Official UK procurement notice
ScotRail Cyber Security Architecture
Authority: ScotRail Trains Limited
What is being bought5 lots · detail below
Published requirement descriptionScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives:
Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches
CPV: Software package and information systems
Lots and requirements (5)Procurement structure
5 lots · no lot values publishedLot #1Privileged Access Management (PAM)Renewal
Lot #2Security Information and Event Management (SIEM)AwardedRenewal
Lot #3Extended Detection and Response (XDR)AwardedRenewal
Lot #4Endpoint Detection and Response (EDR)AwardedRenewal
Lot #5Managed Detection and Response (MDR)AwardedRenewal
What it takes to wini
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Evaluation split and conditions of participation as published; the tender pack may add morei
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
- Successive reduction
- Candidates will be reduced successively across stages
Procedure terms & legal framework
From the official record · publisher note attached- Procedure method
- Negotiated procedure with prior call for competition
- Legal basis
- CELEX · 32014L0025 Utilities Contracts Regulations 2016 (Directive 2014/25/EU)
- Procurement category
- Goods
- Notice status
- Awarded
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Competitive procedure
- GPA / WTO covered
- Yes (GPA)
- Recurring procurement
- No (one-off requirement)
- First published
- 21 Apr 2023, 12:32 BST
- Last source update
- 25 Mar 2024, 13:58 GMT
- Authority reference
SR032- FTS notice number
2024/S 000-009620- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-03c327Find a Tender
- Electronic trading
- e-invoicing allowed · electronic ordering · electronic payment
Publisher note: (SC Ref:761953)
How it was run
Official notice- Submission deadline
- 24 May 2023, 17:00 BST
- Submission channel
- {"electronicSubmission"}
- Accepted languages
- en
Timeline
24 May 2023 → 25 Mar 2024 · 3 dates- Submission deadline24 May 2023, 17:00 BST
- Invitations to tender expected31 Jul 2023, 00:00 BST
- Notice published25 Mar 2024, 13:58 GMT
Notice history
1 event · 2 releases on Find a Tender- Status changed to complete25 Mar 2024, 13:58 GMT
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| Lot 2 · Security Information and Event Management (SIEM)1 award | |||
| NCC Group Security Services Limited | — | — | Awarded |
| Lot 3 · Extended Detection and Response (XDR)1 award | |||
| NCC Group Security Services Limited | — | — | Awarded |
| Lot 4 · Endpoint Detection and Response (EDR)1 award | |||
| NCC Group Security Services Limited | — | — | Awarded |
| Lot 5 · Managed Detection and Response (MDR)1 award | |||
| NCC Group Security Services Limited | — | — | Awarded |
Contracts
Security Information and Event Management (SIEM) · NCC Group Security Services Limited
- Signed
- 27 Feb 2024
- Value
- —
- Status
- active
Extended Detection and Response (XDR) · NCC Group Security Services Limited
- Signed
- 27 Feb 2024
- Value
- —
- Status
- active
Endpoint Detection and Response (EDR) · NCC Group Security Services Limited
- Signed
- 27 Feb 2024
- Value
- —
- Status
- active
Managed Detection and Response (MDR) · NCC Group Security Services Limited
- Signed
- 27 Feb 2024
- Value
- —
- Status
- active
Bid statistics published by the authority
| Lot | Bids | SME | VCSE | Valid bid range |
|---|---|---|---|---|
| 2 · Security Information and Event Management (SIEM) | 13bids · 13 electronic · 13 from abroad | 6 | — | — |
| 3 · Extended Detection and Response (XDR) | 13bids · 13 electronic · 13 from abroad | 6 | — | — |
| 4 · Endpoint Detection and Response (EDR) | 13bids · 13 electronic · 13 from abroad | 6 | — | — |
| 5 · Managed Detection and Response (MDR) | 13bids · 13 electronic · 13 from abroad | 6 | — | — |
Contracting authority & participating public bodies
Dispute resolution & review bodies
- Glasgow Sheriff CourtReview body
Bidders & participating suppliers
1 commercial party on the notice- NCC Group Security Services LimitedAwarded supplier
Official documents & specifications (2)
Official links; attachments are not copiedTender pack and attachments
- Economic and financial selection criteria
- Technical selection criteria