- Back
- Back
- Back
- Back
- Back
- Back
- Back
- Back
- Back
- Back
The April 2026 NHSSC (NHSSC) supplier webinar highlighted several important developments for suppliers, with a particular focus on cyber resilience requirements, supplier processes, and upcoming engagement expectations. Below is a summary of the key updates for BHTA members.
Presented by Liam Donaghy and Hannah Shelton (NHS England), this session focused on the increasing importance of cyber security across the health and social care system.
Suppliers are a critical part of the NHS supply chain and are increasingly being targeted as a potential route into the wider system. As cyber threats grow in frequency and sophistication, there is a stronger expectation for suppliers to take an active role in protecting systems and services.
The NHS Cyber Improvement Programme is a national initiative designed to strengthen cyber resilience across health and social care. See the slide below for more information on the programme.
A key development is the next phase of cyber engagement, including the Third-Party Risk Management (TPRM) remediation process. This follows a national open letter to suppliers and signals increased engagement across the sector.
Suppliers can expect engagement on key cyber security controls, requests for supporting evidence where appropriate, and a more coordinated, risk-based approach to assurance. There will also be a continued effort to reduce duplicated requests across NHS organisations.
Suppliers are encouraged to review requirements such as the Cyber Security Supply Chain Charter and prepare for upcoming engagement.
Suppliers can also engage with the programme through webinars, consultations, and pilot activities. For further information or queries, suppliers can contact: england.cyberimprovement@nhs.net
Presented by Lisa Harmsworth, this session highlighted the importance of maintaining accurate supplier contact information.
NHSSC has identified that supplier contact data is not always up to date, which can impact communication and delay issue resolution. To address this, a structured approach to contact management is being introduced.
Five core supplier contact categories are being established to support effective communication and escalation. See the slide below for further details.
Suppliers will be contacted in the coming months to verify and update their contact details. There is an expectation that suppliers will provide accurate contact information, notify NHSSC of any internal staff changes, and regularly review and confirm contact details.
Maintaining accurate contact data will support more efficient communication, clearer escalation processes, and improved supply chain resilience.
Presented by Steph Holmes-Fletcher, this session outlined NHSSC’s policy on supplier novation.
Supplier novation refers to changes in how framework agreements, contracts, or awarded lots are transferred between suppliers under NHSSC (Supply Chain Coordination Limited (SCCL)) arrangements.
The slide below explains SCCL’s novation policy.
Presented by Hamish Makanji, NHSSC provided a brief update on the NHS Core List.
The NHS Core List is a broader NHS initiative, being implemented by NHSSC, which aims to standardise commonly used products and reduce unwarranted variation across the system.
The programme continues to develop, with a pipeline of product categories under review and ongoing engagement planned with suppliers once this pipeline is established.
Suppliers can share suggestions or feedback on NHS Core List opportunities by contacting CoreList@supplychain.nhs.uk.
For a more detailed overview of the NHS Core List and its implications, see our previous article.
BHTA will continue to monitor developments from NHSSC and share relevant updates with members.