Section one: Contracting authority
one.1) Name and addresses
The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)
1 South Gyle Crescent
Edinburgh
EH12 9EB
Telephone
+44 1312756000
Country
United Kingdom
NUTS code
UKM - Scotland
Internet address(es)
Main address
http://www.nss.nhs.scot/browse/procurement-and-logistics
Buyer's address
https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA11883
one.2) Information about joint procurement
The contract is awarded by a central purchasing body
one.4) Type of the contracting authority
National or federal Agency/Office
one.5) Main activity
Health
Section two: Object
two.1) Scope of the procurement
two.1.1) Title
Halcyon Anti-Ransomware Platform
Reference number
NP884425
two.1.2) Main CPV code
- 72000000 - IT services: consulting, software development, Internet and support
two.1.3) Type of contract
Services
two.1.4) Short description
The NHS and NSS have invested in and deployed a range of cyber security tools across NHS boards through the Cyber Centre of Excellence (CCoE). These tools work together to reduce the risk and impact of cyber-attacks. While this approach has been successful and adds value, the residual risk is still high due to the nature of ransomware attacks:
- Existing tools by their nature remediate reactively once they detect an attack to contain it, and
- The risk of data being stolen prior to its encryption is now equal to – if not greater than – the encryption of the data itself.
two.1.6) Information about lots
This contract is divided into lots: No
two.1.7) Total value of the procurement (excluding VAT)
Value excluding VAT: £2,598,999
two.2) Description
two.2.3) Place of performance
NUTS codes
- UKM - Scotland
two.2.4) Description of the procurement
The NHS and NSS have invested in and deployed a range of cyber security tools across NHS boards through the Cyber Centre of Excellence (CCoE). These tools work together to reduce the risk and impact of cyber-attacks. While this approach has been successful and adds value, the residual risk is still high due to the nature of ransomware attacks:
- Existing tools by their nature remediate reactively once they detect an attack to contain it, and
- The risk of data being stolen prior to its encryption is now equal to – if not greater than – the encryption of the data itself.
Halcyon Anti-Ransomware Platform is a specialised, AI-driven cybersecurity stool that defends against advanced ransomware attacks and unauthorised access, while complementing our existing security measures. A lightweight solution, it requires minimal resources to deploy and run on existing devices, making it ideal for preventing attacks like that experienced by NHS Dumfries & Galloway in 2024, and would significantly strengthen our defence-in-depth suite of tools.
two.2.5) Award criteria
Price
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
Section four. Procedure
four.1) Description
four.1.1) Type of procedure
Award of a contract without prior publication of a call for competition in the cases listed below
- The procurement falls outside the scope of application of the regulations
Explanation:
Call off contract from the Scottish Government Software Value Added Reseller Services Framework.
four.1.8) Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement: Yes
Section five. Award of contract
Contract No
NP884425
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
31 October 2025
five.2.2) Information about tenders
Number of tenders received: 1
Number of tenders received from SMEs: 0
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 1
Number of tenders received by electronic means: 1
The contract has been awarded to a group of economic operators: No
five.2.3) Name and address of the contractor
Computacenter
Haston House, 2 Redheughs Rigg,, South Gyle
Edinburgh
EH12 9DQ
Telephone
+44 1313172373
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £2,598,999
Section six. Complementary information
six.3) Additional information
(SC Ref:814501)
six.4) Procedures for review
six.4.1) Review body
Edinburgh Sheriff Court
27 Chambers Street
Edinburgh
EH1 1LB
Country
United Kingdom
six.4.3) Review procedure
Precise information on deadline(s) for review procedures
Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts:
An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.