---
title: "Provision of Cyber Security Services"
ocid: "ocds-h6vhtk-06b889"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06b889"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-06b889.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-06b889.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "SOUTH WESTERN RAILWAY LIMITED"
published: "2026-06-18"
---

# Provision of Cyber Security Services

Buyer: SOUTH WESTERN RAILWAY LIMITED  
Current stage: Award  
OCID: ocds-h6vhtk-06b889

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06b889)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-06b889.json)

## Summary

The public procurement process led by South Western Railway Limited focuses on awarding a framework services agreement for the provision of integrated cyber security services. The contracting process is at the Award stage, with a contract set to be signed by 30th June 2026. The procurement involves services in the software development industry, specifically targeting security and virus protection software. This process employs a direct award procurement method, justified by the necessity to maintain operational continuity within the existing cyber security framework. The contract will run from 1st July 2026 to 31st December 2028, based in London, United Kingdom, with a total value estimated at £1.2 million.

This tender represents a significant opportunity for businesses specialising in cyber security services, primarily those capable of providing integrated monitoring, detection, and response solutions. Small and medium enterprises with expertise in network detection response, endpoint protection, and cyber risk retainer services would find this contract especially pertinent. Furthermore, businesses operating within the utilities sector and offering advanced IT software development services will be well-positioned to capitalise on the continued demand for sophisticated cyber security solutions, aligning with the strategic priorities of South Western Railway.

## Notice

Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The proposed Framework Services Agreement will establish an SWR-owned contractual mechanism under which these integrated services can be managed, governed and aligned to support both operational continuity and future procurement planning. South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. Total contract value of approximately PS1.2 million.

### Procurement Information

South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The Framework Services Agreement will encompass Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services, with an estimated total contract value of approximately PS1.2 million. SWR has determined that the proposed award satisfies the conditions set out in Schedule 5 of the Procurement Act 2023 relating to Additional or Repeat Goods, Services or Works. The services form part of SWR's existing cyber security architecture and operate as integrated and interdependent components of a single monitoring and response environment. A change of supplier would result in incompatibility with the existing solution and create disproportionate technical and operational difficulties in maintaining continuity of service. The proposed award will ensure continuity of critical cyber security capabilities whilst aligning the services within a single contractual framework and enabling future review of procurement options.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/057800-2026 |
| Notice type | UK5 - Transparency Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Direct award |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 18 Jun 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 18 Jun 2026 |
| Contract period | 30 Jun 2026 - 31 Dec 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | £1,221,192 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Pending |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | SOUTH WESTERN RAILWAY LIMITED |
| Locality | LONDON |
| Post town | South East London |
| Postcode | SE1 9LQ |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI44 Lewisham and Southwark |
| Local authority | Southwark |
| Electoral ward | Borough & Bankside |
| Westminster constituency | Bermondsey and Old Southwark |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | KROLL ASSOCIATES |

## CPV Codes

### Divisions

- 48 - Software package and information systems
- 72 - IT services: consulting, software development, Internet and support

### Codes

- 48730000 - Security software package
- 48760000 - Virus protection software package
- 72212517 - IT software development services
- 72212730 - Security software development services
- 72260000 - Software-related services

## Release History

- 18 Jun 2026 at 21:52 - Award - UK5 - Transparency Notice - https://www.find-tender.service.gov.uk/Notice/057800-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/057800-2026
  18th June 2026 - Transparency notice on Find a Tender

## Notice URLs

- https://www.kroll.com/en-gb
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06b889. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-06b889.json.