Internal Audit services

Tender description

NHS Frimley Integrated Care Board (the 'ICB') sought to commission Internal Audit and Data Security and Protection Toolkit (DSPT) Audit services. Internal Audit is a mandatory requirement for all NHS bodies that sufficient internal audit procedures are performed to meet the standards set up per the 2011 NHS Internal Audit Standards guidance. The main purpose of internal audit activity within the NHS is to provide the Accountable or Accounting Officer, in an economical, efficient and timely manner, with an objective evaluation of, and opinion on, the overall adequacy and effectiveness of the organisation's framework of governance, risk management and control. The DSPT is an online self-assessment tool that organisations can complete to measure their performance against the National Data Guardian's ten data security standards. Any organisation accessing NHS patient data is required to complete the DSPT on an annual basis and therefore demonstrate an acceptable level of compliance on an ongoing basis. The DSPT audit is a mandatory requirement of the DSPT for the ICB for each submission. As part of ongoing system working, the ICB is aligning itself with ICS partner FHFT with a view to undertaking a joint Internal Audit tender process for the audit period commencing 01/04/2024. In advance of this date, there is a remaining nine month period for which the ICB requires Internal Audit services and DSPT Audit. The service was procured through a direct award to the existing provider, PricewaterhouseCoopers LLP via the NHS SBS Framework as permitted within the framework award procedures. The total value of the contract is £101,500 for the 9 months contract term. The contract commenced on 1st July 2023. The procurement was carried out by NHS South, Central and West Commissioning Support Unit (SCW) on behalf of the Commissioner. Additional information: The contract value of this procurement is under the threshold that is subject to the full regime of current EU procurement legislation and governed by the Public Contracts Regulations 2015. Therefore, the rules of this Regime do not apply.