Public procurement notice: Contract Award Notice
Published: 2021-09-24
Buyer: Health Service Executive (HSE)
Country: IE
Contract type: Services
Procedure: Negotiated without a prior call for competition
CPV classification: 72220000: Systems and technical consultancy services | 72221000: Business analysis consultancy services | 72224000: Project management consultancy services | 72227000: Software integration consultancy services
Estimated value: 826655 EUR
Award criteria: Lowest price

Technical requirements: KPMG operated closely with Accenture in the Tech Ops Workstream. They then continued to work on FireEye deployment related activities and also began ramping up reporting and data visualisation efforts with the relevant OoCIO Workstream Lead. Alongside OoCIO Senior Management KPMG concentrated efforts on two main areas of focus: reporting and underlying data quality and Service Management operationalisation
On 14th May, the HSE became aware of a major cyber-attack which severely impacted ICT services across the HSE - the ICT systems were impacted through the criminal infiltration of these systems using Conti Ransomware. Healthcare services across the country were severely disrupted with real and immediate consequences for the thousands of people who require health services every day. The HSE required external assistance in a number of areas - technology (including applications and data), cybersecurity, incident response, digital forensics, and legal and regulatory.  In selecting a company to provide assistance, the appointed members of existing Framework Agreements were considered using the following criteria:
Have an international reputation and experience of responding to major incidents, cyber-security, disaster recovery and business continuity.
Be able to mobilise a senior team with the capacity to draw in international expertise as part of the wider review team.
Over the course of the weekend, the HSE CIO (Fran Thompson) and COO (Michael Redmond) held a number of workshops with the HSE’s established strategic partners including EY, KPMG, Accenture, PwC, Deloitte and Microsoft.
KPMG have a long standing relationship working with the Office of the CIO and through previous projects including the National Electronic Health Record Programme, Individual Health Identifier Programme and Cloud Establishment Programme, have a detailed understanding of the HSE application and technical infrastructure landscape​
KPMG are currently working with the Office of the CIO as part of the Covid-19 Pandemic Response and are delivering relevant services including Programme Management and Data Visualisation and Reporting outputs​
Through a proven delivery record, KPMG have developed working relationships with all relevant ICT and service related stakeholders across the HSE​
KPMG committed to pulling team members from other projects and clients in order to mobilise an experienced team at scale to support the HSE as required including making Cyber subject matter experts available to assist in the response activities​
KPMG have a dedicated Cyber response team who formed part of the KPMG team membership, with the team led by KPMG’s Irish based European Cyber Lead​
Already in 2021, KPMG have delivered emergency cyber response services to seven organisations in Ireland including dealing with Conti attacks​ . At the outset, KPMG operated closely with Accenture in the Tech Ops Workstream. They then continued to work on FireEye deployment related activities and also began ramping up reporting and data visualisation efforts with the relevant OoCIO Workstream Lead. Alongside OoCIO Senior Management KPMG concentrated efforts on two main areas of focus: reporting and underlying data quality and Service Management operationalisation


Winner: KPMG
Award value: 826655
Number of bids: 1