Notice Information
Notice Title
Cyber Security Support Services
Notice Description
Moyle Interconnector Limited ("Moyle") currently contracts with Siemens Energy Limited ("Siemens") to provide Long Term Maintenance Agreement ("LTMA") services for their two convertor station sites in Northern Ireland and Scotland, which were originally designed, constructed and commissioned by Siemens The Cyber Security Support Services ("CSSS") are required to enhance the cyber security of the Moyle control system. The control system directly operates the converter valves and associated equipment and is therefore critical to the safe and reliable operation of the interconnector. The CSSS will provide enhanced cyber security protections to reduce the likelihood and potential impact of cyber security incidents affecting the control system. The services will also support Moyle in fulfilling its obligations as an Operator of Essential Services under the NIS Regulations. It is proposed to extend the scope of services provided under the existing LTMA contract to include the CSSS and the justification for this is outlined in the sections below.
Lot Information
Lot 1
The provision of these services will require an amendment to the current LTMA to incorporate the CSSS. This will amend the scope of the LTMA, but not the term which is coterminous with the life of the control system assets. The nature of the services that are required to be procured directly from Siemens Energy are defined in the amended agreement as 'Regular Services': The Regular Services include: * Vulnerability management for IT; * Security patch management for IT; * User management; * Disaster recovery; * Licence management; * Obsolescence management. Moyle considers that the amendment to the current contract benefits from the exemption outlined in Regulation 88(1)(b) of the Utilities Contracts Regulations. This exemption allows for the non-competitive procurement of additional services that have become necessary, where a change of contractor cannot be made for economic or technical reasons and where such a change would cause significant inconvenience or duplication of costs.
Procurement Information
Award of a contract without prior publication of a call for competition in the cases listed below The procurement falls outside the scope of application of the regulations. Explanation: Moyle considers that the variation benefits from the exemption in Reg. 88(1)(b) UCR, for the reasons outlined below. We wish to engage Siemens for the services outlined because there is a requirement to have a single point of informed contact for any cyber issues. The Interconnector was designed and constructed by Siemens in 2001; the control system was subsequently refurbished by Siemens in 2022. The interconnector is a complex asset, with many interrelated electrical, mechanical, electronic and software components and systems. Third parties may not understand the risk to the converter station primary equipment; Siemens do understand all potential interactions and so are better placed to assess the impact of any cyber attack or threat. The control system integrates directly to the converter station valves and associated equipment. The system comprises a Human-Machine Interface, and programmable logic controllers. These are supported by a sophisticated internal communications infrastructure. The primary (high voltage) equipment is bespoke to Siemens, and uses proprietary light triggered thyristors; the control system (actually a system of systems) is designed to safely and seamlessly integrate with, and operate, this primary equipment. Both the primary equipment and control system contain Siemens intellectual property. This is not a standard IT based infrastructure; the HVDC control engineering and software is intrinsically embedded within the control system itself. Given the complexity involved and the overall design, it would be impracticable for a third party to understand the implications of either cyber protection or risk. Any cyber issue (threat, asset failure or other) could impact the primary operation of the interconnector. In the event of a cyberattack, only Siemens have the end-to-end knowledge to assess and address any such issue and can understand the full impact on the asset. Similarly, where cyber mitigations are identified, only Siemens can confirm that these mitigations can be successfully applied without causing undue effects. Given our primary focus on safe and reliable operation, having a third party in that loop would bring, at best, inefficiency in addressing any issue; at worst, plant would potentially be at risk. For this reason, it was determined that sourcing these cyber services from Siemens would offer the most technically secure solution. Given Moyle's status as Critical National Infrastructure, and the fact that availability of the entire system is fundamental to ensuring the physical and commercial benefits to the Transmission System Operators on either end of the link, these factors outweigh any potential commercial benefit in tendering these services on the open market.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-0670b4
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/055102-2026
- Current Stage
- Award
- All Stages
- Award
Procurement Classification
- Notice Type
- Award Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Limited
- Procurement Method Details
- Award procedure without prior publication of a call for competition
- Tender Suitability
- Not specified
- Awardee Scale
- Large
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72000000 - IT services: consulting, software development, Internet and support
Notice Value(s)
- Tender Value
- Not specified
- Lots Value
- Not specified
- Awards Value
- Not specified
- Contracts Value
- £400,000 £100K-£500K
Notice Dates
- Publication Date
- 11 Jun 20261 months ago
- Submission Deadline
- Not specified
- Future Notice Date
- Not specified
- Award Date
- 20 Mar 20264 months ago
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Cancelled
- Awards Status
- Active
- Contracts Status
- Active
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- MOYLE INTERCONNECTOR LIMITED
- Contact Name
- Available with D3 Tenders Premium →
- Contact Email
- Available with D3 Tenders Premium →
- Contact Phone
- Available with D3 Tenders Premium →
Buyer Location
- Locality
- 85 ORMEAU ROAD
- Postcode
- BT7 1SH
- Post Town
- Northern Ireland
- Country
- Northern Ireland
-
- Major Region (ITL 1)
- TLN Northern Ireland
- Basic Region (ITL 2)
- TLN0 Northern Ireland
- Small Region (ITL 3)
- TLN06 Belfast
- Delivery Location
- TLN Northern Ireland
-
- Local Authority
- Belfast
- Electoral Ward
- Central
- Westminster Constituency
- Belfast South and Mid Down
Further Information
Notice URLs
Open Contracting Data Standard (OCDS)
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-0670b4-2026-06-11T11:35:47+01:00",
"date": "2026-06-11T11:35:47+01:00",
"ocid": "ocds-h6vhtk-0670b4",
"description": "Information on the value of the contract: Total value of the amended services in the contract for the remaining term of the LTMA is cPS600k pa. Date of conclusion of the contract: Existing term is coterminous with the life of the control system assets.",
"initiationType": "tender",
"tender": {
"id": "ocds-h6vhtk-0670b4",
"legalBasis": {
"id": "32014L0025",
"scheme": "CELEX"
},
"title": "Cyber Security Support Services",
"status": "complete",
"classification": {
"scheme": "CPV",
"id": "72000000",
"description": "IT services: consulting, software development, Internet and support"
},
"mainProcurementCategory": "services",
"description": "Moyle Interconnector Limited (\"Moyle\") currently contracts with Siemens Energy Limited (\"Siemens\") to provide Long Term Maintenance Agreement (\"LTMA\") services for their two convertor station sites in Northern Ireland and Scotland, which were originally designed, constructed and commissioned by Siemens The Cyber Security Support Services (\"CSSS\") are required to enhance the cyber security of the Moyle control system. The control system directly operates the converter valves and associated equipment and is therefore critical to the safe and reliable operation of the interconnector. The CSSS will provide enhanced cyber security protections to reduce the likelihood and potential impact of cyber security incidents affecting the control system. The services will also support Moyle in fulfilling its obligations as an Operator of Essential Services under the NIS Regulations. It is proposed to extend the scope of services provided under the existing LTMA contract to include the CSSS and the justification for this is outlined in the sections below.",
"lots": [
{
"id": "1",
"description": "The provision of these services will require an amendment to the current LTMA to incorporate the CSSS. This will amend the scope of the LTMA, but not the term which is coterminous with the life of the control system assets. The nature of the services that are required to be procured directly from Siemens Energy are defined in the amended agreement as 'Regular Services': The Regular Services include: * Vulnerability management for IT; * Security patch management for IT; * User management; * Disaster recovery; * Licence management; * Obsolescence management. Moyle considers that the amendment to the current contract benefits from the exemption outlined in Regulation 88(1)(b) of the Utilities Contracts Regulations. This exemption allows for the non-competitive procurement of additional services that have become necessary, where a change of contractor cannot be made for economic or technical reasons and where such a change would cause significant inconvenience or duplication of costs.",
"hasOptions": false,
"status": "cancelled"
}
],
"items": [
{
"id": "1",
"deliveryAddresses": [
{
"region": "UKN"
},
{
"region": "UKN"
}
],
"relatedLot": "1"
}
],
"procurementMethod": "limited",
"procurementMethodDetails": "Award procedure without prior publication of a call for competition",
"procurementMethodRationaleClassifications": [
{
"id": "D_OUTSIDE_SCOPE",
"scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
"description": "The procurement falls outside the scope of application of the directive"
},
{
"id": "D_TECHNICAL",
"scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
"description": "The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons"
}
],
"procurementMethodRationale": "Award of a contract without prior publication of a call for competition in the cases listed below The procurement falls outside the scope of application of the regulations. Explanation: Moyle considers that the variation benefits from the exemption in Reg. 88(1)(b) UCR, for the reasons outlined below. We wish to engage Siemens for the services outlined because there is a requirement to have a single point of informed contact for any cyber issues. The Interconnector was designed and constructed by Siemens in 2001; the control system was subsequently refurbished by Siemens in 2022. The interconnector is a complex asset, with many interrelated electrical, mechanical, electronic and software components and systems. Third parties may not understand the risk to the converter station primary equipment; Siemens do understand all potential interactions and so are better placed to assess the impact of any cyber attack or threat. The control system integrates directly to the converter station valves and associated equipment. The system comprises a Human-Machine Interface, and programmable logic controllers. These are supported by a sophisticated internal communications infrastructure. The primary (high voltage) equipment is bespoke to Siemens, and uses proprietary light triggered thyristors; the control system (actually a system of systems) is designed to safely and seamlessly integrate with, and operate, this primary equipment. Both the primary equipment and control system contain Siemens intellectual property. This is not a standard IT based infrastructure; the HVDC control engineering and software is intrinsically embedded within the control system itself. Given the complexity involved and the overall design, it would be impracticable for a third party to understand the implications of either cyber protection or risk. Any cyber issue (threat, asset failure or other) could impact the primary operation of the interconnector. In the event of a cyberattack, only Siemens have the end-to-end knowledge to assess and address any such issue and can understand the full impact on the asset. Similarly, where cyber mitigations are identified, only Siemens can confirm that these mitigations can be successfully applied without causing undue effects. Given our primary focus on safe and reliable operation, having a third party in that loop would bring, at best, inefficiency in addressing any issue; at worst, plant would potentially be at risk. For this reason, it was determined that sourcing these cyber services from Siemens would offer the most technically secure solution. Given Moyle's status as Critical National Infrastructure, and the fact that availability of the entire system is fundamental to ensuring the physical and commercial benefits to the Transmission System Operators on either end of the link, these factors outweigh any potential commercial benefit in tendering these services on the open market."
},
"awards": [
{
"id": "025933-2026-1",
"relatedLots": [
"1"
],
"status": "active",
"hasSubcontracting": true,
"subcontracting": {
"description": "Part of the contract is likely to be subcontracted. The total value/proportion of the contract that is likely to be subcontracted is not known at this stage."
},
"suppliers": [
{
"id": "GB-COH-00631825",
"name": "Siemens Energy Limited"
}
]
},
{
"id": "055102-2026-1",
"relatedLots": [
"1"
],
"status": "active",
"suppliers": [
{
"id": "GB-COH-00631825",
"name": "Siemens Energy Limited"
}
]
}
],
"parties": [
{
"id": "GB-COH-NI036562",
"name": "MOYLE INTERCONNECTOR LIMITED",
"identifier": {
"legalName": "MOYLE INTERCONNECTOR LIMITED",
"id": "NI036562",
"scheme": "GB-COH"
},
"address": {
"streetAddress": "First Floor",
"locality": "85 Ormeau Road",
"region": "UKN06",
"postalCode": "BT71SH",
"countryName": "United Kingdom"
},
"contactPoint": {
"name": "Hannah Keery",
"email": "hannah.keery@mutual-energy.com"
},
"roles": [
"buyer"
],
"details": {
"url": "https://www.mutual-energy.com/",
"classifications": [
{
"id": "ELECTRICITY",
"scheme": "TED_CE_ACTIVITY",
"description": "Electricity"
}
]
}
},
{
"id": "GB-COH-00631825",
"name": "Siemens Energy Limited",
"identifier": {
"legalName": "Siemens Energy Limited",
"id": "00631825",
"scheme": "GB-COH"
},
"address": {
"streetAddress": "C A Parsons Works, Shields Road",
"locality": "Newcastle",
"region": "UK",
"postalCode": "NE6 2YL",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-FTS-25662",
"name": "High Court of Northern Ireland",
"identifier": {
"legalName": "High Court of Northern Ireland"
},
"address": {
"locality": "Belfast",
"countryName": "United Kingdom"
},
"roles": [
"reviewBody"
]
}
],
"buyer": {
"id": "GB-COH-NI036562",
"name": "MOYLE INTERCONNECTOR LIMITED"
},
"contracts": [
{
"id": "025933-2026-1",
"awardID": "025933-2026-1",
"status": "active",
"value": {
"amount": 400000,
"currency": "GBP"
},
"dateSigned": "2026-03-20T00:00:00Z"
},
{
"id": "055102-2026-1",
"awardID": "055102-2026-1",
"status": "active",
"value": {
"amount": 400000,
"currency": "GBP"
},
"dateSigned": "2026-04-03T00:00:00+01:00"
}
],
"language": "en"
}