What Is G-Cloud 15 A Guide to Buying Cyber Security Services for the UK Public Sector

f you're responsible for cyber security in a public-sector organisation, the challenge is probably familiar: cyber attacks keep evolving, budgets remain constrained, and teams are expected to deliver more with less while still maintaining compliance, resilience, and public confidence.

At the same time, organisations must meet regulatory obligations, protect critical services, and make procurement decisions that hold up under scrutiny. Finding the right cyber security partner should not make that work harder.

That is where G-Cloud 15 comes in.

The latest UK Government framework is intended to reduce procurement friction by giving public sector organisations access to approved suppliers and to cloud and cyber security services through a trusted route to market. Whether the goal is better visibility, stronger security operations, faster cyber incident response, or support with new regulatory duties, G-Cloud 15 offers a simpler route to the help you need.

As a supplier on both G-Cloud 14 and G-Cloud 15, Sapphire continues to support public sector organisations with practical, expert-led cyber security services that help reduce risk and improve resilience.

What Is G-Cloud 15?

G-Cloud 15 is the latest iteration of the UK Government's cloud procurement framework. It enables public sector organisations to buy cloud-based technology and support services from pre-approved suppliers, which reduces complexity and shortens the time often lost in conventional procurement cycles.

The framework is available to organisations across the public sector, including:

• Central government

• Local authorities

• NHS organisations

• Educational institutions

• Emergency services

• Charities and non-profit organisations

G-Cloud 15 replaces G-Cloud 14 and introduces an updated, more flexible open framework model under the Procurement Act 2023. In practice, that means buyers can choose from a wider range of suppliers, reach specialist services more easily, and still keep procurement control intact.

In practical terms, it gives public sector teams a faster and less burdensome way to access the technology and expertise they need.

Why Cyber Security Remains a Top Priority

The cyber threat landscape has changed quickly over the last few years.

Ransomware attacks continue to disrupt organisations, supply chain risk is increasing, and the rapid adoption of AI is creating both opportunities and new security challenges. Public sector organisations face extra pressure because they often hold large volumes of sensitive data and deliver services that communities depend on every day.

Cyber security is therefore not merely an IT concern; it is an operational resilience issue that affects the organisation as a whole.

Teams need confidence that they can detect threats quickly, respond effectively to incidents, meet regulatory requirements, and continue delivering essential services when the situation becomes difficult.

That is why many public sector organisations are looking beyond point solutions and investing in broader cyber resilience programmes that combine technology, specialist knowledge, and ongoing support.

What's New in G-Cloud 15?

Building on earlier frameworks, G-Cloud 15 introduces several changes designed to benefit both buyers and suppliers. It consolidates and expands cloud service procurement options while creating a more flexible structure for organisations that need specialist services.

For public sector buyers, this means:

• Faster access to approved suppliers

• Greater flexibility when procuring services

• Increased supplier choice

• Easier access to specialist cyber security expertise

• Greater confidence through enhanced supplier assessments

  
  

Ultimately, G-Cloud 15 helps organisations move more quickly when addressing cyber security priorities without weakening procurement compliance.

Sapphire's Cyber Security Services Available Through G-Cloud 15

Through G-Cloud 15, Sapphire offers a broad portfolio of cyber security services designed to help organisations prevent, detect, respond to, and recover from cyber threats.

Managed Security Services

Organisations that want better threat visibility and stronger security operations can access services including:

• Security Operations Centre (SOC)

• Managed Detection and Response (MDR)

• Managed XDR for Microsoft

• Managed SIEM

• Managed Threat Intelligence

• Managed Exposure Reduction

• Managed Ransomware Prevention

• Patch Management

Cyber Security Consultancy

For organisations that need stronger foundations and support with changing regulation, Sapphire also provides:

• Cyber Security Consultancy

• Cyber Security Strategy

• ISO 27001 Consultancy

• ISO 42001 AI Readiness Assessment

• NIS2 Support

• GovAssure Consultancy Support

• Business Uptime and Disaster Recovery Consultancy

Security Testing and Assurance

Understanding exposure is a key part of any cyber resilience programme. Services available through G-Cloud 15 include:

• Penetration Testing

• Threat-Led Penetration Testing

• Exposure Assessments

• Advanced Attack Simulation

• Application Security Testing

• Cyber Essentials and Cyber Essentials Plus Audits

• Technical Security Reviews

Incident Response and Recovery

When organisations need help during or after an event, Sapphire provides:

• Cyber Incident Response

• Digital Computer Forensics

• Ransomware Simulation

• Security Review Services

From G-Cloud 14 to G-Cloud 15

When Sapphire joined G-Cloud 14, the aim was to help public sector teams reach trusted cyber security expertise through a simpler procurement route.

Since then, the threat picture has become more demanding. Security teams now deal with sophisticated ransomware campaigns, third-party and supply-chain risk, cloud security concerns, and the opportunities and risks tied to AI adoption.

As those pressures have intensified, Sapphire has expanded its service portfolio.

Our G-Cloud 15 offer therefore reflects changing demand for cyber security consultancy, managed security services, compliance support, cyber resilience solutions, and incident response capability.

Why Work With Sapphire?

Technology alone does not stop cyber attacks.

Resilience depends on specialist knowledge, disciplined processes, and a partner that understands your goals, constraints, and challenges.

At Sapphire, we work alongside organisations to strengthen security, reduce risk, and improve resilience against changing threats. Whether the need is strategic guidance, managed detection and response services, penetration testing, compliance support, or incident response expertise, our focus is always on delivering practical outcomes with measurable value.

We understand that cyber security is ultimately about protecting people, services, and trust.

Speak to Sapphire About G-Cloud 15

If your organisation is exploring cyber security services through G-Cloud 15, we would be glad to help.

Whether you want to enhance your Security Operations Centre capability, implement Managed Detection and Response, undertake penetration testing, improve cyber resilience, or strengthen compliance with frameworks such as ISO 27001, NIS2, or ISO 42001, our team can help you identify the right approach.

Get in touch with Sapphire today to learn how our G-Cloud 15 cyber security services can help your organisation stay secure, resilient, and ready for what comes next.

Q&A

Question: Who can use G-Cloud 15 to buy cyber security services?

Short answer: G-Cloud 15 is open to a wide range of UK public sector organisations, including central government, local authorities, NHS organisations, educational institutions, emergency services, charities, and non-profit organisations. It gives them a procurement route for buying cloud-based technology, support, and cyber security services from pre-approved suppliers.

Question: How does G-Cloud 15 help public sector teams procure cyber security support more efficiently?

Short answer: The framework reduces complexity and delay by placing buyers in front of approved suppliers through a trusted government process. It also offers greater flexibility, wider supplier choice, easier access to specialist services, and stronger supplier assessments, so organisations can address cyber security priorities without losing procurement compliance.

Question: What types of cyber security services does Sapphire offer through G-Cloud 15?

Short answer: Sapphire's G-Cloud 15 services cover managed security services, cyber security consultancy, security testing and assurance, and incident response and recovery. That includes SOC, MDR, Managed SIEM, exposure management, cyber security strategy, ISO 27001 consultancy, ISO 42001 AI readiness assessment, penetration testing, Cyber Essentials audits, cyber incident response, and digital computer forensics.

Question: Why is cyber security described as a business resilience issue rather than just an IT issue?

Short answer: Public sector organisations often hold sensitive data and deliver critical services that communities depend on. If a ransomware attack, supply-chain compromise, or cloud security failure disrupts those services, the impact goes beyond technology and can affect operations, service delivery, and public confidence. That is why cyber security supports the resilience of the whole organisation.

Question: How has Sapphire's offering changed from G-Cloud 14 to G-Cloud 15?

Short answer: Sapphire's G-Cloud 15 offer reflects the changing needs of public sector organisations. As ransomware, supply-chain risk, cloud security issues, and AI-related risks have grown, Sapphire has expanded its portfolio to include a broader mix of cyber security consultancy, managed security services, compliance support, cyber resilience solutions, and incident response.