Section one: Contracting authority
one.1) Name and addresses
University Hospitals Birmingham NHS Foundation Trust
Mindelsohn Way
Birmingham
B15 2WB
Contact
Abdul Alim
Country
United Kingdom
Region code
UKG3 - West Midlands
Internet address(es)
Main address
Buyer's address
one.3) Communication
Additional information can be obtained from the above-mentioned address
Electronic communication requires the use of tools and devices that are not generally available. Unrestricted and full direct access to these tools and devices is possible, free of charge, at
https://health-family.force.com/s/Welcome
one.4) Type of the contracting authority
Body governed by public law
one.5) Main activity
Health
Section two: Object
two.1) Scope of the procurement
two.1.1) Title
UHB Infrastructure & Software Pen Testing - Market Engagement
Reference number
PROC.08.0466
two.1.2) Main CPV code
- 72000000 - IT services: consulting, software development, Internet and support
two.1.3) Type of contract
Services
two.1.4) Short description
University Hospitals Birmingham NHS Foundation Trust (UHB) is one of the largest teaching hospital Trusts in England and the West Midlands, serving a regional, national and international population. It includes Birmingham Heartlands Hospital, Birmingham Chest Clinic, Good Hope Hospital, the Queen Elizabeth Hospital Birmingham, Solihull Hospital and various Community Services. We also run a number of smaller satellite units, allowing people to be treated as close to home as possible.
As an NHS organisation, UHB will see and treat more than 2.2 million people every year across our sites UHB currently employs over 20,000 members of staff and we are committed to investing in their development and their health and wellbeing.
The purpose of this Prior Information Notice is to enable UHB to gain a better understanding of what sort of providers and how many exist in the market, and improve the confidentiality, integrity, availability and authenticity of its systems and infrastructure.
Suppliers who are able to offer a solution relevant to this requirement are invited to express an interest and respond to a market engagement questionnaire. Further details on how to do this are contained within the additional information section of this notice.
two.1.6) Information about lots
This contract is divided into lots: No
two.2) Description
two.2.3) Place of performance
NUTS codes
- UKG - West Midlands (England)
two.2.4) Description of the procurement
The Trust intends to engage a service provider for conducting a “call-off” contract penetration testing services on the Trusts infrastructure and systems (internal/external) to identify potential vulnerabilities and weaknesses that could be exploited by attackers. The primary objective of the penetration testing is to enhance the security posture of the Trusts infrastructure/systems and reduce the risk of cyber-attacks.
As stated above the penetration testing will be conducted on our internal/external infrastructure which is a requirement as part of the Data Security Protection Toolkit. Penetration testing on our in-house developed systems and or commercial solution will be required which may be internally used or externally facing.
As part of the on-going Cyber security programme and addressing the complex threat landscape facing the National Health Service (NHS), UHB wishes to enhance the capabilities of its Cyber Security.
The scope of work for the penetration testing service provider will include but not limited to the following: (See briefing note document)
The purpose of this Prior Information Notice is to enable UHB to gain a better understanding of what sort of providers and how many exist in the market, and improve the confidentiality, integrity, availability and authenticity of its systems and infrastructure.
Suppliers who are able to offer a solution relevant to this requirement are invited to express an interest and respond to a market engagement questionnaire. Further details on how to do this are contained within the additional information section of this notice.
Potential bidders are asked to note that the route to market has not yet been decided and therefore the procurement timetable has not been finalised. The Authority will make a final decision on the most appropriate route market following this engagement exercise. This may be a direct award via an existing public sector framework agreement or alternatively, the Authority may decide to run a competitive process via a mini-competition under a framework or an openly advertised procedure. If the latter, the publication of the ITT will include the publication of a Contract Notice, a Contracts Finder notice, and the ITT documents will be published on the Authority’ Atamis e-tendering system.
two.3) Estimated date of publication of contract notice
23 May 2023
Section four. Procedure
four.1) Description
four.1.8) Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement: No
Section six. Complementary information
six.3) Additional information
Suppliers wishing to participate in this market engagement exercise and express an interest in this requirement should respond to the questionnaire via the online form on the Health Family Single eCommercial System Portal (Atamis) by 13:00 on Tuesday 25th April 2023.
https://health-family.force.com/s/Welcome