Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Cyber Security Continuous Testing and Security Awareness Services

West Suffolk NHS Foundation Trust

This public procurement record has 1 release in its history.

Award

06 Aug 2026 at 12:48

UK7 - Contract Details Notice
Summary of the contracting process

West Suffolk NHS Foundation Trust procured cyber security continuous testing and security awareness services for its digital environment. The requirement covers ongoing security assessment and validation to identify, assess and prioritise cyber security vulnerabilities and exposures across the Trust. It also includes senior leadership awareness training through Security Leadership Team workshops, focused on cyber risks, incident preparedness, governance responsibilities and organisational cyber resilience. This is a specialist cyber security and information technology services requirement, classified under CPV 72222300. The buying organisation is West Suffolk NHS Foundation Trust, based in Bury St Edmunds. The work supports the Trust’s own digital environment and leadership team, combining technical testing with executive-level cyber security awareness and preparedness.

The procurement is complete and was awarded following a below-threshold limited competition. One lot was completed. Rootshell Security Ltd was selected as the supplier, with an active award. The contract, titled Core Continuous Testing & SLT Awareness Workshop, was signed on 20 May 2026 and runs from 20 May 2026 to 19 November 2026. Its value is £24,150 excluding VAT, or £28,980 including VAT. The contract is active and the procurement is below the applicable threshold. The award covers the continuous testing and senior leadership awareness requirement. The procurement record does not state a separate scoring formula or evaluation weighting, so the commercial outcome should be understood primarily through the defined cyber security and awareness service scope.

This award shows that West Suffolk NHS Foundation Trust buys a combined cyber security service rather than a standalone penetration test or an isolated training package. A credible competitor for the same requirement would need to demonstrate practical capability in continuous security testing, ongoing assessment and validation, and the ability to identify, assess and prioritise vulnerabilities and exposures across a complex digital environment. It would also need senior practitioners able to deliver effective Security Leadership Team workshops covering cyber risk, incident preparedness, governance responsibilities and organisational resilience. The requirement suits an established specialist cyber security provider, including an SME, that can connect technical findings with senior-level decision-making and explain risk clearly to NHS leadership. Experience delivering both technical assurance and executive awareness would be important when this buyer next reviews the requirement.

How relevant is this notice?

Notice Information

Notice Title

Cyber Security Continuous Testing and Security Awareness Services

Notice Description

Provision of continuous cyber security testing services and senior leadership awareness training for the Trust. The service includes ongoing security assessment and validation activities designed to identify, assess and prioritise cyber security vulnerabilities and exposures across the Trust's digital environment. The service also includes Security Leadership Team (SLT) awareness workshops to enhance understanding of cyber risks, incident preparedness, governance responsibilities and organisational cyber resilience

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06dd9e
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/074694-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Below threshold - limited competition
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72222300 - Information technology services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£24,150 Under £100K

Notice Dates

Publication Date
6 Aug 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
20 May 20263 months ago
Contract Period
20 May 2026 - 19 Nov 2026 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
West Suffolk NHS Foundation Trust
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BURY ST EDMUNDS
Postcode
IP33 2QZ
Postcode Area
Ipswich
Country
England
Major Region (ITL 1)
TLH East (England)
Basic Region (ITL 2)
TLH6 Suffolk
Small Region (ITL 3)
TLH64 West Suffolk
Delivery Location
Not specified
Local Authority
West Suffolk
Electoral Ward
Southgate
Westminster Constituency
Bury St Edmunds and Stowmarket

Supplier Information

Number of Suppliers
1
Supplier Name

Rootshell Security Ltd

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...