Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Contract extension for provision of SOC/SIEM Managed Service

Thameslink Southern Great Northern Limited (TSGN)

This public procurement record has 2 releases in its history.

Award

18 Sep 2026 at 17:26

UK6 - Contract Award Notice
Award

18 Sep 2026 at 17:23

UK5 - Transparency Notice
Summary of the contracting process

Thameslink Southern Great Northern Limited (TSGN) procured an extension to its managed security operations capability: a SOC/SIEM managed service. The requirement covers ongoing computer support and consultancy services associated with security operations and security information and event management. It is intended to maintain the organisation’s existing security service, technology integrations and operational effectiveness, while supporting the security licences used across the business. TSGN is a public undertaking in the rail sector, based in London. The work relates to TSGN’s business-wide technology and security environment rather than a discrete construction project or supply of physical goods. Suppliers operating managed SOC and SIEM services, with experience of supporting integrated enterprise technology environments, would find the requirement most relevant.

This procurement is complete and has been awarded through a direct award under the Procurement Act 2023, Schedule 5, item 7, for additional or repeat services. The rationale was to extend the incumbent’s services because changing supplier would require fundamental changes to technology and integrations, creating incompatibility and operational risk. Kroll Associates U.K. Limited was awarded the single lot. The award date was 18 September 2026 and the awarded value is £595,220 excluding VAT, or £714,264 including VAT. The contract period runs from 1 October 2026 to 31 May 2028, with signature scheduled by 30 September 2026. The contract is above the relevant threshold and was evaluated through the direct-award route rather than a competitive tender.

For a supplier assessing future opportunities with TSGN, this award demonstrates an established need for outsourced security operations and SIEM management across a complex rail business. A credible competitor would need to provide a mature managed SOC/SIEM service, maintain continuity with existing security technology and integrations, and work with incumbent licence arrangements. Demonstrable capability in computer support and security consultancy would be important, as would the capacity to support business-wide operations without creating incompatibility or service disruption. The stated justification also shows that transition effort, operational resilience and risk reduction are central commercial considerations. Suppliers able to evidence reliable service continuity, integration management and enterprise-scale security operations would be better placed when this requirement is next reviewed.

How relevant is this notice?

Notice Information

Notice Title

Contract extension for provision of SOC/SIEM Managed Service

Notice Description

Contract extension for provision of SOC/SIEM Managed Service. This is to extend the contract services for 20months, to align to our security licences which are in term until May 2028.

Procurement Information

Under the Procurement Act 2023, under Schedule 5, item 7: Additional or Repeat Goods, Services or Works. The Direct Award is justified under item 7 on the basis that: * The requirement constitutes an extension to existing services currently provided by the incumbent supplier. A change of supplier would also mean a fundamental change to technology and integrations across the whole business which would create inconsistencies and incompatibility. Continuity of service is essential to maintain operational effectiveness and minimise risk to the organisation, a change would take significant time and resource.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-0775ee
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/088916-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK6 - Contract Award Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72600000 - Computer support and consultancy services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
£595,220 £500K-£1M
Contracts Value
Not specified

Notice Dates

Publication Date
18 Sep 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
18 Sep 20262 weeks ago
Contract Period
1 Oct 2026 - 31 May 2028 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Thameslink Southern Great Northern Limited (TSGN)
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
EC3R 8AJ
Postcode Area
Central London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified
Local Authority
City of London
Electoral Ward
Bridge
Westminster Constituency
Cities of London and Westminster

Supplier Information

Number of Suppliers
1
Supplier Name

KROLL ASSOCIATES U.K. LIMITED

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...