Network and Information Security Compliance Audit for HSCNI

The Health and Social Care Northern Ireland (HSCNI) is seeking an Assured Audit Service Provider from the National Cyber Security Centre (NCSC) Cyber Resilience Audit Scheme to conduct an on-site Network and Information Security (NIS) Compliance Audit. The audit will assess whether the essential service and its supporting network and information systems comply with regulation 10 of the Network and Information Systems Regulations 2018. Using the NCSC Cyber Assessment Framework (CAF), the auditor will evaluate compliance against Contributing Outcomes and Indicators of Good Practice (IGP), identifying both good and poor practices. The audit scope covers all critical network and information systems and processes essential to delivering the service. Qualified suppliers must be accredited with the NCSC and have experience conducting NIS compliance assessments for essential service operators.