Security Improvement Programme - Security & Privacy Framework

We wish to engage an external partner with proven expertise in the field of information security and data protection to support us in preparing a gap analysis, implementation and achieving readiness for an ISMS across the University, based on ISO27001, ISO27701 & BS10012 information security and privacy frameworks.

This will require the development and implementation of policies, procedures, and standards consistent with the requirement of a mature ISMS.

This agreement would be based on a 2 year term subject to satisfactory performance The University of Manchester no longer meets the criteria of a 'body governed by public law' and is therefore not considered a contracting authority for the purposes of the Public Contracts Regulations 2015 and/or any replacement legislation.

As a result, the University of Manchester will no longer be subject to the regime contained in The Public Contracts Regulations 2015 and/or any replacement legislation with effect from 1 August 2023.

However, as an institution founded for the public good, an exempt charity and an organization in receipt of public funds, the University has a duty to manage expenditure in an appropriate manner and aims to deliver value for money across its non-pay spend by adhering to good procurement practice.'