Health body launches tender for server, software and SOC services
Healthcare tender bundles servers, backup, security tools and SOC services, highlighting how digital transformation is tightening cybersecurity demands.
Healthcare tender bundles servers, backup, security tools and SOC services, highlighting how digital transformation is tightening cybersecurity demands.
Follow Tenderlake on LinkedIn for concise insights on public-sector tenders and emerging procurement signals.
A medical centre is seeking a supplier for an integrated package of servers, security appliances, productivity software and security operations centre (SOC) services. The Server and Software Infrastructure Delivery contract links day‑to‑day infrastructure renewal with explicit cyber‑defence capability, illustrating how healthcare digital transformation is now being framed through the lens of the NIS 2 Directive’s focus on stronger cybersecurity.
Centrum Medyczne "Żelazna" sp. z o.o. published the contract notice on 4th May 2026. The order brings together several components that are often procured separately: delivery of server infrastructure, backup devices, UTM (unified threat management) devices, software including Office 365 licences, and the provision of SOC services, all described as part of a digital transformation project in healthcare.
This mix of hardware, software and managed security functions points to a buyer looking for a coherent platform rather than a set of isolated upgrades. Server infrastructure and backup devices underpin the availability and recoverability of clinical and administrative systems. UTM devices add a network security layer, concentrating firewall and related protections at key points in the infrastructure. Office 365 licensing, meanwhile, suggests a push to standardise productivity and communication tools for staff.
The inclusion of SOC services is a notable step. Instead of relying solely on static controls such as firewalls and endpoint protection, the buyer is seeking an ongoing security capability that can monitor systems, detect suspicious activity and respond to incidents. Situating SOC services explicitly within a digital transformation project signals that cybersecurity is being treated as part of the core design of new digital services, not an add‑on once systems are live.
Bringing all of this under a single contract notice also consolidates responsibility. A supplier, or consortium, able to deliver infrastructure, licences and SOC operations will be expected not only to install and configure equipment, but to keep the environment secure over time. That shift from one‑off delivery to continuous service is becoming more visible across recent public‑sector procurements.
The medical centre’s plans sit within a broader wave of healthcare tenders where digital expansion and cybersecurity are tightly linked. In January 2026, Uniwersytecki Szpital Kliniczny im. Fryderyka Chopina w Rzeszowie published a notice for Server Hardware and Cybersecurity Solutions. That project aims at the development of digital services and enhancement of cybersecurity at both a general hospital and an oncology centre through server hardware, cybersecurity systems and medical documentation scanners.
Also in January 2026, Samodzielny Publiczny Zakład Opieki Zdrowotnej w Lubaczowie launched a contract for Computer Equipment and Network Expansion, explicitly framed around enhancing digital services and ensuring patient data security. The focus there is on supplying computer equipment and expanding network infrastructure, again coupling service improvement with data protection.
Earlier, on 16th December 2025, Samodzielny Publiczny Zakład Opieki Zdrowotnej w Łukowie issued a notice for Computer Equipment and Software Delivery that goes beyond hardware. Alongside computer infrastructure, the project calls for a privileged user monitoring system, a protection system for workstations and servers, and administrator training. Security tooling and skills development are built into the same procurement.
On 1st April 2026, the National Institute of Geriatrics, Rheumatology and Rehabilitation published its own contract for IT Equipment and Software Procurement. That contract combines delivery and installation of computer equipment, database software, servers, storage systems and networking equipment, all to enhance healthcare services and cybersecurity.
Server and endpoint refresh is another clear theme. On 27th February 2026, Świętokrzyskie Centrum Matki i Noworodka – Szpital Specjalistyczny w Kielcach went to market for Server and Computer Equipment Delivery, including tablets, servers, disk arrays, WiFi infrastructure and software, with data and service migration built in. And back in November 2025, Samodzielny Publiczny Zespół Zakładów Opieki Zdrowotnej w Staszowie issued an IT Equipment Supply notice for new equipment tied directly to a healthcare digital transformation project.
Across these examples, buyers are not only refreshing equipment. They are specifying cybersecurity systems, monitoring tools, migration support and training alongside infrastructure. The SOC requirement in Centrum Medyczne "Żelazna"’s contract sits squarely within this pattern: resilience and security are now central requirements whenever hospitals expand their digital services.
The same mix of infrastructure and security is visible beyond individual hospitals. In November 2025, Powiat Tarnogóski launched IT Equipment and Software Delivery for the “Cybersecure Local Government” project. That contract is split into two parts: IT equipment and network security systems, with delivery, installation and configuration all bundled in, and the explicit aim of enhancing cybersecurity in a county administration.
At the central e‑health level, Centrum e‑Zdrowia went to market on 17th December 2025 with a notice for Computing Infrastructure and Software Delivery. That procurement seeks computing infrastructure and software together with implementation and warranty service, showing how central digital platforms are undergoing the same renewal as local hospitals.
Further down the stack, specialist institutions are modernising core IT. On 21st April 2026, Instytut Łączności – Państwowy Instytut Badawczy issued a contract notice for IT Equipment and Software Installation, covering servers, network equipment, tape archive solutions and licences. Just days later, on 30th April 2026, Naukowa i Akademicka Sieć Komputerowa – Państwowy Instytut Badawczy followed with a notice for Server Delivery and Warranty, focused on servers plus documentation, software and service.
Data‑centre level upgrades are mirrored in the hospital sector. On 27th March 2026, SZPITALE TCZEWSKIE SPÓŁKA AKCYJNA published a tender for IT Equipment Supply covering a disk array, database server, virtualisation server, data‑centre switch stack and server hard drives, together with installation, commissioning, database migration and training. Meanwhile, on 31st March 2026, SZPITAL PRASKI P.W. PRZEMIENIENIA PAŃSKIEGO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ launched IT Infrastructure Modernization, aimed at modernising and expanding IT infrastructure, supplying equipment, software and licences while improving the efficiency and reliability of healthcare digital services.
Other buyers are linking infrastructure with advanced digital services. On 24th February 2026, Samodzielny Publiczny Zakład Opieki Zdrowotnej Centralny Szpital Kliniczny Uniwersytetu Medycznego w Łodzi issued a notice for IT Equipment and Software Delivery to support new e‑services, including mobile authentication tokens, diagnostic laboratory software, emergency department monitoring systems, an AI‑based voicebot, flow scanners and an oncology coordination module. The same month, on 25th February 2026, Wojewódzki Specjalistyczny Szpital im. M. Pirogowa w Łodzi sought Supply of Computer Equipment and Services, combining computer hardware with a vulnerability management system, licences, cryptographic card readers and security management services plus employee training.
Taken together, these procurements depict a public sector modernising its infrastructure, embedding cybersecurity controls and skills, and, increasingly, procuring ongoing services, not just products. The SOC component in Centrum Medyczne "Żelazna"’s contract is one expression of that wider shift.
The NIS 2 Directive is pushing essential and important entities towards stronger cybersecurity measures. The medical centre’s decision to fold SOC services into a broader infrastructure tender suggests that, in healthcare at least, compliance and resilience are being addressed through integrated projects that touch servers, networks, endpoints and staff.
Across the recent notices, several features recur:
The Server and Software Infrastructure Delivery contract is notable because it brings a full SOC capability into scope alongside core server, backup and UTM infrastructure. Future healthcare and local‑government tenders may increasingly follow this pattern, specifying detection and response services as standard when they renew or expand IT estates.
For now, the direction of travel is clear from the volume and content of recent notices: digital transformation projects in healthcare and beyond are being shaped by cybersecurity from the outset. How buyers structure upcoming procurements – and how far they go in outsourcing ongoing cyber operations – will be the key developments to watch as NIS 2 continues to influence public‑sector IT planning.
Follow Tenderlake on LinkedIn for concise insights on public-sector tenders and emerging procurement signals.