What Is G-Cloud 15? A Guide to Buying Cyber Security Services for the UK Public Sector
If you're responsible for cyber security in a public sector organisation, you'll know the challenge all too well.
Cyber threats continue to evolve, budgets are under pressure, and teams are being asked to do more with less. At the same time, organisations need to meet compliance requirements, improve resilience, and protect critical services that people rely on every day. Finding the right cyber security partner shouldn't make that job harder.
That's where G-Cloud 15 comes in.
The latest UK Government framework is designed to make it easier for public sector organisations to access approved suppliers and buy cloud and cyber security services through a trusted procurement route. Whether you're looking to improve visibility across your environment, strengthen your security operations, respond to a cyber incident, or prepare for new regulatory requirements, G-Cloud 15 offers a simpler path to finding the support you need.
As a supplier on both G-Cloud 14 and G-Cloud 15, Sapphire continues to support public sector organisations with practical, expert-led cyber security services that help reduce risk and improve cyber resilience.
What Is G-Cloud 15?
G-Cloud 15 is the latest iteration of the UK Government's cloud procurement framework. It enables public sector organisations to purchase cloud-based technology and support services from pre-approved suppliers, reducing the complexity and time often associated with traditional procurement processes.
The framework is available to organisations across the public sector, including:
Central government
Local authorities
NHS organisations
Educational institutions
Emergency services
Charities and non-profit organisations
G-Cloud 15 replaces G-Cloud 14 and introduces an updated framework designed to offer greater flexibility, a wider choice of suppliers, and easier access to specialist services. It also operates under the Procurement Act 2023 and introduces a new open framework model.
In simple terms, it gives public sector teams a faster and more straightforward way to access the technology and expertise they need.
Why Cyber Security Remains a Top Priority
The cyber threat landscape has changed dramatically over the last few years.
Ransomware attacks continue to disrupt organisations, supply chain risks are increasing, and the rapid adoption of AI is creating both opportunities and new security challenges. Public sector organisations face additional pressure because they often manage large volumes of sensitive data and deliver services that communities depend on.
Cyber security is no longer just an IT issue. It's a business resilience issue.
Organisations need confidence that they can detect threats quickly, respond effectively to incidents, meet regulatory requirements, and continue delivering essential services when it matters most.
That's why many public sector organisations are looking beyond point solutions and investing in comprehensive cyber resilience programmes that combine technology, expertise, and ongoing support.
What's New in G-Cloud 15?
Building on previous frameworks, G-Cloud 15 introduces several changes designed to benefit both buyers and suppliers. It consolidates and expands cloud service procurement options while creating a more flexible structure for organisations looking to procure specialist services.
For public sector buyers, this means:
Faster access to approved suppliers
Greater flexibility when procuring services
Increased supplier choice
Easier access to specialist cyber security expertise
Greater confidence through enhanced supplier assessments
Ultimately, G-Cloud 15 helps organisations move more quickly when addressing cyber security priorities without compromising on procurement compliance.
Sapphire's Cyber Security Services Available Through G-Cloud 15
Through G-Cloud 15, Sapphire offers a wide range of cyber security services designed to help organisations prevent, detect, respond to and recover from cyber threats.
Managed Security Services
Organisations looking to improve threat visibility and strengthen security operations can access services including:
Security Operations Centre (SOC)
Managed Detection and Response (MDR)
Managed XDR for Microsoft
Managed SIEM
Managed Threat Intelligence
Managed Vulnerability Management
Managed Ransomware Prevention
Patch Management
Cyber Security Consultancy
For organisations looking to build stronger security foundations and meet evolving regulatory requirements, Sapphire also provides:
Cyber Security Consultancy
Cyber Security Strategy
ISO 27001 Consultancy
ISO 42001 AI Readiness Assessment
NIS2 Support
GovAssure Consultancy Support
Business Continuity and Disaster Recovery Consultancy
Security Testing and Assurance
Understanding your exposure is a critical part of any cyber resilience programme. Services available through G-Cloud 15 include:
Penetration Testing
Threat-Led Penetration Testing
Vulnerability Assessments
Advanced Attack Simulation
Application Security Testing
Cyber Essentials and Cyber Essentials Plus Audits
Technical Security Reviews
Incident Response and Recovery
When organisations need support responding to incidents, Sapphire provides:
Cyber Incident Response
Digital Computer Forensics
Ransomware Simulation
Security Review Services
From G-Cloud 14 to G-Cloud 15
When Sapphire joined G-Cloud 14, the focus was on helping public sector organisations access trusted cyber security expertise through a simplified procurement route.
Since then, the challenges facing organisations have continued to evolve.
Today, security teams are addressing increasingly sophisticated ransomware campaigns, managing third-party and supply chain risk, securing cloud environments, and navigating the opportunities and risks associated with AI adoption.
As these challenges have grown, so has Sapphire's service portfolio.
Our G-Cloud 15 offering reflects the changing needs of public sector organisations, providing access to a broader range of cyber security consultancy, managed security services, compliance support, cyber resilience solutions, and incident response capabilities.
Why Work With Sapphire?
Technology alone doesn't stop cyber attacks.
Building resilience requires the right expertise, the right processes, and a trusted partner who understands your organisation's objectives and challenges.
At Sapphire, we work alongside organisations to strengthen security, reduce risk, and improve resilience against evolving cyber threats. Whether you need strategic guidance, managed detection and response services, penetration testing, compliance support, or incident response expertise, our focus is always on delivering practical outcomes that make a measurable difference.
We understand that cyber security is ultimately about protecting people, services and trust.
Speak to Sapphire About G-Cloud 15
If your organisation is exploring cyber security services through G-Cloud 15, we'd be happy to help.
Whether you're looking to enhance your Security Operations Centre capability, implement Managed Detection and Response, undertake penetration testing, improve cyber resilience, or strengthen compliance with frameworks such as ISO 27001, NIS2 or ISO 42001, our team can help you identify the right approach.
Get in touch with Sapphire today to learn how our G-Cloud 15 cyber security services can help your organisation stay secure, resilient and ready for whatever comes next.
