Notice Information
Notice Title
SANS Training
Notice Description
NHS England seeks to commission SANS Cybersecurity training. Procured under the education and training light touch regime. The contract value will be 250,000 GDB for the initial term until 31/03/2026. There will be an optional extension to 31/03/2027, subject to need and available budget. Total contract value of 500,000 GBP. 1.1 NHS England's Cyber Operations (CO) provides cyber security expertise both internally to NHS England and to the wider health and care system. Supplying the system with services and expertise to develop their capability in mitigating cyber security risks, therefore preventing impact to patient outcomes. 1.2 Cyber security is a very specialist field; it is necessary for CO staff to obtain industry recognised expert technical training and certifications. Achieving such specialist training and certifications will ensure that each member maintains an adequate level of current knowledge and proficiency in their respective field and more importantly, this will support the CO's Retention Strategy, provide clear objectives for both the NHS England cyber security profession and its members. 1.3 Cyber Operations (CO) have a well-established need for specialist cyber training, which we deliver through SANS. It has been well documented within the strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on us reducing reliance on contractors by developing our own staff. Having suitable skilled, trained cyber professionals is a key control against the NHS England and System cyber risks, which are amongst the highest on respective risk registers. 1.4 SANS is widely recognised and trusted across both government and industry sectors, making it a highly credible choice for cyber security training. It is actively used by key government departments such as the Ministry of Defence (MOD) and HM Revenue & Customs (HMRC), as well as leading private sector organisations like PwC. SANS maintains strong collaborative relationships with these entities, ensuring its training remains aligned with real-world operational needs and emerging threats. 1.5 Furthermore, SANS courses are closely aligned with globally recognised frameworks such as the NIST Cybersecurity Framework and MITRE ATT&CK, ensuring that learners gain skills that are directly applicable to compliance, threat detection, and operational readiness. This alignment enhances the relevance and applicability of the training in both strategic and technical contexts, supporting organisations in meeting regulatory requirements and strengthening their cyber resilience. Further information and the tender documents can be downloaded from the following link. https://health-family.force.com/s/Welcome https://atamis-1928--prospend.vf.force.com/apex/CS_ContractPage?filters=&page=1&Preview=Yes&searchStr=&SearchType=Projects&sortStr=Alphabetical&uid=a07Sr00000b2IA4IAM&sfdcIFrameOrigin=https%3A%2F%2Fatamis-1928.lightning.force.com
Lot Information
Lot 1
Renewal: The contract can be extended for a further 12 months at a cost of 250,000 GDB.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-056c50
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/045658-2025
- Current Stage
- Tender
- All Stages
- Tender
Procurement Classification
- Notice Type
- UK4 - Tender Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Open
- Procurement Method Details
- Below threshold - open competition
- Tender Suitability
- SME, VCSE
- Awardee Scale
- Not specified
Common Procurement Vocabulary (CPV)
- CPV Divisions
80 - Education and training services
-
- CPV Codes
80000000 - Education and training services
Notice Value(s)
- Tender Value
- £500,000 £500K-£1M
- Lots Value
- £500,000 £500K-£1M
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 4 Aug 20256 months ago
- Submission Deadline
- 22 Aug 2025Expired
- Future Notice Date
- Not specified
- Award Date
- Not specified
- Contract Period
- 18 Sep 2025 - 31 Mar 2026 6-12 months
- Recurrence
- Not specified
Notice Status
- Tender Status
- Active
- Lots Status
- Active
- Awards Status
- Not Specified
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- NHS ENGLAND
- Contact Name
- Not specified
- Contact Email
- mark.gilbert10@nhs.net
- Contact Phone
- Not specified
Buyer Location
- Locality
- LONDON
- Postcode
- SE1 8UG
- Post Town
- South East London
- Country
- England
-
- Major Region (ITL 1)
- TLI London
- Basic Region (ITL 2)
- TLI4 Inner London - East
- Small Region (ITL 3)
- TLI45 Lambeth
- Delivery Location
- Not specified
-
- Local Authority
- Lambeth
- Electoral Ward
- Waterloo & South Bank
- Westminster Constituency
- Vauxhall and Camberwell Green
Further Information
Notice Documents
-
https://www.find-tender.service.gov.uk/Notice/045658-2025
4th August 2025 - Tender notice on Find a Tender
Notice URLs
Open Contracting Data Standard (OCDS)
View full OCDS Record for this contracting process
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-056c50-2025-08-04T14:04:21+01:00",
"date": "2025-08-04T14:04:21+01:00",
"ocid": "ocds-h6vhtk-056c50",
"initiationType": "tender",
"parties": [
{
"id": "GB-PPON-PDPT-3135-BWWY",
"name": "NHS England",
"identifier": {
"scheme": "GB-PPON",
"id": "PDPT-3135-BWWY"
},
"address": {
"streetAddress": "Wellington House, 133-135 Waterloo Rd",
"locality": "London",
"postalCode": "SE1 8UG",
"country": "GB",
"countryName": "United Kingdom",
"region": "UKI45"
},
"contactPoint": {
"email": "mark.gilbert10@nhs.net"
},
"roles": [
"buyer"
],
"details": {
"url": "https://www.england.nhs.uk/",
"classifications": [
{
"scheme": "UK_CA_TYPE",
"id": "publicAuthorityCentralGovernment",
"description": "Public authority - central government"
}
]
}
}
],
"buyer": {
"id": "GB-PPON-PDPT-3135-BWWY",
"name": "NHS England"
},
"tender": {
"id": "ocds-h6vhtk-056c50",
"legalBasis": {
"id": "2023/54",
"scheme": "UKPGA",
"uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
},
"title": "SANS Training",
"description": "NHS England seeks to commission SANS Cybersecurity training. Procured under the education and training light touch regime. The contract value will be 250,000 GDB for the initial term until 31/03/2026. There will be an optional extension to 31/03/2027, subject to need and available budget. Total contract value of 500,000 GBP. 1.1 NHS England's Cyber Operations (CO) provides cyber security expertise both internally to NHS England and to the wider health and care system. Supplying the system with services and expertise to develop their capability in mitigating cyber security risks, therefore preventing impact to patient outcomes. 1.2 Cyber security is a very specialist field; it is necessary for CO staff to obtain industry recognised expert technical training and certifications. Achieving such specialist training and certifications will ensure that each member maintains an adequate level of current knowledge and proficiency in their respective field and more importantly, this will support the CO's Retention Strategy, provide clear objectives for both the NHS England cyber security profession and its members. 1.3 Cyber Operations (CO) have a well-established need for specialist cyber training, which we deliver through SANS. It has been well documented within the strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on us reducing reliance on contractors by developing our own staff. Having suitable skilled, trained cyber professionals is a key control against the NHS England and System cyber risks, which are amongst the highest on respective risk registers. 1.4 SANS is widely recognised and trusted across both government and industry sectors, making it a highly credible choice for cyber security training. It is actively used by key government departments such as the Ministry of Defence (MOD) and HM Revenue & Customs (HMRC), as well as leading private sector organisations like PwC. SANS maintains strong collaborative relationships with these entities, ensuring its training remains aligned with real-world operational needs and emerging threats. 1.5 Furthermore, SANS courses are closely aligned with globally recognised frameworks such as the NIST Cybersecurity Framework and MITRE ATT&CK, ensuring that learners gain skills that are directly applicable to compliance, threat detection, and operational readiness. This alignment enhances the relevance and applicability of the training in both strategic and technical contexts, supporting organisations in meeting regulatory requirements and strengthening their cyber resilience. Further information and the tender documents can be downloaded from the following link. https://health-family.force.com/s/Welcome https://atamis-1928--prospend.vf.force.com/apex/CS_ContractPage?filters=&page=1&Preview=Yes&searchStr=&SearchType=Projects&sortStr=Alphabetical&uid=a07Sr00000b2IA4IAM&sfdcIFrameOrigin=https%3A%2F%2Fatamis-1928.lightning.force.com",
"status": "active",
"items": [
{
"id": "1",
"additionalClassifications": [
{
"scheme": "CPV",
"id": "80000000",
"description": "Education and training services"
}
],
"deliveryAddresses": [
{
"region": "UK",
"country": "GB",
"countryName": "United Kingdom"
}
],
"relatedLot": "1"
}
],
"value": {
"amountGross": 500000,
"amount": 500000,
"currency": "GBP"
},
"procurementMethod": "open",
"procurementMethodDetails": "Below threshold - open competition",
"mainProcurementCategory": "services",
"specialRegime": [
"lightTouch"
],
"aboveThreshold": false,
"submissionMethodDetails": "https://health-family.force.com/s/Welcome https://atamis-1928--prospend.vf.force.com/apex/CS_ContractPage?filters=&page=1&Preview=Yes&searchStr=&SearchType=Projects&sortStr=Alphabetical&uid=a07Sr00000b2IA4IAM&sfdcIFrameOrigin=https%3A%2F%2Fatamis-1928.lightning.force.com",
"submissionTerms": {
"electronicSubmissionPolicy": "allowed"
},
"tenderPeriod": {
"endDate": "2025-08-22T17:00:00+01:00"
},
"enquiryPeriod": {
"endDate": "2025-08-12T17:00:00+01:00"
},
"lots": [
{
"id": "1",
"status": "active",
"value": {
"amountGross": 500000,
"amount": 500000,
"currency": "GBP"
},
"awardCriteria": {
"criteria": [
{
"type": "quality",
"name": "Technical",
"description": "Quality weighting.",
"numbers": [
{
"number": 70,
"weight": "percentageExact"
}
]
},
{
"type": "price",
"name": "Price",
"description": "Price",
"numbers": [
{
"number": 30,
"weight": "percentageExact"
}
]
}
]
},
"selectionCriteria": {
"criteria": [
{
"description": "Tender"
}
]
},
"suitability": {
"sme": true,
"vcse": true
},
"contractPeriod": {
"startDate": "2025-09-19T00:00:00+01:00",
"endDate": "2026-03-31T23:59:59+01:00",
"maxExtentDate": "2027-03-31T23:59:59+01:00"
},
"hasRenewal": true,
"renewal": {
"description": "The contract can be extended for a further 12 months at a cost of 250,000 GDB."
}
}
],
"documents": [
{
"id": "045658-2025",
"documentType": "tenderNotice",
"noticeType": "UK4",
"description": "Tender notice on Find a Tender",
"url": "https://www.find-tender.service.gov.uk/Notice/045658-2025",
"datePublished": "2025-08-04T14:04:21+01:00",
"format": "text/html"
}
]
},
"language": "en"
}