Cyber Security Support Services

{
  "id": "055102-2026",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2026-06-11T11:35:47+01:00",
  "ocid": "ocds-h6vhtk-0670b4",
  "buyer": {
    "id": "GB-COH-NI036562",
    "name": "MOYLE INTERCONNECTOR LIMITED"
  },
  "awards": [
    {
      "id": "055102-2026-1",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-00631825",
          "name": "Siemens Energy Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    }
  ],
  "tender": {
    "id": "ocds-h6vhtk-0670b4",
    "lots": [
      {
        "id": "1",
        "status": "cancelled",
        "hasOptions": false,
        "description": "The provision of these services will require an amendment to the current LTMA to incorporate the CSSS. This will amend the scope of the LTMA, but not the term which is coterminous with the life of the control system assets. The nature of the services that are required to be procured directly from Siemens Energy\nare defined in the amended agreement as 'Regular Services':\nThe Regular Services include:\n• Vulnerability management for IT;\n• Security patch management for IT;\n• User management;\n• Disaster recovery;\n• Licence management;\n• Obsolescence management.\nMoyle considers that the amendment to the current contract benefits from the exemption outlined in Regulation 88(1)(b) of the Utilities Contracts Regulations. This exemption\nallows for the non-competitive procurement of additional services that have become necessary, where a change of contractor cannot be made for economic or technical\nreasons and where such a change would cause significant inconvenience or duplication of costs."
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKN"
          }
        ]
      }
    ],
    "title": "Cyber Security Support Services",
    "status": "complete",
    "legalBasis": {
      "id": "32014L0025",
      "scheme": "CELEX"
    },
    "description": "Moyle Interconnector Limited (\"Moyle\") currently contracts with Siemens Energy Limited (\"Siemens\") to provide Long Term Maintenance Agreement (\"LTMA\") services for their two convertor station sites in Northern Ireland and Scotland, which were originally designed, constructed and commissioned by Siemens The Cyber Security Support Services (\"CSSS\") are required to enhance the cyber security of the Moyle control system. The control system directly operates the converter valves\nand associated equipment and is therefore critical to the safe and reliable operation of the interconnector. The CSSS will provide enhanced cyber security protections to reduce the likelihood and\npotential impact of cyber security incidents affecting the control system. The services will also support Moyle in fulfilling its obligations as an Operator of Essential Services under the NIS Regulations. It is proposed to extend the scope of services  provided under the existing LTMA contract to include the CSSS and the justification for this is outlined in the sections below.",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "procurementMethod": "limited",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
    "procurementMethodRationale": "Award of a contract without prior publication of a call for competition in the cases listed below\nThe procurement falls outside the scope of application of the regulations.\nExplanation:\nMoyle considers that the variation benefits from the exemption in Reg. 88(1)(b) UCR, for the reasons outlined below.\nWe wish to engage Siemens for the services outlined because there is a requirement to have a single point of informed contact for any cyber issues. The Interconnector was designed and constructed by Siemens in 2001; the control system was subsequently refurbished by Siemens in 2022. The interconnector is a complex asset, with many interrelated electrical, mechanical, electronic and software components and systems.\nThird parties may not understand the risk to the converter station primary equipment; Siemens do understand all potential interactions and so are better placed to assess the\nimpact of any cyber attack or threat. The control system integrates directly to the converter station valves and associated\nequipment. The system comprises a Human-Machine Interface, and programmable logic controllers. These are supported by a sophisticated internal communications infrastructure. The primary (high voltage) equipment is bespoke to Siemens, and uses proprietary light triggered thyristors; the control system (actually a system of systems) is designed to safely and seamlessly integrate with, and operate, this primary equipment.\nBoth the primary equipment and control system contain Siemens intellectual property. This is not a standard IT based infrastructure; the HVDC control engineering and software\nis intrinsically embedded within the control system itself. Given the complexity involved and the overall design, it would be impracticable for a third party to understand the implications of either cyber protection or risk. Any cyber issue (threat, asset failure or other) could impact the primary operation of the interconnector. In the event of a cyberattack, only Siemens have the end-to-end knowledge to assess and address any such\nissue and can understand the full impact on the asset. Similarly, where cyber mitigations are identified, only Siemens can confirm that these mitigations can be successfully applied without causing undue effects. Given our primary focus on safe and reliable operation, having a third party in that loop would bring, at best, inefficiency in addressing any issue; at worst, plant would potentially be at risk. For this reason, it was determined\nthat sourcing these cyber services from Siemens would offer the most technically secure solution. Given Moyle's status as Critical National Infrastructure, and the fact that availability of the entire system is fundamental to ensuring the physical and commercial\nbenefits to the Transmission System Operators on either end of the link, these factors outweigh any potential commercial benefit in tendering these services on the open market.",
    "procurementMethodRationaleClassifications": [
      {
        "id": "D_TECHNICAL",
        "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
        "description": "The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons"
      }
    ]
  },
  "parties": [
    {
      "id": "GB-COH-NI036562",
      "name": "MOYLE INTERCONNECTOR LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKN06",
        "locality": "85 Ormeau Road",
        "postalCode": "BT71SH",
        "countryName": "United Kingdom",
        "streetAddress": "First Floor"
      },
      "details": {
        "url": "https://www.mutual-energy.com/",
        "classifications": [
          {
            "id": "ELECTRICITY",
            "scheme": "TED_CE_ACTIVITY",
            "description": "Electricity"
          }
        ]
      },
      "identifier": {
        "id": "NI036562",
        "scheme": "GB-COH",
        "legalName": "MOYLE INTERCONNECTOR LIMITED"
      },
      "contactPoint": {
        "name": "Hannah Keery",
        "email": "hannah.keery@mutual-energy.com"
      }
    },
    {
      "id": "GB-COH-00631825",
      "name": "Siemens Energy Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Newcastle",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "00631825",
        "scheme": "GB-COH",
        "legalName": "Siemens Energy Limited"
      }
    },
    {
      "id": "GB-FTS-25662",
      "name": "High Court of Northern Ireland",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Belfast",
        "countryName": "United Kingdom"
      },
      "identifier": {
        "legalName": "High Court of Northern Ireland"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "055102-2026-1",
      "value": {
        "amount": 400000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "055102-2026-1",
      "dateSigned": "2026-04-03T00:00:00+01:00"
    }
  ],
  "initiationType": "tender"
}

{
  "id": "025933-2026",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2026-03-20T16:04:44Z",
  "ocid": "ocds-h6vhtk-0670b4",
  "buyer": {
    "id": "GB-COH-NI036562",
    "name": "MOYLE INTERCONNECTOR LIMITED"
  },
  "awards": [
    {
      "id": "025933-2026-1",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-00631825",
          "name": "Siemens Energy Limited"
        }
      ],
      "relatedLots": [
        "1"
      ],
      "subcontracting": {
        "description": "Part of the contract is likely to be subcontracted. The total value/proportion of the contract that is likely to be subcontracted is not known at this stage."
      },
      "hasSubcontracting": true
    }
  ],
  "tender": {
    "id": "ocds-h6vhtk-0670b4",
    "lots": [
      {
        "id": "1",
        "hasOptions": false,
        "description": "The provision of these services will require an amendment to the current LTMA to incorporate the CSSS. This will amend the scope of the LTMA, but not the term which is coterminous with the life of the control system assets.\nThe nature of the services that are required to be procured directly from Siemens Energy are defined in the amended agreement as  'Regular Services':\nThe Regular Services include:\n•\tVulnerability management for IT;\n•\t Security patch management for IT;\n•\t User management;\n•\t Disaster recovery;\n•\t Licence management;\n•\t Obsolescence management.\nMoyle considers that the amendment to the current contract benefits from the exemption outlined in Regulation 88(1)(b) of the Utilities Contracts Regulations. This exemption allows for the non-competitive procurement of additional services that have become necessary, where a change of contractor cannot be made for economic or technical reasons and where such a change would cause significant inconvenience or duplication of costs. Further information is provided below in the 'Additional Information' section. Additional information: This amendment to the contract scope will add c.£400k to the LTMA contract costs to November 2026, with an annual cost thereafter of around £600k."
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKN"
          }
        ]
      }
    ],
    "title": "Cyber Security Support Services",
    "status": "complete",
    "legalBasis": {
      "id": "32014L0025",
      "scheme": "CELEX"
    },
    "description": "Moyle Interconnector Limited (\"Moyle\") currently contracts with Siemens Energy Limited (\"Siemens\") to provide Long Term Maintenance Agreement (\"LTMA\") services for their two convertor station sites in Northern Ireland and Scotland, which were originally designed, constructed and commissioned by Siemens\nThe Cyber Security Support Services (\"CSSS\") are required to enhance the cyber security of the Moyle control system. The control system directly operates the converter valves and associated equipment and is therefore critical to the safe and reliable operation of the interconnector.\nThe CSSS will provide enhanced cyber security protections to reduce the likelihood and potential impact of cyber security incidents affecting the control system. The services will also support Moyle in fulfilling its obligations as an Operator of Essential Services under the NIS Regulations.\nIt is proposed to extend the scope of services provided under the existing LTMA contract to include the CSSS and the justification for this is outlined in the sections below.",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "procurementMethod": "limited",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
    "procurementMethodRationale": "Moyle considers that the variation benefits from the exemption in Reg. 88(1)(b) UCR, for the reasons outlined below. \nWe wish to engage Siemens for the services outlined because there is a requirement to have a single point of informed contact for any cyber issues. The Interconnector was designed and constructed by Siemens in 2001; the control system was subsequently refurbished by Siemens in 2022. The interconnector is a complex asset, with many interrelated electrical, mechanical, electronic and software components and systems. Third parties may not understand the risk to the converter station primary equipment; Siemens do understand all potential interactions and so are better placed to assess the impact of any cyber attack or threat.\nThe control system integrates directly to the converter station valves and associated equipment. The system comprises a Human-Machine Interface, and programmable logic controllers. These are supported by a sophisticated internal communications infrastructure. The primary (high voltage) equipment is bespoke to Siemens, and uses proprietary light triggered thyristors; the control system (actually a system of systems) is designed to safely and seamlessly integrate with, and operate, this primary equipment. Both the primary equipment and control system contain Siemens intellectual property. This is not a standard IT based infrastructure; the HVDC control engineering and software is intrinsically embedded within the control system itself.  Given the complexity involved and the overall design, it would be impracticable for a third party to understand the implications of either cyber protection or risk. Any cyber issue (threat, asset failure or other) could impact the primary operation of the interconnector. In the event of a cyber-attack, only Siemens have the end-to-end knowledge to assess and address any such issue and can understand the full impact on the asset. Similarly, where cyber mitigations are identified, only Siemens can confirm that these mitigations can be successfully applied without causing undue effects. Given our primary focus on safe and reliable operation, having a third party in that loop would bring, at best, inefficiency in addressing any issue; at worst, plant would potentially be at risk. For this reason, it was determined that sourcing these cyber services from Siemens would offer the most technically secure solution. Given Moyle's status as Critical National Infrastructure, and the fact that availability of the entire system is fundamental to ensuring the physical and commercial benefits to the Transmission System Operators on either end of the link, these factors outweigh any potential commercial benefit in tendering these services on the open market",
    "procurementMethodRationaleClassifications": [
      {
        "id": "D_OUTSIDE_SCOPE",
        "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
        "description": "The procurement falls outside the scope of application of the directive"
      }
    ]
  },
  "parties": [
    {
      "id": "GB-COH-NI036562",
      "name": "MOYLE INTERCONNECTOR LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKN",
        "locality": "85 Ormeau Road",
        "postalCode": "BT71SH",
        "countryName": "United Kingdom",
        "streetAddress": "First Floor"
      },
      "details": {
        "url": "https://www.mutual-energy.com/",
        "classifications": [
          {
            "id": "ELECTRICITY",
            "scheme": "TED_CE_ACTIVITY",
            "description": "Electricity"
          }
        ]
      },
      "identifier": {
        "id": "NI036562",
        "scheme": "GB-COH",
        "legalName": "MOYLE INTERCONNECTOR LIMITED"
      },
      "contactPoint": {
        "name": "Hannah Keery",
        "email": "hannah.keery@mutual-energy.com"
      }
    },
    {
      "id": "GB-COH-00631825",
      "name": "Siemens Energy Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UK",
        "locality": "Newcastle Upon Tyne",
        "postalCode": "NE6 2YL",
        "countryName": "United Kingdom",
        "streetAddress": "C A Parsons Works, Shields Road"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "00631825",
        "scheme": "GB-COH",
        "legalName": "Siemens Energy Limited"
      }
    },
    {
      "id": "GB-FTS-25662",
      "name": "High Court of Northern Ireland",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Belfast",
        "countryName": "United Kingdom"
      },
      "identifier": {
        "legalName": "High Court of Northern Ireland"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "025933-2026-1",
      "value": {
        "amount": 400000,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "025933-2026-1",
      "dateSigned": "2026-03-20T00:00:00Z"
    }
  ],
  "description": "Information on the value of the contract: Total value of the amended services in the contract for the remaining term of the LTMA is c£600k pa. \nDate of conclusion of the contract: Existing term is coterminous with the life of the control system assets.",
  "initiationType": "tender"
}