Opportunity overview
South Western Railway has awarded a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services.
Awarded to
Amounts belong to published awards or contracts. Where several suppliers share one value, it is labelled as shared and is not a supplier-specific allocation.
Kroll Associated LTD
Matched by number
- Contract value
- £1.2m
- Awarded
- Not supplied
- Contract signed
- 17 Jun 2026
- Award ID
- 057802-2026-C2026001074-1
- Status
- active
- Identifier
- GB-COH 02020412
- Location
- London, UK, United Kingdom
Classification
- CPV72000000 — IT services: consulting, software development, Internet and support
- CPV48760000 — Virus protection software package
- CPV72212730 — Security software development services
Lots
- SWRL currently receives a number of cyber security services from Kroll, the current position is that prior to SWR's transition to public ownership, cyber security services were provided under FirstGroup's Master Services Agreement (MSA), with individual services operating as call-off arrangements beneath that overarching contractual structure. As SWR is now a separate legal entity operating independently of FirstGroup, the inherited arrangements must be replaced with SWR-owned contractual mechanisms as the existing agreements expire. This creates the need to establish a compliant contractual structure whilst maintaining continuity of critical cyber security services. The current cyber security solution comprises four interdependent service components: • SOC/SIEM Service • Network Detection and Response (NDR) • CrowdStrike Endpoint Protection • Cyber Risk Retainer ServicesValue not stated