Procurement of an Enterprise Risk Management (ERM) Solution

Procurement description

Velindre University NHS Trust (the Authority) wishes to alert suppliers to its intention to hold preliminary market engagement with regards to the potential procurement of an Enterprise Risk Solution to assist in the recording and management of risks across the Authority, ranging from corporate, clinical and project risks.

The Authority intends to procure an enterprise-wide software solution to support strategic and operational risk management. The contract will cover the provision of the platform, configuration, implementation, training, ongoing support, and maintenance.

The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape.

The contract duration is expected to be:

Initial term: 5 years

Optional extensions: 2+2 years

The Authority seeks an ERM solution that provides:

- Comprehensive risk register functionality

- Incident and issue reporting

- Real-time dashboards & analytics

- Workflow, approvals & audit trail

- User-role and permission management

- NHS-compliant information governance and security controls

- Integration with existing Authorities systems (where applicable)

- Training and support for end-users and administrators

- Secure hosting and business continuity capabilities

- Project management tools such as schedule risk analysis (Monte Carlo Simulation) or equivalent

- Open architecture and integration into other systems

All suppliers must comply with relevant NHS and statutory requirements, including data-protection legislation and cyber-security standards.

Main category

Goods

Delivery regions

• UKL - Wales
• UK - United Kingdom

Total value (estimated)

1 GBP Excluding VAT

1 GBP Including VAT

Contract dates (estimated)

01 April 2027, 00:00AM to 31 March 2032, 23:59PM

Extension end date (if all the extensions are used): 31 March 2034

Velindre University NHS Trust

Is the total value above threshold?

Above threshold

CPV classifications

• 48000000 - Software package and information systems

Delivery regions

• UKL - Wales
• UK - United Kingdom

Sustainability

Small and medium-sized enterprises (SME)

Contract start date (estimated)

01 April 2027, 00:00AM

Contract end date (estimated)

31 March 2032, 23:59PM

Extension end date (estimated)

31 March 2034, 23:59PM

Can the contract be extended?

Yes

Engagement process description

The Authority wishes to engage with suppliers to:

(i) Develop the Authorities requirement and procurement approach,

(ii) To support the Authority in designing a procurement procedure including conditions of participation and award criteria

(iii) To identify potential suppliers, to supply goods and services, and to inform contractual terms

To achieve effective preliminary market engagement the Authority will hold a supplier day on the 10/04/2026. Initially, eight 45-minute slots will be made available and will be offered on a first come, first served basis. At its sole discretion the Authority may extend the opportunity beyond this dependent upon supplier response, but this is not guaranteed

Interested suppliers should provide confirmation to the following email address:

Gemma.Roscrow@wales.nhs.uk

Please provide confirmation by 7th April 2026 for any materials required in the medium of the Welsh language.

Due date

07 April 2026, 23:59PM

Has the engagement period already ended?

No

Publication date of tender notice (estimated)

01 June 2026