Award GB FTS

SDE Accreditation Readiness Audit

NHS England

Stage: Award

the latest stage the buyer has published
Buyer: NHS England
Supplier: University of the West of England

taken from the supplier contact on the notice
Value: £10K

VAT basis not stated · GBP
Awarded: 18 Dec 2025

the signed contract date on the notice
End date: 31 Mar 2026

signed
First published: 26 Feb 2026

last seen 26 Feb 2026

What the buyer published

There is strategic importance of achieving the planned 2026 UKSA Secure Data Environment (SDE) accreditation for NHS England and the necessity of conducting a readiness audit to ensure compliance and maximise outcomes. • The Data Access Policy sets out a clear commitment to make data access the default for secondary uses of NHS data, underpinned by secure, accredited environments. Accreditation is not optional—it is a DHSC policy requirement endorsed by the Goldacre and Sudlow Reviews and reinforced in the Data Saves Lives strategy. The policy mandates that all Secure Data Environments (SDEs) hosting NHS data must demonstrate compliance with stringent standards across:

Security and Cybersecurity – robust controls to prevent breaches and ensure resilience. • Governance and Transparency – clear accountability, public engagement, and ethical oversight. • Operational Assurance – evidence that platforms can deliver safe, scalable, an

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date 31 Mar 2026, signed

Why we call this Governance, risk and audit

Judged against the rules we publish. How we decide.

Governance, risk and audit Certification, audit, risk assessment or advice on how security is run, such as ISO 27001, Cyber Essentials or CAF.

Bought on its own, as a separate contract The cyber work is a separate contract.