No, why would they be mentioned? The [in]competence of governments (or any customers) should not factor into this calculation.
What should be happening here is the people responsible for technology at the NHS should be getting fired for leaving operation systems in such a state. Still running Exchange 2003? Really? That's just straight negligence.
My company is going through this same problem, but lucky we have been half competent enough to at least use the business risk as a mean for operational change. Sounds like the NHS simply thought, "well, it's not our money."