Planning

Procurement of an Enterprise Risk Management (ERM) Solution

VELINDRE UNIVERSITY NHS TRUST

This public procurement record has 1 release in its history.

Planning

09 Mar 2026 at 14:00

UK2 - Preliminary Market Engagement Notice
Summary of the contracting process

Velindre University NHS Trust is undertaking a procurement process for an Enterprise Risk Management (ERM) Solution. This initiative is currently in the planning stage, focusing on the procurement of a software solution that addresses the management of risks across corporate, clinical, and project domains. The procurement category falls under software packages and information systems, with the intention of implementing an enterprise-wide platform meeting NHS governance and security standards. The procurement process will be initiated with a supplier engagement day on the 10th of April, 2026, in Cardiff. Suppliers interested in participating should confirm their attendance by the 7th of April, 2026. This is part of a tender initiation process, and suppliers can expect further notice in June 2026.

This tender represents a significant opportunity for businesses specialising in software solutions for risk management, particularly those with expertise in NHS-compliant systems integration, cybersecurity, and data protection. The tender seeks solutions offering real-time analytics, risk register functionality, and secure hosting capabilities, with a planned contract spanning five years, plus optional extensions. Small and medium enterprises (SMEs) capable of delivering comprehensive ERM solutions will find this particularly advantageous, as it aligns with statutory requirements and technological integration mandates of the Authority. The engagement provides a platform for innovative firms to establish long-term collaborations with Velindre University NHS Trust, fostering growth through strategic alignment and service excellence.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Information

Notice Title

Procurement of an Enterprise Risk Management (ERM) Solution

Notice Description

Velindre University NHS Trust (the Authority) wishes to alert suppliers to its intention to hold preliminary market engagement with regards to the potential procurement of an Enterprise Risk Solution to assist in the recording and management of risks across the Authority, ranging from corporate, clinical and project risks. The Authority intends to procure an enterprise-wide software solution to support strategic and operational risk management. The contract will cover the provision of the platform, configuration, implementation, training, ongoing support, and maintenance. The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape. The contract duration is expected to be: Initial term: 5 years Optional extensions: 2+2 years The Authority seeks an ERM solution that provides: - Comprehensive risk register functionality - Incident and issue reporting - Real-time dashboards & analytics - Workflow, approvals & audit trail - User-role and permission management - NHS-compliant information governance and security controls - Integration with existing Authorities systems (where applicable) - Training and support for end-users and administrators - Secure hosting and business continuity capabilities - Project management tools such as schedule risk analysis (Monte Carlo Simulation) or equivalent - Open architecture and integration into other systems All suppliers must comply with relevant NHS and statutory requirements, including data-protection legislation and cyber-security standards.

Planning Information

The Authority wishes to engage with suppliers to: (i) Develop the Authorities requirement and procurement approach, (ii) To support the Authority in designing a procurement procedure including conditions of participation and award criteria (iii) To identify potential suppliers, to supply goods and services, and to inform contractual terms To achieve effective preliminary market engagement the Authority will hold a supplier day on the 10/04/2026. Initially, eight 45-minute slots will be made available and will be offered on a first come, first served basis. At its sole discretion the Authority may extend the opportunity beyond this dependent upon supplier response, but this is not guaranteed Interested suppliers should provide confirmation to the following email address: Gemma.Roscrow@wales.nhs.uk Please provide confirmation by 7th April 2026 for any materials required in the medium of the Welsh language.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06656c
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/020920-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Goods
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

CPV Codes

48000000 - Software package and information systems

Notice Value(s)

Tender Value
£1
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
9 Mar 20265 days ago
Submission Deadline
Not specified
Future Notice Date
1 Jun 20263 months to go
Award Date
Not specified
Contract Period
31 Mar 2027 - 31 Mar 2032 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
VELINDRE UNIVERSITY NHS TRUST
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CARDIFF
Postcode
CF15 7QZ
Post Town
Cardiff
Country
Wales
Major Region (ITL 1)
TLL Wales
Basic Region (ITL 2)
TLL5 South East Wales
Small Region (ITL 3)
TLL51 Central Valleys and Bridgend
Delivery Location
TLL Wales
Local Authority
Rhondda Cynon Taf
Electoral Ward
Taff's Well
Westminster Constituency
Cardiff North

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-06656c-2026-03-09T14:00:38Z",
    "date": "2026-03-09T14:00:38Z",
    "ocid": "ocds-h6vhtk-06656c",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-NHS-RQF",
            "name": "Velindre University NHS Trust",
            "identifier": {
                "scheme": "GB-NHS",
                "id": "RQF"
            },
            "address": {
                "streetAddress": "Unit 2 Charnwood Court,",
                "locality": "Cardiff",
                "postalCode": "CF15 7QZ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKL15"
            },
            "contactPoint": {
                "email": "Gemma.Roscrow@wales.nhs.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://nwssp.nhs.wales/ourservices/procurement-services/",
                "classifications": [
                    {
                        "id": "publicUndertaking",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public undertaking"
                    },
                    {
                        "id": "GB-WLS",
                        "scheme": "UK_CA_DEVOLVED_REGULATIONS",
                        "description": "Welsh devolved regulations apply"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-NHS-RQF",
        "name": "Velindre University NHS Trust"
    },
    "planning": {
        "milestones": [
            {
                "id": "engagement",
                "type": "engagement",
                "description": "The Authority wishes to engage with suppliers to: (i) Develop the Authorities requirement and procurement approach, (ii) To support the Authority in designing a procurement procedure including conditions of participation and award criteria (iii) To identify potential suppliers, to supply goods and services, and to inform contractual terms To achieve effective preliminary market engagement the Authority will hold a supplier day on the 10/04/2026. Initially, eight 45-minute slots will be made available and will be offered on a first come, first served basis. At its sole discretion the Authority may extend the opportunity beyond this dependent upon supplier response, but this is not guaranteed Interested suppliers should provide confirmation to the following email address: Gemma.Roscrow@wales.nhs.uk Please provide confirmation by 7th April 2026 for any materials required in the medium of the Welsh language.",
                "dueDate": "2026-04-07T23:59:59+01:00",
                "status": "scheduled"
            }
        ],
        "documents": [
            {
                "id": "020920-2026",
                "documentType": "marketEngagementNotice",
                "noticeType": "UK2",
                "description": "Preliminary market engagement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/020920-2026",
                "datePublished": "2026-03-09T14:00:38Z",
                "format": "text/html"
            }
        ]
    },
    "tender": {
        "id": "ocds-h6vhtk-06656c",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Procurement of an Enterprise Risk Management (ERM) Solution",
        "description": "Velindre University NHS Trust (the Authority) wishes to alert suppliers to its intention to hold preliminary market engagement with regards to the potential procurement of an Enterprise Risk Solution to assist in the recording and management of risks across the Authority, ranging from corporate, clinical and project risks. The Authority intends to procure an enterprise-wide software solution to support strategic and operational risk management. The contract will cover the provision of the platform, configuration, implementation, training, ongoing support, and maintenance. The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape. The contract duration is expected to be: Initial term: 5 years Optional extensions: 2+2 years The Authority seeks an ERM solution that provides: - Comprehensive risk register functionality - Incident and issue reporting - Real-time dashboards & analytics - Workflow, approvals & audit trail - User-role and permission management - NHS-compliant information governance and security controls - Integration with existing Authorities systems (where applicable) - Training and support for end-users and administrators - Secure hosting and business continuity capabilities - Project management tools such as schedule risk analysis (Monte Carlo Simulation) or equivalent - Open architecture and integration into other systems All suppliers must comply with relevant NHS and statutory requirements, including data-protection legislation and cyber-security standards.",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "48000000",
                        "description": "Software package and information systems"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKL",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 1,
            "amount": 1,
            "currency": "GBP"
        },
        "mainProcurementCategory": "goods",
        "aboveThreshold": true,
        "lots": [
            {
                "id": "1",
                "suitability": {
                    "sme": true
                },
                "contractPeriod": {
                    "startDate": "2027-04-01T00:00:00+01:00",
                    "endDate": "2032-03-31T23:59:59+01:00",
                    "maxExtentDate": "2034-03-31T23:59:59+01:00"
                },
                "hasRenewal": true,
                "status": "planning"
            }
        ],
        "communication": {
            "futureNoticeDate": "2026-06-01T23:59:59+01:00"
        },
        "status": "planning"
    },
    "language": "en"
}