---
title: "SANS Training 26/27"
ocid: "ocds-h6vhtk-06f5b1"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06f5b1"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-06f5b1.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-06f5b1.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "NHS England"
published: "2026-09-09"
---

# SANS Training 26/27

Buyer: NHS England  
Current stage: Award  
OCID: ocds-h6vhtk-06f5b1

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06f5b1)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-06f5b1.json)

## Summary

NHS England procured specialist cyber training services for its Cyber Operations function. The requirement supports an established need for specialist training, the organisation’s cyber strategic risk and business plan, and its strategy to attract and retain cyber talent. It is also intended to help NHS England reduce reliance on contractors by developing the skills of its own staff. The service is categorised as education and training, specifically cyber operations training delivered through the SANS training offer. The buying organisation is NHS England, the central public authority responsible for the procurement. The requirement relates to NHS England’s internal Cyber Operations workforce and supports staff capability development rather than the supply of physical goods or construction work.

The procurement has been completed and awarded through a below-threshold direct award without competition under the light-touch regime. The contract was awarded to SANS Training UK Limited on 9 September 2026. The contract was signed on the same date and is active from 9 September 2026 to 31 March 2027. Its value is £400,000 excluding VAT and £480,000 including VAT. The procurement comprises one completed lot covering the cyber training service. NHS England’s published rationale is that Cyber Operations has a well-established need for specialist training, linked to strategic risk, its business plan, its cyber talent strategy and the aim of reducing contractor reliance through staff development. The award is active and the contract remains in force for the stated period.

This award shows sustained NHS England demand for specialist cyber operations training aimed at building internal capability and retaining cyber talent. Suppliers well placed for a comparable requirement would need credible expertise in advanced cyber training, the capacity to support an established operational security function, and a structured offer that develops employees rather than simply supplying short-term contractors. Relevant experience would include delivering specialist training to cyber professionals, aligning programmes with organisational risk and workforce strategies, and helping a public-sector team reduce dependence on external contractors. The selected supplier is a large training business, indicating that the requirement can involve substantial delivery capacity and an established specialist training operation. Providers with a focused cyber curriculum and evidence of workforce development outcomes would be the closest competitors when this type of need is next considered.

## Notice

Compliant below threshold direct award Cyber Operations (CO) have a well established need for specialist cyber training, which we deliver through SANS. It has been well documented within the CO strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on CO reducing reliance on contractors by developing our own staff.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/085406-2026 |
| Notice type | UK7 - Contract Details Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Below threshold - without competition |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 9 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 9 Sep 2026 - 31 Mar 2027 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £400,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NHS England |
| Locality | LONDON |
| Postcode area | South East London |
| Postcode | SE1 8UG |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI45 Lambeth |
| Local authority | Lambeth |
| Electoral ward | Waterloo & South Bank |
| Westminster constituency | Vauxhall and Camberwell Green |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | SANS TRAINING - UK LIMITED |

## CPV Codes

### Divisions

- 80 - Education and training services

### Codes

- 80000000 - Education and training services

## Release History

- 9 Sep 2026 at 13:56 - Award - UK7 - Contract Details Notice - https://www.find-tender.service.gov.uk/Notice/085406-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/085406-2026
  9th September 2026 - Contract details notice on Find a Tender

## Notice URLs

- https://www.england.nhs.uk/
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06f5b1. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-06f5b1.json.