The All India Institute of Medical Sciences (AIIMS), New Delhi, India's premier medical research and healthcare institution operating autonomously under the Ministry of Health and Family Welfare, published an open competitive procurement tender on the Government e-Marketplace (GeM) under Bid Number GEM/2026/B/8012011 on 12 September 2026. This strategic technology tender calls for competent, accredited information security auditing organizations to undertake a comprehensive, multi-year cybersecurity audit of AIIMS New Delhi's mission-critical digital healthcare applications, database servers, web portals, cloud workloads, and networked healthcare delivery platforms.

INTRODUCTION

The All India Institute of Medical Sciences (AIIMS), New Delhi, India's premier medical research and healthcare institution operating autonomously under the Ministry of Health and Family Welfare, published an open competitive procurement tender on the Government e-Marketplace (GeM) under Bid Number GEM/2026/B/8012011 on 12 September 2026. This strategic technology tender calls for competent, accredited information security auditing organizations to undertake a comprehensive, multi-year cybersecurity audit of AIIMS New Delhi's mission-critical digital healthcare applications, database servers, web portals, cloud workloads, and networked healthcare delivery platforms.

With the submission window closing on 28 September 2026, this procurement presents a highly accessible, commercially lucrative gateway for specialized cybersecurity MSMEs, CERT-In empanelled consulting firms, and boutique information security startups. Because the procurement is executed as a pure technical consulting and testing service contract across a 3-year term, qualification is driven primarily by certified cybersecurity auditor credentials, proven Vulnerability Assessment and Penetration Testing (VAPT) methodologies, and recognized security standards compliance—rather than multi-crore factory turnover or heavy balance sheet capital. Furthermore, under the Government e-Marketplace General Terms and Conditions (GeM GTC) and the Central Public Procurement Policy for Micro and Small Enterprises (MSEs) Order 2012, eligible MSE service providers benefit from an explicit exemption from Earnest Money Deposit (EMD) payments, as well as purchase preference benefits. This TenderMan intelligence dossier provides an exhaustive breakdown of tender parameters, SME eligibility nuances, risk mitigations, scoring criteria, and bid preparation strategies.

QUICK TENDER OVERVIEW

Modern public tertiary healthcare centers rely entirely on connected Hospital Information Systems (HIS), Electronic Medical Records (EMR), laboratory informatics, online appointment engines (ORIS), telemedicine portals, and intensive care monitoring backbones. Following historical targeted cyber threats across the global healthcare landscape, AIIMS New Delhi has established stringent cyber defense standards aligned with National Critical Information Infrastructure Protection Centre (NCIIPC) and Indian Computer Emergency Response Team (CERT-In) guidelines.

This procurement mandates a continuous, structured 3-year security engagement where an expert external agency evaluates server configurations, microservices, mobile application endpoints, RESTful APIs, external attack surfaces, network firewalls, and cryptographic hygiene. The engagement is structured into regular periodic audits, code review reviews, configuration benchmarks, and rapid on-demand reassessment upon major architectural upgrades. For an ambitious information security SME, securing an AIIMS New Delhi cyber audit contract serves as a premier credential that elevates the firm into top-tier national cybersecurity governance circles.

Established in 1956 by an Act of Parliament as an Institute of National Importance, AIIMS New Delhi is the vanguard of clinical medicine, postgraduate medical research, and public health policy in India. Its central campus in Ansari Nagar treats over 1.5 million outpatients and tens of thousands of inpatients annually, processing petabytes of highly sensitive patient medical data, diagnostic images, clinical trial records, and national biometric identifiers.

The Computer Facility at AIIMS manages the centralized data center, campus-wide optical fiber network, cloud integration gateways, and institutional disast