--- title: "SANS Training" ocid: "ocds-h6vhtk-056c50" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-056c50" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-056c50.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-056c50.json" source: "Find A Tender Service" current_stage: "Tender" buyer: "NHS ENGLAND" published: "2025-08-04" --- # SANS Training Buyer: NHS ENGLAND Current stage: Tender OCID: ocds-h6vhtk-056c50 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-056c50) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-056c50.json) ## Summary NHS England is seeking suppliers for the "SANS Training" tender, aimed at providing cyber security training under the education and training services category. The procurement process is at the tender stage, open for submissions until 22 August 2025. This opportunity is being managed from their offices in London, UK, and has a projected contract value of £500,000, encompassing both the initial period until 31 March 2026, with the potential for a one-year extension. This initiative falls under the open procurement method with a light touch regime, ensuring a competitive process for eligible participants. This tender presents a considerable opportunity for businesses specialising in cybersecurity training, particularly those familiar with SANS course offerings, which are well-regarded across public and private sectors. The contract encourages participation from SMEs and voluntary sector entities, making it an attractive prospect for firms aiming to expand their portfolio within the healthcare sector. The alignment with global cybersecurity frameworks such as NIST and MITRE ATT&CK enhances the value proposition for organisations that can provide cutting-edge, compliance-driven training solutions, thus aiding NHS England's efforts to bolster their cyber resilience and operational readiness. ## Notice NHS England seeks to commission SANS Cybersecurity training. Procured under the education and training light touch regime. The contract value will be 250,000 GDB for the initial term until 31/03/2026. There will be an optional extension to 31/03/2027, subject to need and available budget. Total contract value of 500,000 GBP. 1.1 NHS England's Cyber Operations (CO) provides cyber security expertise both internally to NHS England and to the wider health and care system. Supplying the system with services and expertise to develop their capability in mitigating cyber security risks, therefore preventing impact to patient outcomes. 1.2 Cyber security is a very specialist field; it is necessary for CO staff to obtain industry recognised expert technical training and certifications. Achieving such specialist training and certifications will ensure that each member maintains an adequate level of current knowledge and proficiency in their respective field and more importantly, this will support the CO's Retention Strategy, provide clear objectives for both the NHS England cyber security profession and its members. 1.3 Cyber Operations (CO) have a well-established need for specialist cyber training, which we deliver through SANS. It has been well documented within the strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on us reducing reliance on contractors by developing our own staff. Having suitable skilled, trained cyber professionals is a key control against the NHS England and System cyber risks, which are amongst the highest on respective risk registers. 1.4 SANS is widely recognised and trusted across both government and industry sectors, making it a highly credible choice for cyber security training. It is actively used by key government departments such as the Ministry of Defence (MOD) and HM Revenue & Customs (HMRC), as well as leading private sector organisations like PwC. SANS maintains strong collaborative relationships with these entities, ensuring its training remains aligned with real-world operational needs and emerging threats. 1.5 Furthermore, SANS courses are closely aligned with globally recognised frameworks such as the NIST Cybersecurity Framework and MITRE ATT&CK, ensuring that learners gain skills that are directly applicable to compliance, threat detection, and operational readiness. This alignment enhances the relevance and applicability of the training in both strategic and technical contexts, supporting organisations in meeting regulatory requirements and strengthening their cyber resilience. Further information and the tender documents can be downloaded from the following link. https://health-family.force.com/s/Welcome https://atamis-1928--prospend.vf.force.com/apex/CS_ContractPage?filters=&page=1&Preview=Yes&searchStr=&SearchType=Projects&sortStr=Alphabetical&uid=a07Sr00000b2IA4IAM&sfdcIFrameOrigin=https%3A%2F%2Fatamis-1928.lightning.force.com ### Lot Information Lot 1 Renewal: The contract can be extended for a further 12 months at a cost of 250,000 GDB. ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/045658-2025 | | Notice type | UK4 - Tender Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Open | | Procurement method details | Below threshold - open competition | | Tender suitability | SME, VCSE | | Awardee scale | Not specified | | All stages | Tender | ## Dates | Field | Value | | --- | --- | | Publication date | 4 Aug 2025 | | Submission deadline | 22 Aug 2025 | | Future notice date | Not specified | | Award date | Not specified | | Contract period | 18 Sep 2025 - 31 Mar 2026 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £500,000 | | Lots value | £500,000 | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Active | | Lots status | Active | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | NHS ENGLAND | | Locality | LONDON | | Post town | South East London | | Postcode | SE1 8UG | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI4 Inner London - East | | ITL 3 | TLI45 Lambeth | | Local authority | Lambeth | | Electoral ward | Waterloo & South Bank | | Westminster constituency | Vauxhall and Camberwell Green | | Delivery location | Not specified | ## CPV Codes ### Divisions - 80 - Education and training services ### Codes - 80000000 - Education and training services ## Release History - 4 Aug 2025 at 13:04 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/045658-2025 ## Documents - https://www.find-tender.service.gov.uk/Notice/045658-2025 4th August 2025 - Tender notice on Find a Tender ## Notice URLs - https://atamis-1928--prospend.vf.force.com/apex/CS_ContractPage?filters=&page=1&Preview=Yes&searchStr=&SearchType=Projects&sortStr=Alphabetical&uid=a07Sr00000b2IA4IAM&sfdcIFrameOrigin=https%3A%2F%2Fatamis-1928.lightning.force.com - https://health-family.force.com/s/Welcome - https://health-family.force.com/s/Welcomehttps://atamis-1928--prospend.vf.force.com/apex/CS_ContractPage?filters=&page=1&Preview=Yes&searchStr=&SearchType=Projects&sortStr=Alphabetical&uid=a07Sr00000b2IA4IAM&sfdcIFrameOrigin=https%3A%2F%2Fatamis-1928.lightning.force.com - https://www.england.nhs.uk/ - https://www.legislation.gov.uk/ukpga/2023/54/contents ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-056c50. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-056c50.json.