Official UK procurement notice
Provision of Cyber Security Services
Authority: SOUTH WESTERN RAILWAY LIMITED (Public body)
What is being bought
Published requirement descriptionSouth Western Railway has awarded a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services.
CPV: IT services: consulting, software development, Internet and support · Security software development services · Virus protection software package
The lotProcurement structure
single lot · no lot value publishedLot #1SWRL currently receives a number of cyber security services from Kroll, the current…Awarded
SWRL currently receives a number of cyber security services from Kroll, the current position is that prior to SWR's transition to public ownership, cyber security services were provided under FirstGroup's Master Services Agreement (MSA), with individual services operating as call-off arrangements beneath that overarching contractual structure.
As SWR is now a separate legal entity operating independently of FirstGroup, the inherited arrangements must be replaced with SWR-owned contractual mechanisms as the existing agreements expire. This creates the need to establish a compliant contractual structure whilst maintaining continuity of critical cyber security services.
The current cyber security solution comprises four interdependent service components:
- SOC/SIEM Service
- Network Detection and Response (NDR)
- CrowdStrike Endpoint Protection
- Cyber Risk Retainer Services
Procedure terms & legal framework
From the official record- Procedure method
- Award procedure without prior publication of a call for competition
- Legal basis
- CELEX · 32014L0024 Public Contracts Regulations 2015 (Directive 2014/24/EU)
- Procurement category
- Services
- Notice status
- Awarded without competition
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Direct award (no call for competition)
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 18 Jun 2026, 23:50 BST
- Last source update
- 18 Jun 2026, 23:50 BST
- FTS notice number
2026/S 000-057802- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-06b88aFind a Tender
- Why no open competition
- The procurement falls outside the scope of application of the directive
- Published justification
South Western Railway has awarded a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services.
The Framework Services Agreement provides the contractual mechanism through which SWR will manage and align its cyber security service components, including Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services.
The total estimated value of the Framework Services Agreement is approximately £1.2 million.
The award has been made in accordance with Schedule 5 of the Procurement Act 2023, Additional or Repeat Goods, Services or Works.
SWR determined that the services form part of an existing integrated cyber security architecture and that a change of supplier would result in incompatibility with the existing solution and disproportionate technical and operational difficulties in maintaining continuity of service.
The award supports continuity of service and provides a contractual framework through which the relevant services can be aligned to a common expiry date whilst future procurement options are assessed.
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| Kroll Associates U.K. Limited | £1,221,193 † | — | Awarded |
Contracts
Contract 057802-2026-C2026001074-1 · Kroll Associates U.K. Limited
- Signed
- 18 Jun 2026
- Value
- £1,221,193
- Status
- active
Bid statistics published by the authority
| Bids | SME | VCSE | Valid bid range |
|---|---|---|---|
| 1bids | 0 | — | — |
Contracting authority & participating public bodies
Dispute resolution & review bodies
- N/AReview body
Bidders & participating suppliers
1 commercial party on the notice- Kroll Associated LTDAwarded supplier
Official documents & specifications
Official links; attachments are not copiedNo document links were published on the notice.