Scope
Description
NHS England seeks to commission SANS Cybersecurity training. Procured under the education and training light touch regime.
The contract value will be 250,000 GDB for the initial term until 31/03/2026. There will be an optional extension to 31/03/2027, subject to need and available budget. Total contract value of 500,000 GBP.
1.1 NHS England's Cyber Operations (CO) provides cyber security expertise both internally to NHS England and to the wider health and care system. Supplying the system with services and expertise to develop their capability in mitigating cyber security risks, therefore preventing impact to patient outcomes.
1.2 Cyber security is a very specialist field; it is necessary for CO staff to obtain industry recognised expert technical training and certifications. Achieving such specialist training and certifications will ensure that each member maintains an adequate level of current knowledge and proficiency in their respective field and more importantly, this will support the CO's Retention Strategy, provide clear objectives for both the NHS England cyber security profession and its members.
1.3 Cyber Operations (CO) have a well-established need for specialist cyber training, which we deliver through SANS. It has been well documented within the strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on us reducing reliance on contractors by developing our own staff. Having suitable skilled, trained cyber professionals is a key control against the NHS England and System cyber risks, which are amongst the highest on respective risk registers.
1.4 SANS is widely recognised and trusted across both government and industry sectors, making it a highly credible choice for cyber security training. It is actively used by key government departments such as the Ministry of Defence (MOD) and HM Revenue & Customs (HMRC), as well as leading private sector organisations like PwC. SANS maintains strong collaborative relationships with these entities, ensuring its training remains aligned with real-world operational needs and emerging threats.
1.5 Furthermore, SANS courses are closely aligned with globally recognised frameworks such as the NIST Cybersecurity Framework and MITRE ATT&CK, ensuring that learners gain skills that are directly applicable to compliance, threat detection, and operational readiness. This alignment enhances the relevance and applicability of the training in both strategic and technical contexts, supporting organisations in meeting regulatory requirements and strengthening their cyber resilience.
Further information and the tender documents can be downloaded from the following link.
Total value (estimated)
- £500,000 excluding VAT
- £500,000 including VAT
Below the relevant threshold
Contract dates (estimated)
- 19 September 2025 to 31 March 2026
- Possible extension to 31 March 2027
- 1 year, 6 months, 12 days
Description of possible extension:
The contract can be extended for a further 12 months at a cost of 250,000 GDB.
Main procurement category
Services
CPV classifications
- 80000000 - Education and training services
Contract locations
- UK - United Kingdom
Participation
Conditions of participation
Tender
Particular suitability
- Small and medium-sized enterprises (SME)
- Voluntary, community and social enterprises (VCSE)
Submission
Enquiry deadline
12 August 2025, 5:00pm
Tender submission deadline
22 August 2025, 5:00pm
Submission address and any special instructions
Tenders may be submitted electronically
Yes
Award criteria
| Name | Description | Type | Weighting |
|---|---|---|---|
| Technical | Quality weighting. |
Quality | 70.00% |
| Price | Price |
Price | 30.00% |
Procedure
Procedure type
Below threshold - open competition
Special regime
Light touch
Contracting authority
NHS England
- Public Procurement Organisation Number: PDPT-3135-BWWY
Wellington House, 133-135 Waterloo Rd
London
SE1 8UG
United Kingdom
Email: mark.gilbert10@nhs.net
Website: https://www.england.nhs.uk/
Region: UKI45 - Lambeth
Organisation type: Public authority - central government