Cyber Supplier and Third Party Risk Management capability - Market Engagement

NHS England is undertaking preliminary market engagement to understand how the supplier market could support the future delivery of a Health and Social Care (H&SC) Cyber Supplier and Third Party Risk Management capability.

Our ambition is to develop a national capability, available to all health and social care organisations, that delivers a more consistent and scalable approach to managing cyber risk associated with third-party suppliers across health and social care. As part of this work, NHS England is developing a H&SC Cyber Third Party Risk Management Standard, against which relevant suppliers are expected to be assessed.

This market engagement will begin with a supplier webinar, followed by a Request for Information (RFI). It gives suppliers an opportunity to help shape this new national capability and the supporting assessment standard. Insights gathered from this exercise will inform a potential procurement process planned for early to mid-2027. Please note, any figures quoted are early-stage indications only.