Blog/How to Win IT Contracts with Public Sector

How to Win IT Contracts with Public Sector

UK public sector IT procurement exceeds £20 billion annually — covering cloud software, digital delivery, infrastructure, and managed services. Here is a complete guide to the best routes, key accreditations, and how to win technology contracts with government.

Published by PSIP·March 2026·12 min read·Last updated: March 2026

Key fact: UK public sector IT and digital procurement exceeds £20 billion annually. Central government, NHS, local government, police, and education all have significant and growing technology budgets. The primary procurement routes — G-Cloud, Digital Outcomes, and open tender via Find a Tender — are all accessible to SMEs and specialists, not just large systems integrators.

The three main routes to public sector IT contracts

☁️

G-Cloud

For cloud software, hosting, and managed services. Buyers browse a catalogue and purchase directly — no competition for straightforward requirements.

Speed: Days to weeks

Entry barrier: Low — open application annually

💻

Digital Outcomes

For digital delivery teams and specialists. Buyers post specific requirements and run mini-competitions among approved suppliers.

Speed: 2-6 weeks

Entry barrier: Low — open application periodically

📋

Open tender

For larger IT programmes, infrastructure, and specialist requirements not covered by frameworks. Published on Find a Tender.

Speed: 3-6 months

Entry barrier: None — any supplier can respond

Key IT frameworks

G-Cloud 14

RM1557.14

Primary route for cloud software, hosting, and support. Buyers browse catalogue and purchase directly. Essential for SaaS products.

Best for: Cloud software, hosting, managed services

Digital Outcomes and Specialists 6

RM1043.8

Digital delivery teams and specialists. Buyers post requirements and run mini-competitions. Fast and accessible for digital agencies.

Best for: Development teams, UX, user research, delivery management

Technology Products and Associated Services 2

RM6098

Hardware, software licences, and associated services for public sector. Includes end-user devices, networking, and security products.

Best for: Hardware, software licences, infrastructure products

Network Services 3

RM6116

Wide area networks, internet access, and connectivity services. Used by central government and wider public sector.

Best for: Connectivity, WAN, internet services, SD-WAN

Back Office Software 2

RM6285

Enterprise software including ERP, HR, finance, and asset management systems for public sector organisations.

Best for: ERP, HR software, finance systems, asset management

Digital Specialists and Programmes

RM6263

Specialist digital professionals and programme delivery teams for complex digital transformation programmes.

Best for: Large digital transformation programmes, specialist skills

Essential accreditations for IT suppliers

Cyber Essentials

Required

Mandatory for central government IT contracts and increasingly required elsewhere. Obtain before bidding.

Cyber Essentials Plus

Required for higher-risk IT contracts involving sensitive data. Independently verified version of Cyber Essentials.

ISO 27001

Information security management. Required for larger IT contracts and those involving personal or sensitive data.

ISO 9001

Quality management. Expected for most professional services elements of IT contracts.

NHS DSPT

Required for IT suppliers handling NHS patient data. Annual submission.

NCSC assured service

NCSC assurance schemes for specific security products and services. Valuable differentiator for cybersecurity suppliers.

CPV codes for IT procurement

72000000IT services: consulting, software, internet and support
72100000Hardware consultancy services
72200000Software programming and consultancy services
72212000Application software development
72250000System and support services
72261000Software support services
72263000Software implementation services
72267000Software maintenance and repair
72300000Data services
72317000Data storage services
72400000Internet services
72415000Internet hosting services
72500000Computer-related services
48000000Software packages and information systems
48200000Networking, internet and intranet software
48600000Database and operating software
30000000Office and computing machinery (hardware)
64200000Telecommunications services

Growing IT procurement categories

AI and machine learning
Cybersecurity and SOC
Cloud migration
Legacy system modernisation
Data analytics and BI
Digital identity
IoT and smart building
DevSecOps and automation
Low-code platforms
API management
Robotic process automation
Quantum computing readiness

Frequently asked questions

What is the best route to win public sector IT contracts?

For cloud software and services, G-Cloud is the primary route — buyers browse the catalogue and purchase directly. For digital project delivery teams, Digital Outcomes and Specialists (DOS) is most efficient. For larger IT programmes, open tender via Find a Tender is common. Getting on G-Cloud first is the recommended starting point for most IT suppliers.

Do I need Cyber Essentials to win public sector IT contracts?

Yes. Cyber Essentials is mandatory for central government IT contracts and increasingly required across NHS, local government, and defence. Cyber Essentials Plus (independently verified) is required for higher-risk contracts. Obtain it before bidding — it takes 2-4 weeks and costs £300-600.

What CPV codes should I use for IT tenders?

Key CPV codes for IT include 72000000 (IT services), 48000000 (Software), 72200000 (Software programming and consultancy), 72400000 (Internet services), 72500000 (Computer-related services), and 64200000 (Telecommunications). Use parent codes to capture all subcategory tenders.

Is G-Cloud suitable for all IT suppliers?

G-Cloud is specifically for cloud-based services — SaaS, PaaS, and IaaS. If your product is not cloud-delivered, G-Cloud is not the right route. On-premise software, professional services without a cloud component, and hardware are not suitable for G-Cloud and must use open tender or other frameworks.

How does public sector IT procurement differ from commercial IT sales?

Public sector IT procurement is more structured and transparent than commercial sales. Buyers must evaluate against published criteria, run formal competitions for above-threshold purchases, and publish their decisions. Building relationships is still important but cannot replace a strong formal proposal. Procurement timelines are longer — typically 3-6 months for above-threshold contracts.

What is the NHS DSPT and why does it matter for IT suppliers?

The NHS Data Security and Protection Toolkit (DSPT) is a self-assessment framework that organisations must complete to demonstrate they handle NHS patient data securely. IT and digital suppliers working with NHS organisations are typically required to have a current DSPT submission or align with a trust's existing submission.

How do I find public sector IT tenders?

Search PSIP using CPV codes 72000000 (IT services) and 48000000 (Software) across all four UK procurement portals. Set up saved alerts with IT-relevant keywords. Monitor G-Cloud and DOS competition windows. Use buyer intelligence to identify which public bodies are actively procuring technology in your category.

Find public sector IT tenders

Search IT and technology opportunities using CPV codes 72000000 and 48000000 across all UK procurement portals. Set up alerts and never miss a relevant contract. 7-day free trial, no credit card required.

Start free trial