HH156-26-SP Varonis Data Security Platform Subscription (SVAR)

Tender description

The HH156‑26‑SP Varonis Data Security Platform Subscription provides NHS Highland with a cloud‑based, enterprise‑grade data security solution that monitors, protects, and governs sensitive information across the organisation. It delivers continuous threat detection, permissions auditing, and data‑risk visibility, ensuring compliance and safeguarding critical data as part of the transition from on‑premise to SaaS. Lot 1: The HH156‑26‑SP Varonis Data Security Platform Subscription is a multi‑year renewal of NHS Highland’s enterprise data‑security tooling under the Scottish Government SVAR Framework. The subscription enables NHS Highland to maintain continuous protection, monitoring, and governance over unstructured data held across its digital environment. This renewal also marks a transition from the legacy self‑hosted model to Varonis’ Software‑as‑a‑Service (SaaS) delivery, following the vendor’s move to discontinue on‑premise support. The Varonis platform provides advanced capabilities for safeguarding sensitive information, including behavioural analytics, file‑system monitoring, insider‑threat detection, permissions auditing, risk scoring, and rapid investigation tooling. These functions are essential for meeting NHS Highland’s information‑governance obligations, particularly around patient confidentiality, incident response, and regulatory compliance. By utilising Varonis’ SaaS service model, the organisation benefits from continuous updates, strengthened security baselines, reduced infrastructure overheads, and improved overall resilience. This early renewal was required to ensure continuity of service and to guarantee that NHS Highland’s migration path to the SaaS platform could proceed without interruption. Although the renewal is executed in advance, the financial schedule remains unchanged, with invoicing continuing on the same annual cycle. The subscription covers all required Varonis modules and collector licences, providing consistent coverage across the environment. Contractually, the call‑off is issued under the SVAR framework, with Computacenter acting as the contracted reseller. The agreement runs for a three‑year term starting 1 April 2026, ensuring long‑term stability, predictable budgeting, and alignment with NHS Highland’s broader cybersecurity roadmap. It also simplifies future change control by consolidating licensing, support, and platform services into a single structured contract vehicle. Overall, the Varonis Data Security Platform Subscription ensures that NHS Highland maintains the enterprise‑grade data‑security capabilities needed to protect critical information assets, detect anomalies early, and meet statutory and organisational responsibilities in an increasingly complex cyber‑risk landscape.