Official UK procurement notice
Provision of Cyber Security Services
Authority: SOUTH WESTERN RAILWAY LIMITED (Public body)
What is being bought
Published requirement descriptionFramework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The proposed Framework Services Agreement will establish an SWR-owned contractual mechanism under which these integrated services can be managed, governed and aligned to support both operational continuity and future procurement planning. South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. Total contract value of approximately £1.2 million.
How this framework works
From the published notice- Type
- Closed framework
The lotProcurement structure
single lot · no lot value publishedProcedure terms & legal framework
From the official record- Procedure method
- Direct award
- Legal basis
- UKPGA · 2023/54 Procurement Act 2023
- Notice status
- Awarded without competition
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Utilities
- Commercial structure
- Framework agreement
- Who may use this agreement
- Not stated in the notice; call-off rights may be limited to the establishing authority
- Competition type
- Direct award (no call for competition)
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 18 Jun 2026, 22:52 BST
- Last source update
- 18 Jun 2026, 22:52 BST
- Authority reference
C2026001074- FTS notice number
2026/S 000-057800- Latest notice
- Transparency notice (UK5)
- Delivery area
- Not published
- Official registry OCID
ocds-h6vhtk-06b889Find a Tender
- Why no open competition
- Additional Repeat Extension Partial Replacement
- Published justification
South Western Railway intends to award a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services.
The Framework Services Agreement will encompass Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services, with an estimated total contract value of approximately £1.2 million.
SWR has determined that the proposed award satisfies the conditions set out in Schedule 5 of the Procurement Act 2023 relating to Additional or Repeat Goods, Services or Works.
The services form part of SWR's existing cyber security architecture and operate as integrated and interdependent components of a single monitoring and response environment. A change of supplier would result in incompatibility with the existing solution and create disproportionate technical and operational difficulties in maintaining continuity of service.
The proposed award will ensure continuity of critical cyber security capabilities whilst aligning the services within a single contractual framework and enabling future review of procurement options.
Notice history
2 events · 1 release on Find a Tender · since 18 Jun 2026- Transparency notice published18 Jun 2026, 22:52 BSTUK5
- Contract signature expected30 Jun 2026, 23:59 BSTscheduled
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| Kroll Associates U.K. Limited1 Jul 2026 – 31 Dec 2028Options: Network Detection Response Crowdstrike licenses Cyber Risk Retainer | £1,221,192 | — | Standstill |
Contracting authority & participating public bodies
Framework contractors & participating bidders
1 commercial party on the notice- KROLL ASSOCIATES U.K. LIMITEDFramework contractor
Official documents & specifications (1)
Official links; attachments are not copiedNotices published for this procedure
- Transparency notice Transparency notice on Find a Tender