IT services: consulting, software development, Internet and support

Tender description

NHS Shared Business Services has been working closely with NHS Digital on the development of the cyber security services framework agreement, to offer an additional solution to support the existing portfolio of security solutions currently available. The aim of the new framework agreement will be to provide NHS organisations with an even greater number of cyber security service options and approved suppliers. It is therefore envisaged that this framework agreement will be used to support services currently offered by NHS digital to health and care organisations. The new framework will also offer services not covered by NHS digital (lots 1 and 3). The provision of urgent incident response capability for large-scale or local incidents, offering approved organisations the ability to quickly call down expert resource to support incident control, containment, resolution and remediation in the event of a cyber security incident. A cyber security incident may be defined as any malicious act or suspicious event that compromises or was an attempt to compromise, the electronic security perimeter or physical security perimeter of a critical cyber asset or, disrupts or was an attempt to disrupt, the operation of a critical cyber asset. To provide approved organisations with access to ad-hoc or ongoing professional services. The services required will be defined locally by the approved organisation at call-off and will include some or all of the services outlined below as a minimum. For the supply of specialist personnel to support approved organisation existing in-house capability. Requirements are anticipated to be wide ranging but will ultimately support approved organisations to reduce their exposure to threats, improve security defences and support in the event of cyber incidents.