A Guide to Government Procurement for Cybersecurity Training and Workforce Upskilling
- Ian Makgill
- Business , Technology
- 02 Mar, 2026
- 03 Mins read
The global public sector is currently facing a critical cybersecurity skills shortage. With the UK cybersecurity market valued at approximately €14.28 billion and workforce upskilling requirements expanding at a rate of 14% annually, government agencies are shifting their focus from traditional theory-based learning toward technical validation and hands-on platforms. For companies providing browser-based labs, tactical simulations, and role-based learning paths, the procurement landscape offers significant opportunities to support national resilience.
Understanding the Buyer Landscape and Market Value
Procurement activity in the cybersecurity training sector is driven by a diverse range of buyers, from central government departments and defense agencies to local authorities and healthcare providers. In the UK, a €3.12 billion government commitment to national resilience has funneled significant resources into specialized training. Notable activity includes recent contract awards from the London Borough of Islington, which secured an Information Governance and Cybersecurity Training contract valued at £92,971, and the Royal Borough of Kingston upon Thames, which established a training agreement for 2025 to 2029 valued at £69,552.
On a larger scale, major technical requirements often emerge from the National Cyber Force and the Ministry of Defence. In North America, entities such as the NAVSUP Fleet Logistics Center and the Administrative Office of the U.S. Courts (AOUSC) are active buyers of cyber range services and simulation platforms. These organizations use hands-on training to prepare their teams for advanced persistent threats (APTs) and to fulfill mandatory security readiness testing.
Navigating CPV Codes for Technical Training
To find the most relevant opportunities on Open Opportunities, companies must understand Common Procurement Vocabulary (CPV) codes. These codes are the classification system used by public sector entities in the UK and EU to describe the subject of a contract. For the cybersecurity upskilling sector, four primary codes provide the highest signal for relevant tenders:
- 80533100 (Computer courses): This is the primary classification for technical modules and browser-based virtual labs.
- 80510000 (Specialist training services): Used when government departments seek deep-dive technical expertise for specific roles like SOC Analysts or Red Team specialists.
- 48931000 (Training software package): This code focuses on the delivery tool or SaaS platform rather than instructional content alone.
- 80420000 (E-learning services): A broader code often used for scalable, cloud-based education solutions that support large, geographically dispersed workforces.
Other relevant but broader codes include 72600000 for computer support and consultancy services, which often covers managed services like Capture the Flag events, and 80570000 for personal development training services, which targets general workforce upskilling and career pathway development.
Frameworks and Strategic Procurement Routes
Accessing government contracts often requires presence on specific procurement frameworks. These agreements allow public sector buyers to purchase services without running a full, standalone tender process every time. In the UK, the G-Cloud framework and the Spark Dynamic Purchasing System (DPS) administered by the Crown Commercial Service are vital for software-driven training providers. Furthermore, the Learning and Training Services DPS (RM6219) is frequently used for long-term workforce transformation projects.
Strategic initiatives like the GovAssure framework are also driving demand for interactive Red and Blue team training pathways. These frameworks prioritize vendors who can demonstrate alignment with recognized industry standards, such as the Skills Framework for the Information Age (SFIA) or the UK National Cyber Strategy.
Legislative Shifts and Social Value Requirements
The regulatory environment for public procurement is currently evolving. In the UK, the transition to the Procurement Act 2023 signifies a shift from the Most Economically Advantageous Tender (MEAT) to the Most Advantageous Tender (MAT). This change allows buyers to place greater weight on technical quality and hands-on capability rather than just the lowest cost.
Additionally, Procurement Policy Note (PPN) 06/20 remains a mandatory requirement, meaning that at least 10% of a tender’s score is typically dedicated to social value. Companies in the training sector are uniquely positioned to score well here by demonstrating how their platforms bridge the digital skills gap and provide career opportunities in underrepresented regions
