Carbon Reduction Plan (CRP) link on their website that meets the requirements of PPN 006. • Cyber Security Tenderers that handle patient or personal data, or provide IT systems, services, or devices, must either: • hold…

Likely replaces the contract “Surgical Gloves” · ends 7 Jun 2027

• Surgical gloves

Managed Equipment & Clinical Service Solutions

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

exceptional circumstances. CRP has to be dated within the 12 months prior to tender close date. • Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will need…

• Hospital and related services
• Health and social work services
• Health services
• +10

Surface Tunnel Maintenance

Transport for London · Greater London

incident response, asset performance reporting, cleaning, lifecycle replacement of consumables and components, inventory management, and physical and cyber security considerations associated with operational systems. This MSQ forms part of TfL's preliminary market engagement activities…

• Road tunnel construction work
• Breakdown and recovery services for motor vehicles
• Bridge and tunnel operation services
• +4

UHB Retail EPOS Till System Upgrade PME

University Hospitals Birmingham NHS Foundation Trust · Central government · Nationwide (UK)

Verifone • Improved back-office functionality and reporting for Catering • Enhanced customer promotion capability for end user • Improved cyber security and operating system compliance as required by IT • Review is internal SQL hosting or Cloud-based portal…

• Hardware
• Point of sale (POS) software package

RFI - National Recruitment Service (Postgraduate Training)

NHS England · Central government · delivery region not published

centred experience. The requirement also includes data migration, integration with existing systems and APIs, reporting and analytics, cyber security, information governance, service management and ongoing agile development. Implementation will be phased, building on the existing Alpha…

• Health services

Network & Telecommunications Procurement Project (NTPP)

Transport for London · Nationwide (UK)

infrastructure and consolidation of support contracts we have dramatically simplified our estate, improved reliability, increased levels of cyber security and materially reduced our costs. While our strategy recommends that we consolidate to the greatest extent possible…

• IT services: consulting, software development, Internet and support

ComIT 4 - ICT Solutions

Mid and South Essex NHS Foundation Trust · Central government · Nationwide (UK)

Assisted Services, Computer Science. These categories encompass end-to-end digital requirements including hardware, audio visual, cloud, cyber security, AI, automation, robotics, managed services, consultancy, support and associated services, whether procured as individual items or combined…

• Telecommunications equipment and supplies
• Accumulators, primary cells and primary batteries
• Added-value database services
• +92

COMIT4 - ICT Solutions

Mid and South Essex NHS Foundation Trust · Central government · Nationwide (UK)

Assisted Services, Computer Science. These categories encompass end-to-end digital requirements including hardware, audio visual, cloud, cyber security, AI, automation, robotics, managed services, consultancy, support and associated services, whether procured as individual items or combined…

• Telecommunications equipment and supplies
• Accumulators, primary cells and primary batteries
• Added-value database services
• +92

DWP Strategic External Resourcing Programme

Department for Work & Pensions · Central government · delivery region not published

provide Digital Specialists and PMO roles, this includes: Engineering, Product & Delivery, User Centred Design, Architecture, Data, Cyber Security, PMO and Artificial Intelligence. The roles will largely align to the Government Digital and Data (GDaD), formally known…

• IT services: consulting, software development, Internet and support

National Advocacy Information, Advice and Safety Net Service

Department for Education · Central government · North East England, North West England, Yorkshire and the Humber, East Midlands, West Midlands, East of England

emerging themes; • maintain appropriate digital, telephony, case management and reporting systems; • comply with safeguarding, information governance, cyber security and data protection requirements; • ensure appropriate workforce capacity, skills, training and quality assurance arrangements; • support performance monitoring, evaluation…

• Welfare services for children and young people
• Administrative social services
• Guidance and counselling services
• +1

Vascular Therapy and Associated Products 2028

SUPPLY CHAIN COORDINATION LIMITED · Nationwide (UK)

exceptional circumstances. CRP has to be dated within the 12 months prior to tender close date. ○ Cyber Security: If you handle patient or personal data, or provide any IT systems, services, or devices you will need…

• Medical consumables
• Garments
• Protective socks or hosiery
• +2

Glasgow Business Growth Programme- Phase 4 Framework

Glasgow City Council · Local authority · Scotland

Matched lot: Digital Transformation. Data Analytics Mobile or internet technologies Customisation of software or App development Cloud Computing AI Digital Strategy Cyber Security…

Glasgow City Council (GCC) manages a framework for the delivery of consultancy services in the area of Business…

Likely replaces the contract “Glasgow Business Growth Framework - Phase 3”

• Business and management consultancy services
• Advertising consultancy services
• Business analysis consultancy services
• +12

The Provision of Personal & Social Care at The Croft, Abbots Road, Newtownabbey for People Living with Dementia

Northern Health and Social Care Trust · Central government · Northern Ireland

Northern Ireland Procurement Policy Note's (PPN's) relating to Social Value and Human Rights, cyber security requirements, sustainability and net zero requirements, that will be included in any future tender. This notice has been placed…

• Health and social work services

Network Managed Service

Post Office Limited · Nationwide (UK)

scope of services "as is" consists of: Data Centre's, WAN Branch & Admin, Managed LAN Service, NNI, Cyber Security, Break Fix Management Information, Mobile devices etc.​ Post Office is considering a strategy that covers today…

• Systems and technical consultancy services
• Computer support and consultancy services
• Data-transmission equipment
• +8

Provision of Print, Mail Fulfilment and Document Consolidation Services for Council Tax, Business Rate and Benefits Communications

Caerphilly County Borough Council · Local authority · Wales (Cymru)

document types into a single statutory communication pack. 3. Typical implementation timescales. 4. Security certifications and compliance standards held (e.g. ISO 27001, Cyber Essentials Plus, GDPR arrangements). 5. Cloud-based or hosted service options available…

• Printing and delivery services
• Printing and distribution services
• Printing services

Provision of Payroll and Pension Services PA23 Tender

University Hospitals of Leicester NHS Trust · Central government · East Midlands

sacrifice providers) • Employee and manager self service, including enhanced features (e.g., real time pay modelling and calculators) • Cyber security, data protection and information governance compliance • Mobilisation, transition, onboarding and exit support • Compliance with applicable NHS procurement…

• Personnel and payroll services
• IT software package
• Software package and information systems

Procurement of an Enterprise Risk Management (ERM) Solution

NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust) · Central government · Nationwide (UK), Wales (Cymru)

platform, configuration, implementation, training, ongoing support, and maintenance. The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape. The contract duration is expected…

• Software package and information systems

NSpOC Sovereign Sensor Capability - Active RF

UK Space Agency · Central government · Nationwide (UK)

integrating into NSpOC's operational mission system. The solution must therefore demonstrate resilience, high availability, environmental compliance, cyber security robustness, and suitability for operation within a secure, safety critical environment. A tender notice containing full details…

• Radar surveillance equipment
• Radar station construction work

UK3 - Programme Frontier

Ministry of Defence · Central government · Nationwide (UK)

covers applications of frontier AI across every part of Defence. One of the early focus areas is cyber security, and so through this work we want to understand options in the market for AI tools…

• IT software development services

Delivery of Apprenticeships to the Royal Corps of Signals

Ministry of Defence · Central government · Nationwide (UK)

Level 3 Engineering Maintenance Technician (Single Discipline) (ST1426), L2 Supply Chain Warehouse Operator (ST0259) and potentially L3 Cyber Security Technician (ST0865). There is a requirement for an APAR registered Provider to supplement the military training delivery…

• Education and training services

Internal Audit Service

London School of Hygiene & Tropical Medicine · Education · Nationwide (UK)

strategic risk register. LSHTM’s strategic risk register contains risks relating to financial sustainability, research quality, cyber security, effective change management and student experience…

Likely replaces the contract held by BDO LLP

• Internal audit services
• Accounting and auditing services
• Accounting, auditing and fiscal services
• +2

Mobile Threat Detection

East of England Ambulance Service NHS Trust · NHS & health · East of England

Matched lot: Lot 1. contact datasecurity@eastamb.nhs.uk. Additional information: We will be sourcing this service via a further competition from the CCS Cyber Security Services 3 Dynamic Purchasing Framework (RM3764.3). If you are interested in this opportunity and not currently registered…

Mobile Threat Detection (MTD) Solution…

• Cybercafé services

National Space Operations Centre (NSpOC): Optical Sovereign Sensor Software (OSSS)

UK Space Agency · Nationwide (UK)

Matched lot: Lot 1. place at point of bid submission for this tender. Any bidders without Cyber Essentials Plus accreditation will be rejected. Owing to the security requirements relating to access to BOREALIS, this tender will be restricted…

UKSA has recently begun the hardware deployment of our Space Domain Awareness optical tracking stations. To operate these…

Likely replaces the contract held by ST Engineering Antycip SAS · ended 31 Mar 2026

• IT services: consulting, software development, Internet and support

Pipeline Notice: Digital Legal Case Management System for the SBA

Ministry of Defence · Central government · delivery region not published

capture to disclosure, litigation, long-term archiving and disposal. The system must be compliant with all MOD cyber, security, and information-assurance requirements, including Official-Sensitive classification. The system must provide data encryption at rest…

• Industry specific software package
• Document management software package
• IT software package
• +4

UK3 - Provision of Outward Mindset Sustainment and Implementation

Ministry of Defence · Central government · Nationwide (UK)

diagnosing and resolving conflict at the lowest possible level, and providing support to others in that process. Cyber Security: The MoD has a duty to protect itself from Cyber threats and now we extend this…

• Management training services
• Personal development training services
• Training services

Milestone Care Plus Package Software

Department for Work & Pensions · Central government · delivery region not published

XProtect systems Access to updates, patches and new features Improved workflow efficiency and system reliability Management of cyber security vulnerabilities Enhanced system monitoring, alarm handling and overall operational performance The appointed Supplier will be required…

• Software maintenance and repair services

Preliminary Market Engagement - Community Nursing Beds for Provision of Assessment and/or Rehabilitation within the Antrim Locality

Northern Health and Social Care Trust · Central government · delivery region not published

Northern Ireland Procurement Policy Note’s (PPN’s) relating to Social Value and Human Rights, cyber security requirements, sustainability and net zero requirements, that will be included in any future tender. This notice has been placed…

• Health and social work services

The Provision of Long Acting Reversible Contraception (LARC) Services

Hertfordshire County Council · Local authority · East of England

Matched lot: Lot 1. Suppliers MUST be at a minimum of Cyber Essentials accreditation level OR accredited under a process of recognised equivalence or better, e.g. Public Sector Network (PSN) or Data Security and Protection Toolkit (NHS Digital) or ISO2700…

It is the intention to award a contract(s) using the Direct Award B process under the Provider…

Likely replaces the contract held by Pregnancy Expectations Trauma and Loss Society (PETALS)

• Medical practice services

UK2 - Provision of a Computer Aided Dispatch System for SBA emergency services in Cyprus.

Ministry of Defence · Central government · delivery region not published

Cyber & Specialist Operations Command (CSOC) Commercial Branch seeks a single supplier capable of delivering an online Computer Aided Dispatch (CAD) solution to integrate all emergency services operating within the Sovereign Base Areas (SBAs) on the island…

• Software supply services
• Command, control, communication systems
• Data storage services
• +3

NHS Healthier You

NHS England · Central government · delivery region not published

Content Accessibility Guidelines (WCAG). These requirements will be tested at Stage 1 evaluation (SQ) as pass/fail questions.  Cyber Security Requirements Bidders will need to demonstrate they (or their relevant sub-contractor(s)) hold, or will hold…

• Health services

UK2 Notice Template

Department for Science, Innovation & Technology · Central government · Nationwide (UK)

technology (OT) security, business continuity, supply chain security, risk management, data centre facilities and data protection. Whilst cyber security risks will play a part in this report (e.g. insider threat), they should not be the primary…

Likely replaces the contract held by NPL Management Limited

• Infrastructure works consultancy services
• Research services
• Telecommunication consultancy services

Suffolk Neurodevelopmental Children and Young People's Assessment

Norfolk and Suffolk NHS Foundation Trust · NHS & health · East of England

Matched lot: Lot 1. Personal Confidential Data (PCD) encrypted at rest and in transit • Have a Business Continuity Plan that includes cyber security incident response • Support with the completion of a Data Protection Impact Assessment • The Contractor will ensure…

This will be an NHS Standard Contract Sub-contract for the provision of Neurodevelopmental Assessments (ADHD and Autism…

• Health services
• Health and social work services

Peaks & Plains - Asset Management System Replacement

Cheshire Peaks and Plains Housing Trust Limited · Housing · delivery region not published

cloud-hosted service, with all data held securely within the United Kingdom under recognized information security accreditations (e.g., ISO 27001 / Cyber Essentials). The supplier will be required to deliver the system through a structured implementation methodology…

• Financial systems software development services
• Administration software package
• Data collection and collation services
• +1

Vehicle Mounted Computers

Yorkshire Purchasing Organisation · Yorkshire and the Humber

implementation considerations and warranty/support. Proposed solutions should be capable of receiving appropriate security patches and supporting YPO’s compliance with ISO 27001 and Cyber Essentials for an anticipated period of three to five years. This engagement…

• Portable computers

Preliminary Market Engagement - Provision of Therapeutic Intervention services for adults who have experienced sexual violence and abuse

Strategic planning and performance group · Central government · Northern Ireland

Notes (PPN’s) relating to Social Value & Human Rights that will be included in any future Tender • Cyber Security requirements • Sustainability and Net Zero requirements Please refer to the ‘CP13 SPPG – Preliminary Market Engagement Questionnaire Explanatory…

• Health and social work services
• Other community, social and personal services

RIIO-GT3 Control System Replacement MWC Framework Expression of Interest

NATIONAL GAS TRANSMISSION PLC · delivery region not published

intended to safeguard operational integrity, protect critical assets, and align with national and international standards for cyber-secure infrastructure. RIIO-GT3 Control System Replacement MWC Framework NGT has now transitioned from the RIIO-GT2 regulatory period…

• Engineering works and construction works

Telematching Services

Office for National Statistics · Central government · Nationwide (UK)

evidence progress towards, prior to contract award, the following: ISO 27001 certification (or equivalent Information Security Management System); Cyber Essentials or Cyber Essentials Plus certification; UK-based data storage and processing only; Baseline Personnel Security Standard…

• Short Message Service (SMS) services
• Data collection and collation services
• Database services
• +1

Managing and Monitoring Multi-Tier Supplier Risk

CADENT GAS LIMITED · delivery region not published

Ariba Risk. The solution should enable the identification, assessment and proactive management of financial, operational, business continuity, cyber, ESG, compliance, geopolitical and reputational risks affecting suppliers and sub-tier suppliers. It must provide robust risk scoring…

• System management software package
• Content management software package
• Software-related services
• +1

Digital Contractor Control of Work Platform

SEVERN TRENT WATER LIMITED · North East England, North West England, Yorkshire and the Humber, East Midlands, West Midlands, East of England

working • Field-based approvals Non-Functional Requirements Suppliers should comment on: • SaaS deployment model • UK hosting options • Cyber security accreditations • Identity management • Single Sign-On • Zero Trust Architecture • API capability • Data export capability • Business continuity • Disaster…

• Software package and information systems

Case Notes Transcription & Summarisation Tool

Essex County Council · Local authority · East of England

errors; how changes can be applied across transcripts and summaries and the quality assurance mechanisms. 4. Security, privacy and information governance: The solution must satisfy public sector requirements for handling sensitive personal information. This market engagement…

• Information technology services
• IT software package
• Miscellaneous software package and computer systems
• +1

Natural History Museum - Bulk Storage Solution

Natural History Museum · Central government · delivery region not published

24/7 monitoring, capacity planning, security patching, backup and disaster recovery, and service delivery under contractual Experience Level Agreements (XLAs). Any supplier would need to be certified to ISO27001 and Cyber Essentials Plus. This Preliminary Market Engagement…

• Data storage services
• Data services

Governance Risk and Compliance Tool

THAMES WATER UTILITIES LIMITED · Greater London, South East England

procure a Governance, Risk and Compliance (GRC) solution and associated professional services to support Digital and Cyber Security governance, risk management, and compliance activities. The solution will support identification, monitoring, management, and reporting of cyber…

• Software package and information systems
• IT services: consulting, software development, Internet and support

Replacement Pharmacy Dispensing Robot

NTW Solutions Limited · Central government · North East England

with wider clinical systems * Use of open standards and APIs * Reporting and data extraction * Compliance with NHS cyber security and IG requirements Particular interest is in solutions that avoid bespoke integrations and remain adaptable. 5. Supplier…

• Industrial robots

The provision of SAP and Application Support

Wales & West Utilities Limited · South West England, Wales (Cymru)

Integration, Middleware & Interfaces (SAP Integration suite, Webmethods etc). Safety, Compliance & Risk Management Systems (SAP GRC, SSO). Cyber Security & Identity (IT & OT) (CAF/NIS…

• Software-related services
• System and support services

Digital Learning Library

Regulator of Social Housing · Central government · North East England, North West England, Yorkshire and the Humber, East Midlands, West Midlands, East of England

learning opportunities, including mandatory training for all staff (such as health and safety, data protection and cyber security), alongside wider development covering leadership, inclusion and role-specific skills. The function also supports the identification of skills…

• Training services
• E-learning services

Preliminary Market Engagement 2026 - Provision of Primary Care Talking Therapies Service for Service Users aged 18+ years within the BHSCT [6508040]

Belfast Health and Social Care Trust · Central government · Northern Ireland

relating to Social Value and Human Rights that will be included in any future Tender; Cyber Security requirements; and Sustainability and Net Zero requirements. Please refer to the ‘CP13 BHSCT - Market Engagement Briefing Paper’ and associated…

• Counselling services
• Community health services
• Guidance and counselling services
• +3

North and East Digital Twin

NETWORK RAIL INFRASTRUCTURE LIMITED · Central government · delivery region not published

Azure environment, and support Microsoft Entra single sign-on (SSO). Compliance with Network Rail’s information and cyber security standards, as well as relevant industry standards (e.g., ISO 27001, GDPR), is mandatory. User access: The platform…

• Platform interconnectivity software development services
• Analytical or scientific software development services
• Computer facilities management services
• +9

Penetration Testing Services 2026-2030

NHS England · Central government · delivery region not published

year call off contract (2+1+1). The procurement route is Crown Commercial Services' Cyber Security Services 3 Dynamic Purchasing System (DPS) - Ref RM3764. Penetration testing is required throughout various programmes, systems and services across…

• Computer-related professional services

Auto-Reconfiguration Signalling Power Supply Systems - Preliminary Market Engagement

NETWORK RAIL INFRASTRUCTURE LIMITED · Central government · Nationwide (UK)

term asset strategy and maintain operational performance, we are exploring a future programme to introduce a modern, cyber secure, modular, maintainable Auto Reconfiguration SPS platform. This aligns to wider organisational objectives including: • Improving safety and reliability…

• Signalling equipment

Techfirst womens Programme

Department for Science, Innovation & Technology · Central government · Nationwide (UK)

time, employers—particularly SMEs—are experiencing severe digital skills shortages across key frontier‑technology roles, including AI, cyber security, advanced connectivity, semiconductors, quantum technologies and engineering biology. These labour‑market failures are constraining innovation, productivity…

• Computer-related services

TfGM SOC 2026

Transport for Greater Manchester · Nationwide (UK)

provides and is seeking a supplier to enhance its ability to detect, respond and recover from cyber-security incidents through a managed 24x7x365 Security Operations Centre Capability. TfGM is therefore looking at running a procurement exercise…

• IT services: consulting, software development, Internet and support

BCHC Secure WAN

Birmingham Community Healthcare NHS Foundation Trust · Central government · delivery region not published

Trusts are accurate. Driven by NHS England's 10 Year Plan and improving the Trusts’ Cyber Security posture, the aim of the collaboration is to build on previous investments in digital transformation and national strategies like…

• Wide area network services

RIIO-GT3 Control System Replacement FEED Framework Expression of Interest

NATIONAL GAS TRANSMISSION PLC · delivery region not published

intended to safeguard operational integrity, protect critical assets, and align with national and international standards for cyber-secure infrastructure. RIIO-GT3 Control System Replacement FEED Framework As NGT approaches the end of RIIO…

• Engineering services

Harwich Office Upgrades - HVAC

Corporation of Trinity House · Central government · Greater London

cooling SEER of 7.5. Improvement in temperature control with a ±1°C deadband Identical level of redundancy Cyber security assessment and mitigation provided Timescales Hardware delivery – by end March 2026 Installation – May to Oct 2026 Commissioning…

• Heating, ventilation and air-conditioning installation work

UHB Network Detection & Response Solution

University Hospitals Birmingham NHS Foundation Trust · Central government · delivery region not published

recommended response to known and unknown threats traversing the Trust network infrastructure. The solution will allow the Cyber Security Team and Network Teams to respond quickly. With such a disparate network infrastructure we need the solution…

• Network management software services

T25/0018 – Smart Card & Identity Management

University of Northumbria at Newcastle · Education · North East England

credentials and future digital identity options and centralised dashboard for card issuance, usage tracking, and operational reporting. •Cyber secure offerings to align to National Cyber Security Centres Cyber Assessment Framework Prior to commencing formal procurement…

• Smart cards
• IT services: consulting, software development, Internet and support
• Software package and information systems

DDaT25380 - UKRI - BGS Web Application Firewall (WAF)

UK Research and Innovation · Central government · Nationwide (UK)

life in December 2026 and needs to be replaced to maintain a secure operating environment and Cyber Essentials Plus certification, which critically underpins BGS commercial activities. The primary objective for deploying the new solution…

• Computer platforms
• IT services: consulting, software development, Internet and support
• Software package and information systems