---
title: "Risk Assurance Review of Atos' Patch Management and Remediation Processes"
ocid: "ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "NS&I"
published: "2025-02-27"
---

# Risk Assurance Review of Atos' Patch Management and Remediation Processes

Buyer: NS&I  
Current stage: Award  
OCID: ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96.json)

## Summary

The public procurement process was initiated by NS&I (National Savings and Investments) for a project titled "Risk Assurance Review of Atos' Patch Management and Remediation Processes." This falls under the industry category of "System quality assurance assessment and review services" (CPV: 72225000) and is located in the Yorkshire and the Humber region, as well as London, United Kingdom. The tender was completed with a direct procurement method through a single tender action (below threshold). Key dates included the end of the tender period on 29th January 2025 and the contract period from 3rd February 2025 to 30th April 2025. The procurement stage of this process is marked as 'award,' with the award being officially dated on 29th January 2025.

This tender presents valuable opportunities for businesses specialising in system quality assurance, particularly small and medium-sized enterprises (SMEs) as the procurement is suitable for SMEs. The project involves providing assurance to NS&I that its IT service provider, Atos, has effectively managed and remedied vulnerabilities through proper patch management processes. Companies experienced in IT system reviews and risk assessment would be well-suited to compete and grow their business by delivering efficient and reliable services to a major government financial entity, thus leveraging this opportunity for further business development and partnerships.

## Notice

NS&I has an outsourced customer servicing model which provides IT and infrastructure services. These services are provided to NS&I by Atos and includes patch management and vulnerability management. For NS&I systems to be protected from risks associated with patching, it is important that effective processes are in place to test patches, deploy patches into the operating environment and verify that each patch is deployed successfully. NS&I and Atos have agreed a business process outsourcing agreement which provides sufficient consideration to the key requirements of an effective patching process. The objective of this review is to provide assurance to NS&I management that Atos has fully completed the remedial patching required across the NS&I IT estate.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/6c974606-0cb8-4d43-8bfa-4e2e95788f8f |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Single tender action (below threshold) |
| Tender suitability | SME |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 27 Feb 2025 |
| Submission deadline | 29 Jan 2025 |
| Future notice date | Not specified |
| Award date | 29 Jan 2025 |
| Contract period | 3 Jan 2025 - 30 Apr 2025 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | £23,900 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NS&I |
| Locality | LONDON |
| Post town | South West London |
| Postcode | SW1P 3BT |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | TLE Yorkshire and The Humber |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | ZERO PLUS |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72225000 - System quality assurance assessment and review services

## Release History

- 27 Feb 2025 at 17:32 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/6c974606-0cb8-4d43-8bfa-4e2e95788f8f

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/6c974606-0cb8-4d43-8bfa-4e2e95788f8f
  27th February 2025 - Awarded contract notice on Contracts Finder
- https://app.panacea-software.com/nsandi/
  Click above to Apply (link to e-procurement portal)

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96.json.