Provision of Cyber Security Services

Notice Information

Get alerts for notices like these

Notice Title

Notice Description

Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The proposed Framework Services Agreement will establish an SWR-owned contractual mechanism under which these integrated services can be managed, governed and aligned to support both operational continuity and future procurement planning. South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. Total contract value of approximately PS1.2 million.

Procurement Information

South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The Framework Services Agreement will encompass Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services, with an estimated total contract value of approximately PS1.2 million. SWR has determined that the proposed award satisfies the conditions set out in Schedule 5 of the Procurement Act 2023 relating to Additional or Repeat Goods, Services or Works. The services form part of SWR's existing cyber security architecture and operate as integrated and interdependent components of a single monitoring and response environment. A change of supplier would result in incompatibility with the existing solution and create disproportionate technical and operational difficulties in maintaining continuity of service. The proposed award will ensure continuity of critical cyber security capabilities whilst aligning the services within a single contractual framework and enabling future review of procurement options.

Notice Details

Get alerts for notices like these

Publication & Lifecycle

Open Contracting ID: ocds-h6vhtk-06b889
Publication Source: Find A Tender Service
Latest Notice: https://www.find-tender.service.gov.uk/Notice/057800-2026
Current Stage: Award
All Stages: Award

Procurement Classification

Notice Type: UK5 - Transparency Notice
Procurement Type: Framework
Procurement Category: Services
Procurement Method: Direct
Procurement Method Details: Direct award
Tender Suitability: Not specified
Awardee Scale: Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support

CPV Codes

48730000 - Security software package

48760000 - Virus protection software package

72212517 - IT software development services

72212730 - Security software development services

72260000 - Software-related services

Notice Value(s)

Tender Value: Not specified
Lots Value: Not specified
Awards Value: £1,221,192 £1M-£10M
Contracts Value: Not specified

Notice Dates

Publication Date: 18 Jun 20266 days ago
Submission Deadline: Not specified
Future Notice Date: Not specified
Award Date: 18 Jun 20266 days ago
Contract Period: 30 Jun 2026 - 31 Dec 2028 2-3 years
Recurrence: Not specified

Notice Status

Tender Status: Complete
Lots Status: Complete
Awards Status: Pending
Contracts Status: Not Specified

Buyer & Supplier

Get alerts for notices like these

Contracting Authority (Buyer)

Main Buyer: SOUTH WESTERN RAILWAY LIMITED
Contact Name: Available with D3 Tenders Premium →
Contact Email: Available with D3 Tenders Premium →
Contact Phone: Available with D3 Tenders Premium →

Buyer Location

Locality: LONDON
Postcode: SE1 9LQ
Post Town: South East London
Country: England
Major Region (ITL 1): TLI London
Basic Region (ITL 2): TLI4 Inner London - East
Small Region (ITL 3): TLI44 Lewisham and Southwark
Delivery Location: Not specified
Local Authority: Southwark
Electoral Ward: Borough & Bankside
Westminster Constituency: Bermondsey and Old Southwark

Supplier Information

Number of Suppliers: 1
Supplier Name: KROLL ASSOCIATES

Further Information

Notice Documents

https://www.find-tender.service.gov.uk/Notice/057800-2026
18th June 2026 - Transparency notice on Find a Tender

Notice URLs

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-06b889-2026-06-18T22:52:49+01:00",
    "date": "2026-06-18T22:52:49+01:00",
    "ocid": "ocds-h6vhtk-06b889",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-COH-03266760",
            "name": "SOUTH WESTERN RAILWAY LIMITED",
            "identifier": {
                "scheme": "GB-COH",
                "id": "03266760"
            },
            "additionalIdentifiers": [
                {
                    "scheme": "GB-PPON",
                    "id": "PQHL-7495-VCQT"
                }
            ],
            "address": {
                "streetAddress": "South Bank Central 4th Floor, 30 Stamford Street,",
                "locality": "London",
                "postalCode": "SE1 9LQ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI44"
            },
            "contactPoint": {
                "email": "ProcurementandContracts@swrailway.com"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "classifications": [
                    {
                        "id": "publicUndertaking",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public undertaking"
                    }
                ]
            }
        },
        {
            "id": "GB-COH-02020412",
            "name": "KROLL ASSOCIATES U.K. LIMITED",
            "identifier": {
                "scheme": "GB-COH",
                "id": "02020412"
            },
            "additionalIdentifiers": [
                {
                    "scheme": "GB-PPON",
                    "id": "PZZW-8975-XDWN"
                }
            ],
            "address": {
                "streetAddress": "The News Building, Level 6",
                "locality": "London",
                "postalCode": "SE1 9SG",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI44"
            },
            "contactPoint": {
                "email": "dl.ukgi@kroll.com"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.kroll.com/en-gb",
                "scale": "large",
                "vcse": false
            }
        }
    ],
    "buyer": {
        "id": "GB-COH-03266760",
        "name": "SOUTH WESTERN RAILWAY LIMITED"
    },
    "tender": {
        "id": "C2026001074",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Provision of Cyber Security Services",
        "description": "Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The proposed Framework Services Agreement will establish an SWR-owned contractual mechanism under which these integrated services can be managed, governed and aligned to support both operational continuity and future procurement planning. South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. Total contract value of approximately PS1.2 million.",
        "status": "complete",
        "procurementMethod": "direct",
        "procurementMethodDetails": "Direct award",
        "procurementMethodRationale": "South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The Framework Services Agreement will encompass Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services, with an estimated total contract value of approximately PS1.2 million. SWR has determined that the proposed award satisfies the conditions set out in Schedule 5 of the Procurement Act 2023 relating to Additional or Repeat Goods, Services or Works. The services form part of SWR's existing cyber security architecture and operate as integrated and interdependent components of a single monitoring and response environment. A change of supplier would result in incompatibility with the existing solution and create disproportionate technical and operational difficulties in maintaining continuity of service. The proposed award will ensure continuity of critical cyber security capabilities whilst aligning the services within a single contractual framework and enabling future review of procurement options.",
        "specialRegime": [
            "utilities"
        ],
        "techniques": {
            "hasFrameworkAgreement": true,
            "frameworkAgreement": {
                "type": "closed"
            }
        },
        "lots": [
            {
                "id": "1",
                "status": "complete"
            }
        ],
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            }
        ],
        "procurementMethodRationaleClassifications": [
            {
                "id": "additionalRepeatExtensionPartialReplacement"
            }
        ]
    },
    "awards": [
        {
            "id": "1",
            "status": "pending",
            "value": {
                "amountGross": 1465431,
                "amount": 1221192,
                "currency": "GBP"
            },
            "mainProcurementCategory": "services",
            "aboveThreshold": true,
            "suppliers": [
                {
                    "id": "GB-COH-02020412",
                    "name": "KROLL ASSOCIATES U.K. LIMITED"
                }
            ],
            "items": [
                {
                    "id": "1",
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "48730000",
                            "description": "Security software package"
                        },
                        {
                            "scheme": "CPV",
                            "id": "48760000",
                            "description": "Virus protection software package"
                        },
                        {
                            "scheme": "CPV",
                            "id": "72212517",
                            "description": "IT software development services"
                        },
                        {
                            "scheme": "CPV",
                            "id": "72212730",
                            "description": "Security software development services"
                        },
                        {
                            "scheme": "CPV",
                            "id": "72260000",
                            "description": "Software-related services"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "contractPeriod": {
                "startDate": "2026-07-01T00:00:00+01:00",
                "endDate": "2028-12-31T23:59:59Z"
            },
            "hasOptions": true,
            "options": {
                "description": "Network Detection Response Crowdstrike licenses Cyber Risk Retainer"
            },
            "relatedLots": [
                "1"
            ],
            "documents": [
                {
                    "id": "057800-2026",
                    "documentType": "awardNotice",
                    "noticeType": "UK5",
                    "description": "Transparency notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/057800-2026",
                    "datePublished": "2026-06-18T22:52:49+01:00",
                    "format": "text/html"
                }
            ],
            "milestones": [
                {
                    "id": "1",
                    "type": "futureSignatureDate",
                    "dueDate": "2026-06-30T23:59:59+01:00",
                    "status": "scheduled"
                }
            ]
        }
    ],
    "language": "en"
}