---
title: "Cyber Incident Response Procurement - Deloitte"
ocid: "ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "NHS ENGLAND"
published: "2025-03-19"
---

# Cyber Incident Response Procurement - Deloitte

Buyer: NHS ENGLAND  
Current stage: Award  
OCID: ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5.json)

## Summary

NHS England has completed the award process for the Cyber Incident Response Procurement to Deloitte LLP. This contract aims to provide a Cyber Incident Response Team (CIRT) to assist NHS England and other entities within the NHS ecosystem during cyber incidents. The procurement process was conducted selectively through a call-off from a framework agreement. The contract, valued at £2,249,840, is set to commence on 22 May 2024 and will end on 21 May 2026. The delivery address is in Leeds (LS1 4AP), United Kingdom, and falls under the industry category of Information Technology Services (CPV code 72222300).

This tender presents significant opportunities for businesses specialising in cyber security and IT services, particularly those experienced in incident response and recovery. SMEs with expertise in providing robust and responsive cyber security solutions will find this contract well-suited to their capabilities. The collaboration with NHS England highlights the critical need for dependable partners capable of addressing cyber threats in a healthcare context, making this a valuable prospect for growth and networking within the public sector.

## Notice

These services are to provide a Cyber Incident Response Team (CIRT) to NHS England and other organisations in the NHS ecosystem during cyber incidents. The CIR Team provides 'boots on the ground' support to investigate and recover from cyber incidents. Additional information: CF Notice updated to reflect the increase in total contract value. There has been a 50% increase in total contract value under regulation 72.1.b and c of PCR2015.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/ea5f85c2-11c8-4b6d-81ed-7125ccfcf3b5 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Not specified |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 19 Mar 2025 |
| Submission deadline | 23 Jan 2024 |
| Future notice date | Not specified |
| Award date | 4 Jun 2024 |
| Contract period | 21 May 2024 - 21 May 2026 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | £3,749,840 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NHS ENGLAND |
| Locality | LEEDS |
| Post town | Leeds |
| Postcode | LS1 4AP |
| Country | England |
| ITL 1 | TLE Yorkshire and The Humber |
| ITL 2 | TLE4 West Yorkshire |
| ITL 3 | TLE42 Leeds |
| Local authority | Leeds |
| Electoral ward | Hunslet & Riverside |
| Westminster constituency | Leeds South |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | DELOITTE |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services

## Release History

- 19 Mar 2025 at 08:45 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/ea5f85c2-11c8-4b6d-81ed-7125ccfcf3b5
- 22 Jul 2024 at 09:30 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/9f793655-a930-439c-b226-2030d8ef799b
- 10 Jun 2024 at 09:08 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/574cce9f-7c2c-4ed3-906f-45f382b23538

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/ea5f85c2-11c8-4b6d-81ed-7125ccfcf3b5
  19th March 2025 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/9f793655-a930-439c-b226-2030d8ef799b
  22nd July 2024 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/574cce9f-7c2c-4ed3-906f-45f382b23538
  10th June 2024 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/bdac7ff8-cd86-4672-93ec-789e19eff56c
  (REDACTED) C261847 DeLoitte RM3764iii Cyber Security Services 3 Order Form - Award version Final TM 24.05 v6 D Up
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/ff034b2d-c3d3-419c-b220-08df59fbf7b5
  (REDACTED) C261847 DeLoitte RM3764iii Cyber Security Services 3 Order Form - Award version Final TM 24.05 v6 D Up

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-295ffa00-6d6c-4897-90ce-3fa77e3595f5.json.