TenderlineUK
Procurement Intelligence
Official OCDS
Find a Tender
complete
Official procurement procedure

Provision of Cyber Security Services

IT services: consulting
software development
Internet and support
+2 more
Published value
Not published
Submission deadline Not published
Lots published1
Procurement Executive Summary
AI & Search Synopsis
Generated from official OCDS record
Tenderline Synopsis: SOUTH WESTERN RAILWAY LIMITED: "Provision of Cyber Security Services". Published status: complete. Published value: Value not published. 1 published lot. Submission deadline not published. See the official notice for participation instructions.
Contracting AuthoritySOUTH WESTERN RAILWAY LIMITEDScope & CategoriesNot publishedSubmission Window
complete
No deadline published
Submission GatewayDirect notice routeLegal Basis & RegimeStandard procurementEstimated Value (exc. VAT)Not published
Bidder Intelligence · Authority Profile: SOUTH WESTERN RAILWAY LIMITED
Market Analytics
View Authority Profile →
Derived from OCDS awards & bid statistics
Published history for SOUTH WESTERN RAILWAY LIMITED. These figures describe retained records, not a forecast of bids or a measure of buyer bias.
Published-to-award variance
Not availableInsufficient comparable data
Requires at least 5 comparable procedures
Competition Density
1Bids / Report
100% of reports have one bid
Supplier ConcentrationNo estimate
Insufficient attributable awardsNo concentration estimate available
Payment Terms
Check noticePublished terms
Payment obligations depend on the applicable regime and contract. Consult the official documents.
Coverage: 1 active published awards; 1 bid reports (which may be per lot). Supplier values exclude multi-supplier awards, frameworks and DPS, and use GBP only. They are published award values, not payments. Published-to-award variance compares single-lot, single-award, single-supplier GBP procedures with explicitly non-framework/non-DPS status; increases remain in the average. Unpublished data stays unknown. Awarded suppliers are winners, not all bidders.
Procedure terms
Contracting AuthoritySOUTH WESTERN RAILWAY LIMITED
Procedure methodNot published
Procurement categoryNot published
Statuscomplete
Framework / DPSNot published
CompetitionNot published
Above thresholdNot published
Legal basisNot published
Tender period startsNot published
Clarification deadlineNot published
Electronic submissionNot published
Submission languagesNot published
Published18 Jun 2026, 23:50 BST
Last source update18 Jun 2026, 23:50 BST
Recurring procurementNot published
ClassificationIT services: consulting, software development, Internet and support, Security software development services, Virus protection software package
OCIDocds-h6vhtk-06b88a
What is being bought
South Western Railway has awarded a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services.
What changed
From the official release history
  1. Status changed to complete
    18 Jun 2026, 23:50 BST
  2. Official notice release published
    18 Jun 2026, 23:50 BST
  3. Buyer information updated
    18 Jun 2026, 23:50 BST
Lots and requirements (1)
Published by the contracting authority
  • Lot 1 · #1
    Individual lot title not published
    cancelled
    Published valueNot published
    SWRL currently receives a number of cyber security services from Kroll, the current position is that prior to SWR's transition to public ownership, cyber security services were provided under FirstGroup's Master Services Agreement (MSA), with individual services operating as call-off arrangements beneath that overarching contractual structure. As SWR is now a separate legal entity operating independently of FirstGroup, the inherited arrangements must be replaced with SWR-owned contractual mechanisms as the existing agreements expire. This creates the need to establish a compliant contractual structure whilst maintaining continuity of critical cyber security services. The current cyber security solution comprises four interdependent service components: • SOC/SIEM Service • Network Detection and Response (NDR) • CrowdStrike Endpoint Protection • Cyber Risk Retainer Services
    Contract periodNot published
    EligibilityNot published
    Options / renewalNot published
Timeline
  1. Procedure published
    18 Jun 2026, 23:50 BST
  2. Award active
    Not published · Not published
  3. Contract active
    Signed 18 Jun 2026, 00:00 BST · £1,221,193
Commercial outcome and competition
Awards
Kroll Associated LTD
Not published · Not published · active
Contracts
Contract
£1,221,193 · signed 18 Jun 2026, 00:00 BST · active
Bid statistics
bids: 1 (lot 1)
smeBids: 0 (lot 1)
Buyer and organisations in this procedure

SOUTH WESTERN RAILWAY LIMITED

Contracting authority GB-COH-2026-000062
View buyer profile
  • SOUTH WESTERN RAILWAY LIMITED
    buyer

    GB-COH: 2026-000062
    London, UKI32, SW1P4DR
  • Kroll Associated LTD
    supplier

    GB-COH: 02020412
    London, UK
  • N/A
    reviewBody

    N/A
Documents (0)
Official links; attachments are not copied
No data
No linked documents are published
Related procedures (0)
No data
No related procedures published
Planning and rationale
Planning budgetNot published
No-engagement rationaleNot published
Procedure rationaleSouth Western Railway has awarded a Framework Services Agreement to Kroll for the provision of integrated cyber security monitoring, detection and response services. The Framework Services Agreement provides the contractual mechanism through which SWR will manage and align its cyber security service components, including Network Detection and Response services, CrowdStrike Endpoint Protection and Cyber Risk Retainer services. The total estimated value of the Framework Services Agreement is approximately £1.2 million. The award has been made in accordance with Schedule 5 of the Procurement Act 2023, Additional or Repeat Goods, Services or Works. SWR determined that the services form part of an existing integrated cyber security architecture and that a change of supplier would result in incompatibility with the existing solution and disproportionate technical and operational difficulties in maintaining continuity of service. The award supports continuity of service and provides a contractual framework through which the relevant services can be aligned to a common expiry date whilst future procurement options are assessed.