Independent Evaluation of the Better Security, Better Care Programme (October 2025 to October 2028)

Overview

Digital Care Hub is seeking an independent evaluation partner to assess the delivery, impact, sustainability and value for money of the Better Security, Better Care (BSBC) programme. Funded by the Department of Health and Social Care, BSBC supports approximately 28,000 CQC-registered adult social care locations in England to improve cyber security, data protection and information governance, including compliance with the Data Security and Protection Toolkit (DSPT). Delivery is led nationally by Digital Care Hub through more than 30 Local Support Organisations, combining central leadership, guidance, training, communications, data analysis and performance management with trusted local support. The supplier will design and deliver a proportionate mixed-method evaluation covering programme governance and delivery, stakeholder engagement, partner effectiveness, reach, changes in awareness and behaviour, adoption of good practice, DSPT outcomes, organisational resilience, wider benefits, cost effectiveness, return on investment and social and economic value. The work should identify lessons, good practice and evidence-based recommendations while providing ongoing insight to support continuous improvement. Key deliverables are an evaluation framework and inception report within three months; ongoing data collection, analysis and stakeholder engagement; monthly progress meetings; an interim report by September 2027; and a final evaluation report, shorter executive report, presentation and dissemination-ready outputs by October 2028. Close-down and dissemination support will continue to March 2029. The proposed contract runs from October 2026 to March 2029, with a maximum budget of £125,000 inclusive of VAT. Bidders must demonstrate strong experience in programme and economic evaluation, publicly funded programmes, mixed-method research, stakeholder engagement and report writing. Knowledge of adult social care, health and care systems, cyber security, digital transformation or information governance is required. Tender responses must include organisation and personnel details, methodology, data collection and analysis plans, delivery timetable, resourcing, quality assurance, risk management, up to three relevant examples, a full pricing schedule, assumptions and proposed social value. Evaluation weightings are: understanding 15%, methodology 35%, experience 20%, project management 10%, social value 10% and price 10%. The supplier must comply with UK GDPR, the Data Protection Act 2018, confidentiality, insurance, procurement, equality and safeguarding requirements. Clarification questions are due by 14 October 2026 and tenders by 18 October 2026. Please see attachment for full specifications.