---
title: "Network and Information Security (NIS) Audit Services for HSCNI"
ocid: "ocds-h6vhtk-0559e2"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0559e2"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-0559e2.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-0559e2.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "BUSINESS SERVICES ORGANISATION (BSO) PROCUREMENT AND LOGISTICS SERVICE (PALS)"
published: "2026-05-27"
---

# Network and Information Security (NIS) Audit Services for HSCNI

Buyer: BUSINESS SERVICES ORGANISATION (BSO) PROCUREMENT AND LOGISTICS SERVICE (PALS)  
Current stage: Award  
OCID: ocds-h6vhtk-0559e2

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0559e2)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-0559e2.json)

## Summary

The Business Services Organisation (BSO) Procurement and Logistics Service, based in Belfast, United Kingdom, has completed a public procurement process for Network and Information Security (NIS) Audit Services aimed at assisting the Health and Social Care Northern Ireland (HSCNI). This procurement falls under the IT services category, specifically consultancy and audit services, with the process reaching the award stage. The procurement employed an open procedure method, resulting in the award to ARCANUM INFORMATION SECURITY LIMITED. The contracts start on 18th May 2026, with scheduled completion by 17th May 2030, and include an optional extension of 12 months to account for any scheduling adjustments. The procurement's open nature allowed a broad range of businesses to participate, with the award announced on 27th May 2026.

This tender represents a significant opportunity for companies specialising in IT security audits to enhance their profiles and expand their business. SMEs like ARCANUM INFORMATION SECURITY LIMITED, which secured the contract, exemplify the potential for growth in providing compliance auditing services in adherence to the NIS Regulations. Businesses involved in IT consultancy, software development, and project management are particularly well-placed to leverage similar opportunities in public procurement processes, offering services that meet stringent regulatory standards and support critical public infrastructure. The comprehensive scope of work, including key services such as systems and technical consultancy, presents numerous avenues for qualified firms to innovate and deliver high-quality solutions.

## Notice

An Assured Audit Service Provider from the National Cyber Security Centre (NCSC) Cyber Resilience Audit Scheme is to complete an on-site Network and Information Security (NIS) Compliance Audit of the essential service and supporting network and information systems. The objective of the NIS Audit Services is to assist the NIS Competent Authority (CA) in assessing the OES level of compliance with regulation 10 of the Network and Information Systems Regulations 2018. The Compliance Audit will use the (NCSC) Cyber Assessment Framework (CAF) which determines the minimum standard expected from the OES. Assessment will be made against each Contributing Outcome and associated Indicators of Good Practice (IGP) and "Not Good" practice as outlined in the CAF. The scope of the NIS Compliance Audit is to be against the OES essential service, as defined by the OES. This will encompass all critical network and information systems and processes necessary for the continued delivery of the essential service.

### Lot Information

Lot 1: BHSCT, NIAS

Renewal: The inclusion of a 12-month extension option is primarily to provide flexibility in the event that follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to factors such as resource availability, changes in regulatory requirements, or unforeseen operational constraints. By allowing for an extension, we ensure continuity of service without the need for a new procurement process, maintain compliance with NIS obligations, and avoid any gaps that could impact audit readiness or certification status.

Lot 2: SEHSCT, SHSCT, WHSCT, NHSCT

Renewal: The inclusion of a 12-month extension option is primarily to provide flexibility in the event that follow-up audit schedules are adjusted or delayed. Audit timelines can shift due to factors such as resource availability, changes in regulatory requirements, or unforeseen operational constraints. By allowing for an extension, we ensure continuity of service without the need for a new procurement process, maintain compliance with NIS obligations, and avoid any gaps that could impact audit readiness or certification status.

### Planning Information

This is a Prior Information Notice to seek engagement with the market place to gather information associated with the supply and delivery of a Network and Information Systems (NIS) Compliance Audit. To this end the Business Services Organisation, Procurement and Logistics Service on behalf of Health and Social Care Northern Ireland (HSCNI), wish to engage with potential suppliers to obtain a market view of the potential requirements through the completion of a Questionnaire. Any interested suppliers are required to submit their response through the eTendersNI secure messaging area of the Call for Tender (CfT) Ref: 6008215. All correspondence in relation to this Pre-Market Engagement exercise must be communicated via the eTendersNI secure messaging area. Suppliers will be required to submit their completed Questionnaire no later than 3pm on 25 July 2025. To register on eTendersNI and access the Questionnaire, please use the following link: - https://etendersni.gov.uk and locate CfT Ref: 6008215. Suppliers should also note that any interest shown does not constitute a commitment to participate in any future tendering exercise.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/049430-2026 |
| Notice type | UK7 - Contract Details Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Planning, Tender, Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 27 May 2026 |
| Submission deadline | 26 Mar 2026 |
| Future notice date | 25 Jul 2025 |
| Award date | 23 Apr 2026 |
| Contract period | 17 May 2026 - 17 May 2030 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £450,000 |
| Lots value | £450,000 |
| Awards value | £450,000 |
| Contracts value | £450,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | BUSINESS SERVICES ORGANISATION (BSO) PROCUREMENT AND LOGISTICS SERVICE (PALS) |
| Additional buyers | BUSINESS SERVICES ORGANISATION (BSO) PROCUREMENT AND LOGISTICS SERVICE (PALS).; BUSINESS SERVICES ORGANISATION PROCUREMENT AND LOGISTICS SERVICE; REGIONAL BUSINESS SERVICES ORGANISATION, PROCUREMENT AND LOGISTICS SERVICE |
| Locality | BELFAST |
| Post town | Northern Ireland |
| Postcode | BT12 6HU |
| Country | Northern Ireland |
| ITL 1 | TLN Northern Ireland |
| ITL 2 | TLN0 Northern Ireland |
| ITL 3 | TLN06 Belfast |
| Local authority | Belfast |
| Electoral ward | Blackstaff |
| Westminster constituency | Belfast South and Mid Down |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | ARCANUM INFORMATION SECURITY |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support
- 72200000 - Software programming and consultancy services
- 72220000 - Systems and technical consultancy services
- 72223000 - Information technology requirements review services
- 72224000 - Project management consultancy services
- 72227000 - Software integration consultancy services
- 72800000 - Computer audit and testing services
- 72810000 - Computer audit services

## Release History

- 27 May 2026 at 09:14 - Award - UK7 - Contract Details Notice - https://www.find-tender.service.gov.uk/Notice/049430-2026
- 27 Apr 2026 at 15:31 - Award - UK6 - Contract Award Notice - https://www.find-tender.service.gov.uk/Notice/038212-2026
- 27 Feb 2026 at 15:21 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/018049-2026
- 7 Jul 2025 at 12:27 - Planning - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/037752-2025

## Documents

- https://www.find-tender.service.gov.uk/Notice/049430-2026
  27th May 2026 - Contract details notice on Find a Tender
- https://www.find-tender.service.gov.uk/Notice/038212-2026
  27th April 2026 - Contract award notice on Find a Tender
- https://www.find-tender.service.gov.uk/Notice/018049-2026
  27th February 2026 - Tender notice on Find a Tender
- https://www.find-tender.service.gov.uk/Notice/037752-2025
  7th July 2025 - Preliminary market engagement notice on Find a Tender

## Notice URLs

- https://arcanum-cyber.com
- https://etendersni.gov.uk
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-0559e2. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-0559e2.json.