Home / Opportunities / Opportunity
PROCUREMENT OPPORTUNITY

Provision of Cyber Security Services

SOUTH WESTERN RAILWAY LIMITED · Transparency notice on Find a Tender

Tender information last checkedLast checked 29 Sept 2026, 15:33.

Opportunity overview

Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The proposed Framework Services Agreement will establish an SWR-owned contractual mechanism under which these integrated services can be managed, governed and aligned to support both operational continuity and future procurement planning. South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. Total contract value of approximately £1.2 million.

Awarded to

Amounts belong to published awards or contracts. Where several suppliers share one value, it is labelled as shared and is not a supplier-specific allocation.

Published award value
£1.2m
Awarded
Not supplied
Award ID
1
Status
pending
Identifier
GB-COH 02020412
Location
London, UKI44, SE1 9SG, United Kingdom

Classification

No classification was supplied.

Lots

  • Lot 1Value not stated

Documents and notices

Published notice details

Additional information from the published procurement release. Fields appear only when supplied by the source; check the original notice and tender documents before acting.

Scope, procedure and submissions

Id
C2026001074
Status
complete
Procurement Method
direct
Procurement Method Details
Direct award
Why this procedure was chosen
South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The Framework Services Agreement will encompass Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services, with an estimated total contract value of approximately £1.2 million. SWR has determined that the proposed award satisfies the conditions set out in Schedule 5 of the Procurement Act 2023 relating to Additional or Repeat Goods, Services or Works. The services form part of SWR's existing cyber security architecture and operate as integrated and interdependent components of a single monitoring and response environment. A change of supplier would result in incompatibility with the existing solution and create disproportionate technical and operational difficulties in maintaining continuity of service. The proposed award will ensure continuity of critical cyber security capabilities whilst aligning the services within a single contractual framework and enabling future review of procurement options.

Legal basis

Id
2023/54
Scheme
UKPGA

Special regime

utilities

Techniques

Has Framework Agreement
Yes

Framework Agreement

Type
closed

Procedure reasons

Entry 1
Id
additionalRepeatExtensionPartialReplacement

Lots and requirements

Entry 1
Id
1
Status
complete

Published documents

Entry 1
Id
conflictOfInterest
Document Type
conflictOfInterest
Description
Not published

Buyer, suppliers and contacts

Organisation 1
Name
SOUTH WESTERN RAILWAY LIMITED
Id
GB-COH-03266760

Identifier

Scheme
GB-COH
Id
03266760

Additional Identifiers

Entry 1
Scheme
GB-PPON
Id
PQHL-7495-VCQT

Address

Street Address
South Bank Central 4th Floor, 30 Stamford Street,
Locality
London
Postal Code
SE1 9LQ
Country
GB
Country Name
United Kingdom
Region
UKI44

Contact

Roles

buyer

Details

Classifications

Entry 1
Scheme
UK_CA_TYPE
Id
publicUndertaking
Description
Public undertaking
Organisation 2
Name
KROLL ASSOCIATES U.K. LIMITED
Id
GB-COH-02020412

Identifier

Scheme
GB-COH
Id
02020412

Additional Identifiers

Entry 1
Scheme
GB-PPON
Id
PZZW-8975-XDWN

Address

Street Address
The News Building, Level 6
Locality
London
Postal Code
SE1 9SG
Country
GB
Country Name
United Kingdom
Region
UKI44

Contact

Roles

supplier

Details

Scale
large
Vcse
No

Award information

Award 1
Id
1
Status
pending
Main Procurement Category
services
Above Threshold
Yes
Has Options
Yes

Items

Item 1
Id
1
Related Lot
1

Additional Classifications

Entry 1
Scheme
CPV
Id
48730000
Description
Security software package
Entry 2
Scheme
CPV
Id
48760000
Description
Virus protection software package
Entry 3
Scheme
CPV
Id
72212517
Description
IT software development services
Entry 4
Scheme
CPV
Id
72212730
Description
Security software development services
Entry 5
Scheme
CPV
Id
72260000
Description
Software-related services

Value

Including VAT
1,465,431
Amount
1,221,192
Currency
GBP

Suppliers

Supplier 1
Id
GB-COH-02020412
Name
KROLL ASSOCIATES U.K. LIMITED

Contract period

Starts
1 Jul 2026, 00:00
Ends
31 Dec 2028, 23:59

Options

Description
Network Detection Response Crowdstrike licenses Cyber Risk Retainer

Related lots

1

Documents

Entry 1
Id
057800-2026
Document Type
awardNotice
Notice Type
UK5
Description
Transparency notice on Find a Tender
Published
18 Jun 2026, 22:52
Format
text/html

Milestones

Entry 1
Id
1
Type
futureSignatureDate
Due
30 Jun 2026, 23:59
Status
scheduled

Recorded locations

  • Buyer location · London · UKI44 · SE1 9LQ · United Kingdom

Notice and amendment history

1 published notice version reviewed by ProcuraAxis.

1 VERSION
  1. 057800-2026Transparency notice on Find a Tender ·