# CSOC CIRT Reg 72 Notice

> A sourced UK public sector contract award published by NHS Digital.

## Key facts

- Buyer: [NHS Digital](/buyers/nhs-digital/contract-awards)
- Supplier: [DELOITTE LLP](/suppliers/deloitte/public-sector-contract-awards)
- Award value: £500,000
- Tender value: £625,000
- Award date: 2 November 2021
- Published: 22 November 2023
- Contract start: 1 November 2021
- Contract end: 31 October 2023
- Stage: awarded
- Notice ID: a5c9cfe4-a304-4621-92e9-fcc8edd4084c-700804
- OCID: ocds-b5fd17-0311104c-e26a-4caf-9789-7ad0a727cf21

## Description

This variation increases the value of the contract from £500,000\* to £625,000\. This variation is being made in accordance with Regulation 72\(1\)\(b\) of the Public Contract Regulations 2015\. The services provided under the contract remain the same, to provide a Cyber Incident Response Team \(CIRT\) to NHS England and other organisations in the NHS ecosystem during cyber incidents\. The CIR Team provides 'boots on the ground' support to investigate and recover from cyber incidents\. This variation increase of 25% of the overall contract charge is due to unforeseen cyber incidents requiring CIRTs to be deployed to NHS organisations to both prevent cyber incidents and/or investigate/recover from cyber incidents\. These teams can support NHS organisations with patching, forensic investigations as well as recovery activities if local teams do not have capacity/capability\. The CIRT capability is provided by 3rd party NCSC certified suppliers and the CSOC has call-off contracts in-place enabling the CSOC to periodically top-up a retainer of hours and call-off as needed\. There are a number of reasons why a new procurement process has not been possible until now\. NHS England is committed to procuring the future provision and requires adequate time to do so\. \*It has also come to the attention of NHS England that the original Total Award Value included in the original Contract Notice for the contract publication was incorrect; showing the initial value not the total Award value\. The accurate Total Award Value of the contract should have been stated as £500,000\.

## Related contract awards

- [Spine DevOps](/contracts/ocds-b5fd17-aa2b16a1-0224-49ca-bcc5-d992f37be240) — NHS Digital
- [NHS Login Run and Maintain](/contracts/ocds-b5fd17-d353e818-8d0e-430c-a383-2aebd9d318f7) — NHS Digital
- [Adobe Analytics Subscription](/contracts/ocds-b5fd17-fda21c54-74e1-4178-a433-74998e4bdea1) — NHS Digital
- [Atlassian Call-Off contract](/contracts/ocds-b5fd17-9dcd974b-b4e7-423c-a7e8-59dd691ba695) — NHS Digital
- [ENHT - Deloitte Transformation Consultancy Support](/contracts/ocds-b5fd17-95d7fe17-a667-44e6-b5dd-4883edf3f33f) — East and North Hertfordshire NHS Trust
- [SGBC - IOM](/contracts/ocds-b5fd17-c75ae56a-f898-4a79-b02a-ea5a04d2be9c) — Ministry of Defence
- [TRGA3390 DfT CIR Contract](/contracts/ocds-b5fd17-0f1bc16d-1225-475e-9dbb-37aad8224b1a) — DfTc - Department for Transport
- [Cyber Incident Security Response](/contracts/ocds-b5fd17-26bed399-0bb2-4f3d-b203-8d055d030eb5) — Great British Energy - Nuclear

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/a5c9cfe4-a304-4621-92e9-fcc8edd4084c-700804)