# Risk Assurance Review of Atos' Patch Management and Remediation Processes

> Contract award record from UK public-sector procurement sources.

## Key facts

- Public buyer: [NS&I](/buyers/ns-i/contract-awards)
- Contract winner: Zero Plus Ltd
- Award value: £23,900
- Award date: 29 January 2025
- Published: 27 February 2025
- Contract start: 3 January 2025
- Contract end: 30 April 2025
- Stage: awarded
- Procurement category: services
- Notice ID: 6c974606-0cb8-4d43-8bfa-4e2e95788f8f-830992
- OCID: ocds-b5fd17-ecfc0855-8524-45dc-af69-eb08e0effc96

## Description

NS&I has an outsourced customer servicing model which provides IT and infrastructure services\. These services are provided to NS&I by Atos and includes patch management and vulnerability management\. For NS&I systems to be protected from risks associated with patching, it is important that effective processes are in place to test patches, deploy patches into the operating environment and verify that each patch is deployed successfully\. NS&I and Atos have agreed a business process outsourcing agreement which provides sufficient consideration to the key requirements of an effective patching process\. The objective of this review is to provide assurance to NS&I management that Atos has fully completed the remedial patching required across the NS&I IT estate\.

## Related contract awards

- [IT Health Checks](/contracts/ocds-b5fd17-50f29dc6-6600-4fbd-ba08-7404105b8651): NS&I
- [IS & Security Assurance Subscriptions](/contracts/ocds-b5fd17-c925f6eb-1271-4ee4-a3ed-d870b517ccd7): NS&I
- [Chief Executive Officer recruitment campaign](/contracts/ocds-b5fd17-a5fbc104-5b65-44a2-8486-51ffe860dc72): NS&I
- [Provision of Network Monitoring Solution- Wifi Testing](/contracts/ocds-b5fd17-47390b7c-1ae1-40f0-9b66-55540cb14b1f): Department for Business and Trade

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/6c974606-0cb8-4d43-8bfa-4e2e95788f8f-830992)