---
title: "Cyber Security Continuous Testing and Security Awareness Services"
ocid: "ocds-h6vhtk-06dd9e"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06dd9e"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-06dd9e.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-06dd9e.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "West Suffolk NHS Foundation Trust"
published: "2026-08-06"
---

# Cyber Security Continuous Testing and Security Awareness Services

Buyer: West Suffolk NHS Foundation Trust  
Current stage: Award  
OCID: ocds-h6vhtk-06dd9e

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06dd9e)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-06dd9e.json)

## Summary

West Suffolk NHS Foundation Trust procured cyber security continuous testing and security awareness services for its digital environment. The requirement covers ongoing security assessment and validation to identify, assess and prioritise cyber security vulnerabilities and exposures across the Trust. It also includes senior leadership awareness training through Security Leadership Team workshops, focused on cyber risks, incident preparedness, governance responsibilities and organisational cyber resilience. This is a specialist cyber security and information technology services requirement, classified under CPV 72222300. The buying organisation is West Suffolk NHS Foundation Trust, based in Bury St Edmunds. The work supports the Trust’s own digital environment and leadership team, combining technical testing with executive-level cyber security awareness and preparedness.

The procurement is complete and was awarded following a below-threshold limited competition. One lot was completed. Rootshell Security Ltd was selected as the supplier, with an active award. The contract, titled Core Continuous Testing & SLT Awareness Workshop, was signed on 20 May 2026 and runs from 20 May 2026 to 19 November 2026. Its value is £24,150 excluding VAT, or £28,980 including VAT. The contract is active and the procurement is below the applicable threshold. The award covers the continuous testing and senior leadership awareness requirement. The procurement record does not state a separate scoring formula or evaluation weighting, so the commercial outcome should be understood primarily through the defined cyber security and awareness service scope.

This award shows that West Suffolk NHS Foundation Trust buys a combined cyber security service rather than a standalone penetration test or an isolated training package. A credible competitor for the same requirement would need to demonstrate practical capability in continuous security testing, ongoing assessment and validation, and the ability to identify, assess and prioritise vulnerabilities and exposures across a complex digital environment. It would also need senior practitioners able to deliver effective Security Leadership Team workshops covering cyber risk, incident preparedness, governance responsibilities and organisational resilience. The requirement suits an established specialist cyber security provider, including an SME, that can connect technical findings with senior-level decision-making and explain risk clearly to NHS leadership. Experience delivering both technical assurance and executive awareness would be important when this buyer next reviews the requirement.

## Notice

Provision of continuous cyber security testing services and senior leadership awareness training for the Trust. The service includes ongoing security assessment and validation activities designed to identify, assess and prioritise cyber security vulnerabilities and exposures across the Trust's digital environment. The service also includes Security Leadership Team (SLT) awareness workshops to enhance understanding of cyber risks, incident preparedness, governance responsibilities and organisational cyber resilience

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/074694-2026 |
| Notice type | UK7 - Contract Details Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Below threshold - limited competition |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 6 Aug 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 20 May 2026 |
| Contract period | 20 May 2026 - 19 Nov 2026 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £24,150 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | West Suffolk NHS Foundation Trust |
| Locality | BURY ST EDMUNDS |
| Postcode area | Ipswich |
| Postcode | IP33 2QZ |
| Country | England |
| ITL 1 | TLH East (England) |
| ITL 2 | TLH6 Suffolk |
| ITL 3 | TLH64 West Suffolk |
| Local authority | West Suffolk |
| Electoral ward | Southgate |
| Westminster constituency | Bury St Edmunds and Stowmarket |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Rootshell Security Ltd |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222300 - Information technology services

## Release History

- 6 Aug 2026 at 12:48 - Award - UK7 - Contract Details Notice - https://www.find-tender.service.gov.uk/Notice/074694-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/074694-2026
  6th August 2026 - Contract details notice on Find a Tender

## Notice URLs

- https://www.legislation.gov.uk/ukpga/2023/54/contents
- https://www.wsh.nhs.uk/

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06dd9e. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-06dd9e.json.