Certificate Lifecycle Management Programme Core Services

{
  "id": "070933-2025",
  "tag": [
    "planningUpdate"
  ],
  "date": "2025-11-04T15:40:13Z",
  "ocid": "ocds-h6vhtk-059daa",
  "buyer": {
    "id": "GB-PPON-PNZN-9524-VCQJ",
    "name": "NETWORK RAIL INFRASTRUCTURE LIMITED"
  },
  "tender": {
    "id": "ocds-h6vhtk-059daa",
    "lots": [
      {
        "id": "1",
        "status": "planning",
        "suitability": {
          "sme": true,
          "vcse": true
        },
        "contractPeriod": {
          "endDate": "2028-11-30T23:59:59+00:00",
          "startDate": "2025-11-30T00:00:00+00:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72260000",
            "scheme": "CPV",
            "description": "Software-related services"
          },
          {
            "id": "72267000",
            "scheme": "CPV",
            "description": "Software maintenance and repair services"
          },
          {
            "id": "72261000",
            "scheme": "CPV",
            "description": "Software support services"
          },
          {
            "id": "72590000",
            "scheme": "CPV",
            "description": "Computer-related professional services"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "72212200",
            "scheme": "CPV",
            "description": "Networking, Internet and intranet software development services"
          },
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72212170",
            "scheme": "CPV",
            "description": "Compliance software development services"
          },
          {
            "id": "72212218",
            "scheme": "CPV",
            "description": "License management software development services"
          },
          {
            "id": "72212732",
            "scheme": "CPV",
            "description": "Data security software development services"
          },
          {
            "id": "72610000",
            "scheme": "CPV",
            "description": "Computer support services"
          }
        ]
      }
    ],
    "title": "Certificate Lifecycle Management Programme Core Services",
    "value": {
      "amount": 800000,
      "currency": "GBP",
      "amountGross": 960000
    },
    "status": "planning",
    "amendments": [
      {
        "id": "070933-2025",
        "description": "This Preliminary Market Engagement notice has been updated to include additional CPV codes. These have been added to more accurately reflect the scope of the intended procurement and to ensure the notice reaches all relevant market participants. No other changes have been made to the content of the notice.\nOnce you have reviewed all the documents, please submit your presentations as part of your response to the notice to: humza.tayyab@networkrail.co.uk.\nPlease be advised that the deadline for submitting your responses to this notice has been extended to Wednesday 12th November 2025."
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum's decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential.\nNetwork Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail's ability to monitor, renew, or enforce compliance directly.\nThe CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually.\nNetwork Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to:\nCentrally track and manage certificates across all environments and suppliers.\nAutomate certificate renewal, validation, and compliance processes.\nProvide visibility and control over third-party issued certificates.\nSupport supplier accountability and contractual enforcement.\nAlign with upcoming industry standards and security requirements.\nDeliver proven solutions at scale, with references from similar large infrastructure organisations.\nWe welcome responses from suppliers offering innovative, scalable, and future-proof approaches, including those with experience in complex, multi-stakeholder environments. Suppliers are encouraged to share relevant case studies, lessons learned, and any alternative models that could help Network Rail achieve its objectives.\nThis market engagement will inform Network Rail's approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape.",
    "specialRegime": [
      "utilities"
    ],
    "aboveThreshold": true,
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PNZN-9524-VCQJ",
      "name": "NETWORK RAIL INFRASTRUCTURE LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI45",
        "country": "GB",
        "locality": "London",
        "postalCode": "SE1 8SW",
        "countryName": "United Kingdom",
        "streetAddress": "Waterloo General Office"
      },
      "details": {
        "url": "https://www.networkrail.co.uk/",
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PNZN-9524-VCQJ",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Humza Tayyab",
        "email": "humza.tayyab@networkrail.co.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "070933-2025",
        "url": "https://www.find-tender.service.gov.uk/Notice/070933-2025",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2025-11-04T15:40:13Z"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2025-11-12T23:59:59+00:00",
        "description": "Network Rail is inviting suppliers to participate in this preliminary market engagement for the Certificate Lifecycle Management System. The engagement process is as follows:\nAccessing the Documents:\nSuppliers should access the draft requirements and supporting documents via the Network Rail Bravo platform. Visit https://networkrail.bravosolution.co.uk/web/login.html, select \"View Current Opportunities,\" and choose \"Certificate Lifecycle Management Programme Core Services.\" The documents will be available in the attachments section; no login is required.\nReviewing Requirements:\nSuppliers are requested to carefully review the draft requirements document and all supporting materials provided.\nSupplier Response - Structured Presentation:\nAfter reviewing the requirements, suppliers must prepare a structured PowerPoint presentation that addresses all elements outlined under the \"Supplier Presentation Requirements for PME\" section of the briefing pack. Presentations should comprehensively cover each specified area, demonstrating how your solution meets Network Rail's needs and responding to all requested points.\nSubmission Instructions:\nCompleted presentations must be submitted by email to Humza Tayyab at humza.tayyab@networkrail.co.uk no later than 17:00 on 12th November 2025. Please ensure your submission clearly references your organisation name and the CLM Programme. Submissions received after the deadline may not be considered.\nClarifications:\nAny questions or requests for clarification regarding this notice should be directed to humza.tayyab@networkrail.co.uk.\nReview and Further Engagement:\nUpon receiving your completed presentation, Network Rail will review all responses and may contact suppliers for further information or discussion if necessary."
      }
    ]
  },
  "initiationType": "tender"
}

{
  "id": "068007-2025",
  "tag": [
    "planningUpdate"
  ],
  "date": "2025-10-23T22:42:45+01:00",
  "ocid": "ocds-h6vhtk-059daa",
  "buyer": {
    "id": "GB-PPON-PNZN-9524-VCQJ",
    "name": "NETWORK RAIL INFRASTRUCTURE LIMITED"
  },
  "tender": {
    "id": "ocds-h6vhtk-059daa",
    "lots": [
      {
        "id": "1",
        "status": "planning",
        "suitability": {
          "sme": true,
          "vcse": true
        },
        "contractPeriod": {
          "endDate": "2028-11-30T23:59:59+00:00",
          "startDate": "2025-11-30T00:00:00+00:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72260000",
            "scheme": "CPV",
            "description": "Software-related services"
          },
          {
            "id": "72267000",
            "scheme": "CPV",
            "description": "Software maintenance and repair services"
          },
          {
            "id": "72261000",
            "scheme": "CPV",
            "description": "Software support services"
          },
          {
            "id": "72590000",
            "scheme": "CPV",
            "description": "Computer-related professional services"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "72212200",
            "scheme": "CPV",
            "description": "Networking, Internet and intranet software development services"
          },
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72212170",
            "scheme": "CPV",
            "description": "Compliance software development services"
          },
          {
            "id": "72212218",
            "scheme": "CPV",
            "description": "License management software development services"
          },
          {
            "id": "72212732",
            "scheme": "CPV",
            "description": "Data security software development services"
          },
          {
            "id": "72610000",
            "scheme": "CPV",
            "description": "Computer support services"
          }
        ]
      }
    ],
    "title": "Certificate Lifecycle Management Programme Core Services",
    "value": {
      "amount": 800000,
      "currency": "GBP",
      "amountGross": 960000
    },
    "status": "planning",
    "amendments": [
      {
        "id": "068007-2025",
        "description": "This Preliminary Market Engagement notice has been updated to include additional CPV codes. These have been added to more accurately reflect the scope of the intended procurement and to ensure the notice reaches all relevant market participants. No other changes have been made to the content of the notice.\nOnce you have reviewed all the documents, please submit your presentations as part of your response to the notice to: humza.tayyab@networkrail.co.uk.\nPlease be advised that the deadline for submitting your responses to the questionnaire has been extended to Tuesday, 11th November 2025."
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum's decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential.\nNetwork Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail's ability to monitor, renew, or enforce compliance directly.\nThe CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually.\nNetwork Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to:\nCentrally track and manage certificates across all environments and suppliers.\nAutomate certificate renewal, validation, and compliance processes.\nProvide visibility and control over third-party issued certificates.\nSupport supplier accountability and contractual enforcement.\nAlign with upcoming industry standards and security requirements.\nDeliver proven solutions at scale, with references from similar large infrastructure organisations.\nWe welcome responses from suppliers offering innovative, scalable, and future-proof approaches, including those with experience in complex, multi-stakeholder environments. Suppliers are encouraged to share relevant case studies, lessons learned, and any alternative models that could help Network Rail achieve its objectives.\nThis market engagement will inform Network Rail's approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape.",
    "specialRegime": [
      "utilities"
    ],
    "aboveThreshold": true,
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PNZN-9524-VCQJ",
      "name": "NETWORK RAIL INFRASTRUCTURE LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI45",
        "country": "GB",
        "locality": "London",
        "postalCode": "SE1 8SW",
        "countryName": "United Kingdom",
        "streetAddress": "Waterloo General Office"
      },
      "details": {
        "url": "https://www.networkrail.co.uk/",
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PNZN-9524-VCQJ",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Humza Tayyab",
        "email": "humza.tayyab@networkrail.co.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "068007-2025",
        "url": "https://www.find-tender.service.gov.uk/Notice/068007-2025",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2025-10-23T22:42:45+01:00"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2025-11-11T23:59:59+00:00",
        "description": "Network Rail is inviting suppliers to participate in this preliminary market engagement for the Certificate Lifecycle Management System. The engagement process is as follows:\nAccessing the Documents:\nSuppliers should access the draft requirements and supporting documents via the Network Rail Bravo platform. Visit https://networkrail.bravosolution.co.uk/web/login.html, select \"View Current Opportunities,\" and choose \"Certificate Lifecycle Management Programme Core Services.\" The documents will be available in the attachments section; no login is required.\nReviewing Requirements:\nSuppliers are requested to carefully review the draft requirements document and all supporting materials provided.\nSupplier Response - Structured Presentation:\nAfter reviewing the requirements, suppliers must prepare a structured PowerPoint presentation that addresses all elements outlined under the \"Supplier Presentation Requirements for PME\" section of the briefing pack. Presentations should comprehensively cover each specified area, demonstrating how your solution meets Network Rail's needs and responding to all requested points.\nSubmission Instructions:\nCompleted presentations must be submitted by email to Humza Tayyab at humza.tayyab@networkrail.co.uk no later than 17:00 on 11th November 2025. Please ensure your submission clearly references your organisation name and the CLM Programme. Submissions received after the deadline may not be considered.\nClarifications:\nAny questions or requests for clarification regarding this notice should be directed to humza.tayyab@networkrail.co.uk.\nReview and Further Engagement:\nUpon receiving your completed presentation, Network Rail will review all responses and may contact suppliers for further information or discussion if necessary."
      }
    ]
  },
  "initiationType": "tender"
}

{
  "id": "068006-2025",
  "tag": [
    "planningUpdate"
  ],
  "date": "2025-10-23T22:27:53+01:00",
  "ocid": "ocds-h6vhtk-059daa",
  "buyer": {
    "id": "GB-PPON-PNZN-9524-VCQJ",
    "name": "NETWORK RAIL INFRASTRUCTURE LIMITED"
  },
  "tender": {
    "id": "ocds-h6vhtk-059daa",
    "lots": [
      {
        "id": "1",
        "status": "planning",
        "suitability": {
          "sme": true,
          "vcse": true
        },
        "contractPeriod": {
          "endDate": "2028-11-30T23:59:59+00:00",
          "startDate": "2025-11-30T00:00:00+00:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72260000",
            "scheme": "CPV",
            "description": "Software-related services"
          },
          {
            "id": "72267000",
            "scheme": "CPV",
            "description": "Software maintenance and repair services"
          },
          {
            "id": "72261000",
            "scheme": "CPV",
            "description": "Software support services"
          },
          {
            "id": "72590000",
            "scheme": "CPV",
            "description": "Computer-related professional services"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "72212200",
            "scheme": "CPV",
            "description": "Networking, Internet and intranet software development services"
          },
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72212170",
            "scheme": "CPV",
            "description": "Compliance software development services"
          },
          {
            "id": "72212218",
            "scheme": "CPV",
            "description": "License management software development services"
          },
          {
            "id": "72212732",
            "scheme": "CPV",
            "description": "Data security software development services"
          },
          {
            "id": "72610000",
            "scheme": "CPV",
            "description": "Computer support services"
          }
        ]
      }
    ],
    "title": "Certificate Lifecycle Management Programme Core Services",
    "value": {
      "amount": 800000,
      "currency": "GBP",
      "amountGross": 960000
    },
    "status": "planning",
    "amendments": [
      {
        "id": "068006-2025",
        "description": "This Preliminary Market Engagement notice has been updated to include additional CPV codes. These have been added to more accurately reflect the scope of the intended procurement and to ensure the notice reaches all relevant market participants. No other changes have been made to the content of the notice.\nOnce you have reviewed all the documents, please submit your presentations as part of your response to the notice to: humza.tayyab@networkrail.co.uk.\nPlease be advised that the deadline for submitting your responses to the questionnaire has been extended to Tuesday, 11th November 2025."
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum’s decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential.\nNetwork Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail’s ability to monitor, renew, or enforce compliance directly.\nThe CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually.\nNetwork Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to:\nCentrally track and manage certificates across all environments and suppliers.\nAutomate certificate renewal, validation, and compliance processes.\nProvide visibility and control over third-party issued certificates.\nSupport supplier accountability and contractual enforcement.\nAlign with upcoming industry standards and security requirements.\nDeliver proven solutions at scale, with references from similar large infrastructure organisations.\nThis market engagement will inform Network Rail’s approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape.",
    "specialRegime": [
      "utilities"
    ],
    "aboveThreshold": true,
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PNZN-9524-VCQJ",
      "name": "NETWORK RAIL INFRASTRUCTURE LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI45",
        "country": "GB",
        "locality": "London",
        "postalCode": "SE1 8SW",
        "countryName": "United Kingdom",
        "streetAddress": "Waterloo General Office"
      },
      "details": {
        "url": "https://www.networkrail.co.uk/",
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PNZN-9524-VCQJ",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Humza Tayyab",
        "email": "humza.tayyab@networkrail.co.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "068006-2025",
        "url": "https://www.find-tender.service.gov.uk/Notice/068006-2025",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2025-10-23T22:27:53+01:00"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2025-11-11T23:59:59+00:00",
        "description": "Network Rail is inviting suppliers to participate in this preliminary market engagement for the Certificate Lifecycle Management System. The engagement process is as follows:\nAccessing the Documents:\nSuppliers should access the draft requirements and supporting documents via the Network Rail Bravo platform. Visit https://networkrail.bravosolution.co.uk/web/login.html, select “View Current Opportunities,” and choose “Certificate Lifecycle Management Programme Core Services.” The documents will be available in the attachments section; no login is required.\nReviewing Requirements:\nSuppliers are requested to carefully review the draft requirements document and all supporting materials provided.\nSupplier Response – Structured Presentation:\nAfter reviewing the requirements, suppliers must prepare a structured PowerPoint presentation that addresses all elements outlined under the “Supplier Presentation Requirements for PME” section of the briefing pack. Presentations should comprehensively cover each specified area, demonstrating how your solution meets Network Rail’s needs and responding to all requested points.\nSubmission Instructions:\nCompleted presentations must be submitted by email to Humza Tayyab at humza.tayyab@networkrail.co.uk no later than 17:00 on 31st October 2025. Please ensure your submission clearly references your organisation name and the CLM Programme. Submissions received after the deadline may not be considered.\nClarifications:\nAny questions or requests for clarification regarding this notice should be directed to humza.tayyab@networkrail.co.uk.\nReview and Further Engagement:\nUpon receiving your completed presentation, Network Rail will review all responses and may contact suppliers for further information or discussion if necessary."
      }
    ]
  },
  "initiationType": "tender"
}

{
  "id": "068005-2025",
  "tag": [
    "planningUpdate"
  ],
  "date": "2025-10-23T22:26:36+01:00",
  "ocid": "ocds-h6vhtk-059daa",
  "buyer": {
    "id": "GB-PPON-PNZN-9524-VCQJ",
    "name": "NETWORK RAIL INFRASTRUCTURE LIMITED"
  },
  "tender": {
    "id": "ocds-h6vhtk-059daa",
    "lots": [
      {
        "id": "1",
        "status": "planning",
        "suitability": {
          "sme": true,
          "vcse": true
        },
        "contractPeriod": {
          "endDate": "2028-11-30T23:59:59+00:00",
          "startDate": "2025-11-30T00:00:00+00:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72260000",
            "scheme": "CPV",
            "description": "Software-related services"
          },
          {
            "id": "72267000",
            "scheme": "CPV",
            "description": "Software maintenance and repair services"
          },
          {
            "id": "72261000",
            "scheme": "CPV",
            "description": "Software support services"
          },
          {
            "id": "72590000",
            "scheme": "CPV",
            "description": "Computer-related professional services"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "72212200",
            "scheme": "CPV",
            "description": "Networking, Internet and intranet software development services"
          },
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72212170",
            "scheme": "CPV",
            "description": "Compliance software development services"
          },
          {
            "id": "72212218",
            "scheme": "CPV",
            "description": "License management software development services"
          },
          {
            "id": "72212732",
            "scheme": "CPV",
            "description": "Data security software development services"
          },
          {
            "id": "72610000",
            "scheme": "CPV",
            "description": "Computer support services"
          }
        ]
      }
    ],
    "title": "Certificate Lifecycle Management Programme Core Services",
    "value": {
      "amount": 800000,
      "currency": "GBP",
      "amountGross": 960000
    },
    "status": "planning",
    "amendments": [
      {
        "id": "068005-2025",
        "description": "This Preliminary Market Engagement notice has been updated to include additional CPV codes. These have been added to more accurately reflect the scope of the intended procurement and to ensure the notice reaches all relevant market participants. No other changes have been made to the content of the notice.\nOnce you have reviewed all the documents, please submit your presentations as part of your response to the notice to: humza.tayyab@networkrail.co.uk.\nPlease be advised that the deadline for submitting your responses to the questionnaire has been extended to Tuesday, 11th November 2025."
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum’s decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential.\nNetwork Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail’s ability to monitor, renew, or enforce compliance directly.\nThe CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually.\nNetwork Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to:\nCentrally track and manage certificates across all environments and suppliers.\nAutomate certificate renewal, validation, and compliance processes.\nProvide visibility and control over third-party issued certificates.\nSupport supplier accountability and contractual enforcement.\nAlign with upcoming industry standards and security requirements.\nDeliver proven solutions at scale, with references from similar large infrastructure organisations.\nThis market engagement will inform Network Rail’s approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape.",
    "specialRegime": [
      "utilities"
    ],
    "aboveThreshold": true,
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PNZN-9524-VCQJ",
      "name": "NETWORK RAIL INFRASTRUCTURE LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI45",
        "country": "GB",
        "locality": "London",
        "postalCode": "SE1 8SW",
        "countryName": "United Kingdom",
        "streetAddress": "Waterloo General Office"
      },
      "details": {
        "url": "https://www.networkrail.co.uk/",
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PNZN-9524-VCQJ",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Humza Tayyab",
        "email": "humza.tayyab@networkrail.co.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "068005-2025",
        "url": "https://www.find-tender.service.gov.uk/Notice/068005-2025",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2025-10-23T22:26:36+01:00"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2025-10-31T23:59:59+00:00",
        "description": "Network Rail is inviting suppliers to participate in this preliminary market engagement for the Certificate Lifecycle Management System. The engagement process is as follows:\nAccessing the Documents:\nSuppliers should access the draft requirements and supporting documents via the Network Rail Bravo platform. Visit https://networkrail.bravosolution.co.uk/web/login.html, select “View Current Opportunities,” and choose “Certificate Lifecycle Management Programme Core Services.” The documents will be available in the attachments section; no login is required.\nReviewing Requirements:\nSuppliers are requested to carefully review the draft requirements document and all supporting materials provided.\nSupplier Response – Structured Presentation:\nAfter reviewing the requirements, suppliers must prepare a structured PowerPoint presentation that addresses all elements outlined under the “Supplier Presentation Requirements for PME” section of the briefing pack. Presentations should comprehensively cover each specified area, demonstrating how your solution meets Network Rail’s needs and responding to all requested points.\nSubmission Instructions:\nCompleted presentations must be submitted by email to Humza Tayyab at humza.tayyab@networkrail.co.uk no later than 17:00 on 31st October 2025. Please ensure your submission clearly references your organisation name and the CLM Programme. Submissions received after the deadline may not be considered.\nClarifications:\nAny questions or requests for clarification regarding this notice should be directed to humza.tayyab@networkrail.co.uk.\nReview and Further Engagement:\nUpon receiving your completed presentation, Network Rail will review all responses and may contact suppliers for further information or discussion if necessary."
      }
    ]
  },
  "initiationType": "tender"
}

{
  "id": "057910-2025",
  "tag": [
    "planning"
  ],
  "date": "2025-09-18T18:57:55+01:00",
  "ocid": "ocds-h6vhtk-059daa",
  "buyer": {
    "id": "GB-PPON-PNZN-9524-VCQJ",
    "name": "NETWORK RAIL INFRASTRUCTURE LIMITED"
  },
  "tender": {
    "id": "ocds-h6vhtk-059daa",
    "lots": [
      {
        "id": "1",
        "status": "planning",
        "suitability": {
          "sme": true,
          "vcse": true
        },
        "contractPeriod": {
          "endDate": "2028-11-30T23:59:59+00:00",
          "startDate": "2025-11-30T00:00:00+00:00"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72260000",
            "scheme": "CPV",
            "description": "Software-related services"
          },
          {
            "id": "72267000",
            "scheme": "CPV",
            "description": "Software maintenance and repair services"
          },
          {
            "id": "72261000",
            "scheme": "CPV",
            "description": "Software support services"
          },
          {
            "id": "72590000",
            "scheme": "CPV",
            "description": "Computer-related professional services"
          },
          {
            "id": "72222300",
            "scheme": "CPV",
            "description": "Information technology services"
          },
          {
            "id": "72212200",
            "scheme": "CPV",
            "description": "Networking, Internet and intranet software development services"
          },
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          }
        ]
      }
    ],
    "title": "Certificate Lifecycle Management Programme Core Services",
    "value": {
      "amount": 800000,
      "currency": "GBP",
      "amountGross": 960000
    },
    "status": "planning",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum’s decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential.\nNetwork Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail’s ability to monitor, renew, or enforce compliance directly.\nThe CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually.\nNetwork Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to:\nCentrally track and manage certificates across all environments and suppliers.\nAutomate certificate renewal, validation, and compliance processes.\nProvide visibility and control over third-party issued certificates.\nSupport supplier accountability and contractual enforcement.\nAlign with upcoming industry standards and security requirements.\nDeliver proven solutions at scale, with references from similar large infrastructure organisations.\nThis market engagement will inform Network Rail’s approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape.",
    "specialRegime": [
      "utilities"
    ],
    "aboveThreshold": true,
    "mainProcurementCategory": "services"
  },
  "parties": [
    {
      "id": "GB-PPON-PNZN-9524-VCQJ",
      "name": "NETWORK RAIL INFRASTRUCTURE LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI45",
        "country": "GB",
        "locality": "London",
        "postalCode": "SE1 8SW",
        "countryName": "United Kingdom",
        "streetAddress": "Waterloo General Office"
      },
      "details": {
        "url": "https://www.networkrail.co.uk/",
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PNZN-9524-VCQJ",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Humza Tayyab",
        "email": "humza.tayyab@networkrail.co.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "057910-2025",
        "url": "https://www.find-tender.service.gov.uk/Notice/057910-2025",
        "format": "text/html",
        "noticeType": "UK2",
        "description": "Preliminary market engagement notice on Find a Tender",
        "documentType": "marketEngagementNotice",
        "datePublished": "2025-09-18T18:57:55+01:00"
      }
    ],
    "milestones": [
      {
        "id": "engagement",
        "type": "engagement",
        "status": "scheduled",
        "dueDate": "2025-10-31T23:59:59+00:00",
        "description": "Network Rail is inviting suppliers to participate in this preliminary market engagement for the Certificate Lifecycle Management System. The engagement process is as follows:\nAccessing the Documents:\nSuppliers should access the draft requirements and supporting documents via the Network Rail Bravo platform. Visit https://networkrail.bravosolution.co.uk/web/login.html, select “View Current Opportunities,” and choose “Certificate Lifecycle Management Programme Core Services.” The documents will be available in the attachments section; no login is required.\nReviewing Requirements:\nSuppliers are requested to carefully review the draft requirements document and all supporting materials provided.\nSupplier Response – Structured Presentation:\nAfter reviewing the requirements, suppliers must prepare a structured PowerPoint presentation that addresses all elements outlined under the “Supplier Presentation Requirements for PME” section of the briefing pack. Presentations should comprehensively cover each specified area, demonstrating how your solution meets Network Rail’s needs and responding to all requested points.\nSubmission Instructions:\nCompleted presentations must be submitted by email to Humza Tayyab at humza.tayyab@networkrail.co.uk no later than 17:00 on 31st October 2025. Please ensure your submission clearly references your organisation name and the CLM Programme. Submissions received after the deadline may not be considered.\nClarifications:\nAny questions or requests for clarification regarding this notice should be directed to humza.tayyab@networkrail.co.uk.\nReview and Further Engagement:\nUpon receiving your completed presentation, Network Rail will review all responses and may contact suppliers for further information or discussion if necessary."
      }
    ]
  },
  "initiationType": "tender"
}