IT Procurement

Bespoke, hands-on support delivered around your procurement and contract management needs

Modern IT buying is complex. You are balancing compliance under the Procurement Act 2023, data protection, cyber risk, accessibility, interoperability and rapid change in licensing and consumption models. We provide practical, outcome-focused IT procurement consultancy for contracting authorities and third sector organisations that need extra capacity or specialist help to run a compliant, value for money process first time.

We work as an extension of your team, from shaping the need through to mobilisation and supplier performance management. Typical clients include local government, housing associations, NHS bodies, education institutions and national charities.

What we deliver

  • Compliant routes to market aligned to the Procurement Act 2023 and your standing orders, using the Most Advantageous Tender approach.
  • Costed options appraisals that compare frameworks and procedures with total cost, timeline, risk and market competitiveness.
  • Specifications and SoWs that are outcomes based, vendor neutral and built for interoperability and exit.
  • Structured market engagement that informs the approach without compromising competition or fairness.
  • Robust evaluations using weighted criteria, moderated scoring, clear audit trails and defensible award reports.
  • Contracting and mobilisation with SLAs, KPIs, service credits, data and security schedules, and a realistic transition plan.
  • Supplier management to drive performance, savings and continuous improvement across the term.

Where we focus

Public sector and charity IT portfolios are broad. We specialise in the categories that most often drive spend, risk and scrutiny.

Typical IT categories we buy and improve

CategoryExamples of scopeCommon issues we fixWhat success looks like
Business applications and SaaSCRM, ERP, EDRMS, housing management, finance, HR, case managementLicence sprawl, shadow IT, unclear data residency, weak exit rightsRight-sized licences, clear data schedules and exit plan, measurable adoption and benefits
Productivity and collaborationM365 or Google Workspace, e-sign, meeting platformsOverlapping tools, double paying, missing accessibility featuresConsolidated stack, AA compliance, lower TCO and higher utilisation
Cloud and hostingIaaS, PaaS, managed cloud, private hostingUnpredictable consumption costs, vendor lock-in, weak FinOpsPredictable spend, reserved capacity where appropriate, portability and guardrails
Cyber securitySOC, SIEM, MDR, endpoint, vulnerability management, penetration testingGaps against policy, unclear incident response, duplicate toolsMapped controls, tested response plan, rationalised tooling and measurable risk reduction
Networks and connectivityWAN, LAN, Wi-Fi, SD-WAN, telephony and UCMulti-year auto-renewals, long lead times, poor service creditsCompetitive pricing, flexible terms, service credits that bite and improved uptime
Devices and printLaptops, tablets, peripherals, MFDs and print managementInflexible refresh cycles, underused MFDs, security gapsLifecycle policy, secure configuration, lower click charges and fewer devices

Your route to market

Choosing the right route is the fastest way to a compliant and competitive outcome. We assess frameworks and procedures against your scope, budget, timescales and market.

RouteWhen it fitsBenefitsWatch-outs
Framework call-off via CCS and other consortiaMature needs, common categories, clear shortlistSpeed, pre-vetted suppliers, standard termsLot fit, commercial caps, locked supplier lists
Further competition under a frameworkYou need pricing tension and qualitative assessmentStrong competition, transparent awardPlan enough time for supplier responses
Open competitionBespoke solutions or niche marketsBroad reach, tailored termsLonger timeline and heavier resource load
Competitive flexible procedureComplex or innovative requirementsIterative engagement and refinementCareful governance to preserve fairness
Direct award where permitted and justifiedUrgent continuity, unique provider, limited valueMinimal admin and speedRequires clear lawful basis and strong audit trail

We work regularly across CCS frameworks such as technology products, services, cloud and network services, as well as regional routes through ESPO, YPO, NEPO, KCS and NHS SBS. If a fresh competition is best, we build a lean, fully compliant process with clear documentation, notices and timelines.

Practical support at each stage

Define and appraise
 We turn objectives into commercial options. That includes needs analysis, stakeholder mapping, data discovery, risk and privacy considerations, and a costed options appraisal that compares likely outcomes for quality, time and total cost of ownership. You get a simple recommendation with the evidence to back it.

Market engagement
 We structure soft-market testing and early engagement so you learn without creating bias. Expect clear question sets, supplier briefings, anonymised feedback, and careful separation between discovery and the live competition.

Specification and pack
 We draft outcome-based specifications, user and system requirements, data protection schedules, security controls, service levels, pricing schedules and evaluation methodology. Documentation is plain English, accessible and vendor neutral.

Evaluation and award
 We train your panel, run clarifications, manage demonstrations, proof-of-concepts where relevant, and moderate scores. Every decision is evidenced for audit, standstill and potential challenge. Awards are made on the Most Advantageous Tender, balancing quality, price and wider value.

Contract management and savings
 We support mobilisation with a day-one readiness plan, governance cadence, change control, service credits and benefits tracking. During the term we help with right-sizing, licence optimisation, consumption guardrails and supplier performance improvement, so value is sustained not just promised.

Compliance and assurance built in

  • Procurement Act 2023 transparency and notices across the lifecycle.
  • Data protection aligned to UK GDPR and DPA 2018, with DPIAs, processing clauses and clear roles and responsibilities.
  • Cyber controls that reflect your policies and recognised baselines like Cyber Essentials Plus or equivalent.
  • Accessibility checks against WCAG and public sector bodies accessibility regulations.
  • Social value and ESG evaluation that is proportionate and contract specific, with deliverables you can monitor.
  • Exit and interoperability so you can leave cleanly, migrate data and avoid lock-in.

Need extra hands, not a textbook

Many teams simply need capacity to get a live procurement over the line or a specialist to unblock a thorny issue. We offer flexible models.

  • Outsourced procurement management for a specific IT project or programme.
  • Interim capacity to cover peaks, absences or a run of concurrent tenders.
  • Assurance and health checks on documentation, evaluation plans and award decisions.
  • Training and mentoring for buyers and evaluators on IT-specific risks, scoring and the new regime.

Why teams choose us

  • Sector fluency in local government, housing, health and charities.
  • Hands-on delivery rather than slideware.
  • Vendor neutrality that protects competition and your leverage.
  • Measurable results on total cost, risk reduction and supplier performance.

Related Resources

Printing, Stationery & Office Supplies Procurement

Core lists, substitution rules and sustainability commitments that hold suppliers to the deal.

Furniture Procurement

Standards, warranties, installation and lifecycle support managed through lotting that suits budgets and timelines.

Professional Services Procurement

Outcome led briefs, fair fee models and conflict of interest controls that attract the right advisers.

Ready to talk

If you need support with a live procurement, a contract that needs attention or a value for money review, we can help.

Call 01204 238 046
Email hello@thorntonandlowe.com

Request a free consultation and we will agree the next step.

Scroll to Top