How to win: Business Continuity Testing Exercise - RFI

About this contract

The NHSBSA is a Special Health Authority and an Arm's Length Body of the Department of Health and Social Care. We provide a range of critical central services to NHS organisations (our 'clients'), NHS contractors, health bodies, patients and the public (our 'customers'). The NHSBSA requires a service to design, deliver, and facilitate an independent business continuity exercise to test incident response in a realistic, catastrophic scenario. The incident scenario should reflect the complexity and diversity of the NHS sector and be relevant to the threat landscape across the NHS i.e. a ransomware attack or a data integrity breach. It should ideally have a business wide impact, covering a range of the NHSBSA’s services and directorates. Prior to the design of the business continuity exercise, the Supplier will engage with the NHSBSA and be provided with information and/or documents as required to design an appropriate exercise. Delivery of the exercise should take place over half a day and be followed by a debrief session on the same day. Following this, two reports should be submitted by the Supplier; one high level and the other more detailed. Both reports should include, but not

How to win contracts like this

• ✓Answer against the marking scheme, not the question text — NHS Business Services Authority scores each response, so map your evidence to the published criteria and weightings.
• ✓At £40,000, expect quality and social value to carry a large share of the score — price alone rarely wins services work.
• ✓Show recent, comparable delivery: name similar services contracts you've delivered for public bodies, with measurable outcomes.
• ✓Start early: it closes 3 November 2026 and a strong bid takes iteration.

BidWriter drafts your responses from your company profile, scores them against the marking scheme, and tracks your whole pipeline. Free to start — no card needed.

Related resources