This public procurement record has 1 release in its history.

Award

09 Sep 2026 at 13:56

Summary of the contracting process

NHS England procured specialist cyber training services for its Cyber Operations function. The requirement supports an established need for specialist training, the organisation’s cyber strategic risk and business plan, and its strategy to attract and retain cyber talent. It is also intended to help NHS England reduce reliance on contractors by developing the skills of its own staff. The service is categorised as education and training, specifically cyber operations training delivered through the SANS training offer. The buying organisation is NHS England, the central public authority responsible for the procurement. The requirement relates to NHS England’s internal Cyber Operations workforce and supports staff capability development rather than the supply of physical goods or construction work.

The procurement has been completed and awarded through a below-threshold direct award without competition under the light-touch regime. The contract was awarded to SANS Training UK Limited on 9 September 2026. The contract was signed on the same date and is active from 9 September 2026 to 31 March 2027. Its value is £400,000 excluding VAT and £480,000 including VAT. The procurement comprises one completed lot covering the cyber training service. NHS England’s published rationale is that Cyber Operations has a well-established need for specialist training, linked to strategic risk, its business plan, its cyber talent strategy and the aim of reducing contractor reliance through staff development. The award is active and the contract remains in force for the stated period.

This award shows sustained NHS England demand for specialist cyber operations training aimed at building internal capability and retaining cyber talent. Suppliers well placed for a comparable requirement would need credible expertise in advanced cyber training, the capacity to support an established operational security function, and a structured offer that develops employees rather than simply supplying short-term contractors. Relevant experience would include delivering specialist training to cyber professionals, aligning programmes with organisational risk and workforce strategies, and helping a public-sector team reduce dependence on external contractors. The selected supplier is a large training business, indicating that the requirement can involve substantial delivery capacity and an established specialist training operation. Providers with a focused cyber curriculum and evidence of workforce development outcomes would be the closest competitors when this type of need is next considered.

How relevant is this notice?

Notice Title

SANS Training 26/27

Notice Description

Compliant below threshold direct award Cyber Operations (CO) have a well established need for specialist cyber training, which we deliver through SANS. It has been well documented within the CO strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on CO reducing reliance on contractors by developing our own staff.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06f5b1
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/085406-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Below threshold - without competition
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

80 - Education and training services


CPV Codes

80000000 - Education and training services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£400,000 £100K-£500K

Notice Dates

Publication Date
9 Sep 20266 days ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
9 Sep 2026 - 31 Mar 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
NHS England
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SE1 8UG
Postcode Area
South East London
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI4 Inner London - East
Small Region (ITL 3)
TLI45 Lambeth
Delivery Location
Not specified

Local Authority
Lambeth
Electoral Ward
Waterloo & South Bank
Westminster Constituency
Vauxhall and Camberwell Green

Supplier Information

Number of Suppliers
1
Supplier Name

SANS TRAINING - UK LIMITED

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...