---
title: "Vulnerability Management Service"
ocid: "ocds-kuma6s-163286"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-kuma6s-163286"
markdown_url: "https://d3tenders.com/contract/ocds-kuma6s-163286.md"
json_url: "https://d3tenders.com/contract/ocds-kuma6s-163286.json"
source: "Sell2Wales"
current_stage: "Award"
buyer: "DIGITAL HEALTH & CARE WALES"
published: "2026-03-24"
---

# Vulnerability Management Service

Buyer: DIGITAL HEALTH & CARE WALES  
Current stage: Award  
OCID: ocds-kuma6s-163286

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-kuma6s-163286)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-kuma6s-163286.json)

## Summary

Digital Health & Care Wales is seeking to enhance its cyber security capabilities through a procurement process for a Vulnerability Management Service. This service, located in Cardiff, falls under the industry category of IT services and is crucial for ensuring the reliability and security of the digital health estate. The procurement process, currently at the Award stage, culminated in March 2026, following the signing of the contract with the supplier, Insight Direct (Uk) Ltd, on 27th February 2026. The initiative addresses national obligations under the NIS Regulations and supports frameworks such as the NCSC CAF and NHS DSPT, reflecting the organisation's commitment to maintaining stringent cyber security standards.

This tender presents substantial opportunities for businesses specialising in IT consulting, software development, and cybersecurity services. Organisations with expertise in managing enterprise-level security platforms can leverage their skills to support Digital Health & Care Wales in its efforts to safeguard sensitive data and streamline operations across its digital infrastructure. With a project value of £145,853.80, businesses focused on delivering robust IT services and solutions would find suitable growth avenues, especially those with experience working within regulatory frameworks pertinent to healthcare and national cybersecurity strategies.

## Notice

The Authority requires ongoing support and maintenance for its existing enterprise vulnerability management capability to ensure continuity of service, currency of vulnerability intelligence, and reliable operation of the platform across the DHCW estate.This requirement supports DHCW's national cyber security obligations, including the identification and management of technical vulnerabilities, and provides assurance evidence in support of the Network and Information Systems (NIS) Regulations, the NCSC Cyber Assessment Framework (CAF), and the NHS Data Security and Protection Toolkit (DSPT).

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Sell2Wales |
| Latest notice | https://www.sell2wales.gov.wales/search/search_switch.aspx?ID=163286 |
| Notice type | S2W Notice - Website Contract Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Not Specified |
| Procurement method details | Not specified |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 24 Mar 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 27 Feb 2026 |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | £145,853 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Not specified |
| Lots status | Not specified |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | DIGITAL HEALTH & CARE WALES |
| Locality | CARDIFF |
| Post town | Cardiff |
| Postcode | CF11 9AD |
| Country | Wales |
| ITL 1 | TLL Wales |
| ITL 2 | TLL5 South East Wales |
| ITL 3 | TLL52 Cardiff and Vale of Glamorgan |
| Local authority | Cardiff |
| Electoral ward | Riverside |
| Westminster constituency | Cardiff West |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | INSIGHT DIRECT (UK |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 24 Mar 2026 at 12:55 - Award - S2W Notice - Website Contract Award Notice - https://www.sell2wales.gov.wales/search/search_switch.aspx?ID=163286

## Notice URLs

- http://www.uk.insight.com

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-kuma6s-163286. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-kuma6s-163286.json.