SANS Training · UK public procurement notice

NHS England seeks to commission SANS Cybersecurity training. Procured under the education and training light touch regime.

The contract value will be 250,000 GDB for the initial term until 31/03/2026. There will be an optional extension to 31/03/2027, subject to need and available budget. Total contract value of 500,000 GBP.

1.1 NHS England’s Cyber Operations (CO) provides cyber security expertise both internally to NHS England and to the wider health and care system. Supplying the system with services and expertise to develop their capability in mitigating cyber security risks, therefore preventing impact to patient outcomes.

1.2 Cyber security is a very specialist field; it is necessary for CO staff to obtain industry recognised expert technical training and certifications. Achieving such specialist training and certifications will ensure that each member maintains an adequate level of current knowledge and proficiency in their respective field and more importantly, this will support the CO’s Retention Strategy, provide clear objectives for both the NHS England cyber security profession and its members.

1.3 Cyber Operations (CO) have a well-established need for specialist cyber training, which we deliver through SANS. It has been well documented within the strategic risk, our Business Plan, the Attract and Retain Talent strategy for cyber, and in the submissions on us reducing reliance on contractors by developing our own staff. Having suitable skilled, trained cyber professionals is a key control against the NHS England and System cyber risks, which are amongst the highest on respective risk registers.

1.4 SANS is widely recognised and trusted across both government and industry sectors, making it a highly credible choice for cyber security training. It is actively used by key government departments such as the Ministry of Defence (MOD) and HM Revenue & Customs (HMRC), as well as leading private sector organisations like PwC. SANS maintains strong collaborative relationships with these entities, ensuring its training remains aligned with real-world operational needs and emerging threats.

1.5 Furthermore, SANS courses are closely aligned with globally recognised frameworks such as the NIST Cybersecurity Framework and MITRE ATT&CK, ensuring that learners gain skills that are directly applicable to compliance, threat detection, and operational readiness. This alignment enhances the relevance and applicability of the training in both strategic and technical contexts, supporting organisations in meeting regulatory requirements and strengthening their cyber resilience.

Further information and the tender documents can be downloaded from the following link.

health-family.force.com/s/Welcome ↗

atamis-1928--prospend.vf.force.com/apex/CS_ContractPage ↗