Planning

Procurement of an Enterprise Risk Management (ERM) Solution

VELINDRE UNIVERSITY NHS TRUST

This public procurement record has 2 releases in its history.

PlanningUpdate

14 Apr 2026 at 14:26

UK2 - Preliminary Market Engagement Notice
Planning

09 Mar 2026 at 14:00

UK2 - Preliminary Market Engagement Notice
Summary of the contracting process

Velindre University NHS Trust, located in Cardiff, United Kingdom, is in the planning stage of procuring an Enterprise Risk Management (ERM) Solution. This procurement process aims to enhance the recording and management of various risks, including corporate, clinical, and project risks, within the organisation. The procurement falls under the 'Software package and information systems' category and targets goods delivery primarily in the UKL region. Key dates include supplier engagement days scheduled for 8th May 2026 and 19th June 2026, with confirmations required by 7th April 2026 for materials in Welsh. The procurement method involves preliminary market engagement with a contract potentially extending to a maximum period ending in March 2034.

This tender presents significant growth opportunities for businesses specialising in software solutions that comply with NHS governance and cyber-security standards. The suitable candidate must provide a comprehensive ERM platform with functionalities such as incident reporting, real-time analytics, and secure hosting. The tender specifically encourages participation from small and medium-sized enterprises (SMEs), offering a long-term contract with potential renewals. Businesses capable of integrating their solutions with existing NHS systems and providing robust training and support services will find this opportunity particularly fitting. Successful bidders will be integral in contributing to the strategic and operational risk management framework of Velindre University NHS Trust.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Information

Notice Title

Procurement of an Enterprise Risk Management (ERM) Solution

Notice Description

Velindre University NHS Trust (the Authority) wishes to alert suppliers to its intention to hold preliminary market engagement with regards to the potential procurement of an Enterprise Risk Solution to assist in the recording and management of risks across the Authority, ranging from corporate, clinical and project risks. The Authority intends to procure an enterprise-wide software solution to support strategic and operational risk management. The contract will cover the provision of the platform, configuration, implementation, training, ongoing support, and maintenance. The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape. The contract duration is expected to be: Initial term: 5 years Optional extensions: 2+2 years The Authority seeks an ERM solution that provides: - Comprehensive risk register functionality - Incident and issue reporting - Real-time dashboards & analytics - Workflow, approvals & audit trail - User-role and permission management - NHS-compliant information governance and security controls - Integration with existing Authorities systems (where applicable) - Training and support for end-users and administrators - Secure hosting and business continuity capabilities - Project management tools such as schedule risk analysis (Monte Carlo Simulation) or equivalent - Open architecture and integration into other systems All suppliers must comply with relevant NHS and statutory requirements, including data-protection legislation and cyber-security standards.

Planning Information

The Authority wishes to engage with suppliers to: (i) Develop the Authorities requirement and procurement approach, (ii) To support the Authority in designing a procurement procedure including conditions of participation and award criteria (iii) To identify potential suppliers, to supply goods and services, and to inform contractual terms To achieve effective preliminary market engagement the Authority will hold a supplier day on the 08/05/2026 and 19/06/2026. Initially, eight 45-minute slots will be made available and will be offered on a first come, first served basis. At its sole discretion the Authority may extend the opportunity beyond this dependent upon supplier response, but this is not guaranteed Interested suppliers should provide confirmation to the following email address: Gemma.Roscrow@wales.nhs.uk Please provide confirmation by 7th April 2026 for any materials required in the medium of the Welsh language.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06656c
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/033858-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Goods
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

CPV Codes

48000000 - Software package and information systems

Notice Value(s)

Tender Value
£1
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
14 Apr 20261 months ago
Submission Deadline
Not specified
Future Notice Date
1 Sep 20264 months to go
Award Date
Not specified
Contract Period
31 Mar 2027 - 31 Mar 2032 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
VELINDRE UNIVERSITY NHS TRUST
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CARDIFF
Postcode
CF15 7QZ
Post Town
Cardiff
Country
Wales
Major Region (ITL 1)
TLL Wales
Basic Region (ITL 2)
TLL5 South East Wales
Small Region (ITL 3)
TLL51 Central Valleys and Bridgend
Delivery Location
TLL Wales
Local Authority
Rhondda Cynon Taf
Electoral Ward
Taff's Well
Westminster Constituency
Cardiff North

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-06656c-2026-04-14T15:26:54+01:00",
    "date": "2026-04-14T15:26:54+01:00",
    "ocid": "ocds-h6vhtk-06656c",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-NHS-RQF",
            "name": "Velindre University NHS Trust",
            "identifier": {
                "scheme": "GB-NHS",
                "id": "RQF"
            },
            "address": {
                "streetAddress": "Unit 2 Charnwood Court,",
                "locality": "Cardiff",
                "postalCode": "CF15 7QZ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKL15"
            },
            "contactPoint": {
                "email": "Gemma.Roscrow@wales.nhs.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://nwssp.nhs.wales/ourservices/procurement-services/",
                "classifications": [
                    {
                        "id": "publicUndertaking",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public undertaking"
                    },
                    {
                        "id": "GB-WLS",
                        "scheme": "UK_CA_DEVOLVED_REGULATIONS",
                        "description": "Welsh devolved regulations apply"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-NHS-RQF",
        "name": "Velindre University NHS Trust"
    },
    "planning": {
        "milestones": [
            {
                "id": "engagement",
                "type": "engagement",
                "description": "The Authority wishes to engage with suppliers to: (i) Develop the Authorities requirement and procurement approach, (ii) To support the Authority in designing a procurement procedure including conditions of participation and award criteria (iii) To identify potential suppliers, to supply goods and services, and to inform contractual terms To achieve effective preliminary market engagement the Authority will hold a supplier day on the 08/05/2026 and 19/06/2026. Initially, eight 45-minute slots will be made available and will be offered on a first come, first served basis. At its sole discretion the Authority may extend the opportunity beyond this dependent upon supplier response, but this is not guaranteed Interested suppliers should provide confirmation to the following email address: Gemma.Roscrow@wales.nhs.uk Please provide confirmation by 7th April 2026 for any materials required in the medium of the Welsh language.",
                "dueDate": "2026-06-19T23:59:59+01:00",
                "status": "scheduled"
            }
        ],
        "documents": [
            {
                "id": "020920-2026",
                "documentType": "marketEngagementNotice",
                "noticeType": "UK2",
                "description": "Preliminary market engagement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/020920-2026",
                "datePublished": "2026-03-09T14:00:38Z",
                "format": "text/html"
            },
            {
                "id": "033858-2026",
                "documentType": "marketEngagementNotice",
                "noticeType": "UK2",
                "description": "Preliminary market engagement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/033858-2026",
                "datePublished": "2026-04-14T15:26:54+01:00",
                "format": "text/html"
            }
        ]
    },
    "tender": {
        "id": "ocds-h6vhtk-06656c",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Procurement of an Enterprise Risk Management (ERM) Solution",
        "description": "Velindre University NHS Trust (the Authority) wishes to alert suppliers to its intention to hold preliminary market engagement with regards to the potential procurement of an Enterprise Risk Solution to assist in the recording and management of risks across the Authority, ranging from corporate, clinical and project risks. The Authority intends to procure an enterprise-wide software solution to support strategic and operational risk management. The contract will cover the provision of the platform, configuration, implementation, training, ongoing support, and maintenance. The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape. The contract duration is expected to be: Initial term: 5 years Optional extensions: 2+2 years The Authority seeks an ERM solution that provides: - Comprehensive risk register functionality - Incident and issue reporting - Real-time dashboards & analytics - Workflow, approvals & audit trail - User-role and permission management - NHS-compliant information governance and security controls - Integration with existing Authorities systems (where applicable) - Training and support for end-users and administrators - Secure hosting and business continuity capabilities - Project management tools such as schedule risk analysis (Monte Carlo Simulation) or equivalent - Open architecture and integration into other systems All suppliers must comply with relevant NHS and statutory requirements, including data-protection legislation and cyber-security standards.",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "48000000",
                        "description": "Software package and information systems"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKL",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UKL",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 1,
            "amount": 1,
            "currency": "GBP"
        },
        "mainProcurementCategory": "goods",
        "aboveThreshold": true,
        "lots": [
            {
                "id": "1",
                "suitability": {
                    "sme": true
                },
                "contractPeriod": {
                    "startDate": "2027-04-01T00:00:00+01:00",
                    "endDate": "2032-03-31T23:59:59+01:00",
                    "maxExtentDate": "2034-03-31T23:59:59+01:00"
                },
                "hasRenewal": true,
                "status": "planning"
            }
        ],
        "communication": {
            "futureNoticeDate": "2026-09-01T23:59:59+01:00"
        },
        "status": "planning",
        "amendments": [
            {
                "id": "033858-2026",
                "description": "The notice has been updated to provide updated dates for supplier days from 10th April 2026 to 8th May 2026 and 19th June 2026."
            }
        ]
    },
    "language": "en"
}