Section one: Contracting entity
one.1) Name and addresses
ScotRail Trains Ltd
Atrium Court, , 50 Waterloo Street
Glasgow
Contact
Kathleen Gay
Telephone
+44 3448110141
Country
United Kingdom
NUTS code
UKM - Scotland
Internet address(es)
Main address
Buyer's address
https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA30589
one.2) Information about joint procurement
The contract is awarded by a central purchasing body
one.6) Main activity
Railway services
Section two: Object
two.1) Scope of the procurement
two.1.1) Title
ScotRail Cyber Security Architecture
Reference number
SR032
two.1.2) Main CPV code
- 48000000 - Software package and information systems
two.1.3) Type of contract
Supplies
two.1.4) Short description
ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives:
Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches
two.1.6) Information about lots
This contract is divided into lots: Yes
two.2) Description
two.2.1) Title
Security Information and Event Management (SIEM)
Lot No
2
two.2.2) Additional CPV code(s)
- 48000000 - Software package and information systems
two.2.3) Place of performance
NUTS codes
- UKM - Scotland
two.2.4) Description of the procurement
ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches
The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots:
- Lot 1 - Privileged Access Management (PAM)
- Lot 2 - Lot 2 - Security Information and Event Management (SIEM)
- Lot 3 - Extended Detection and Response (XDR)
- Lot 4 - Endpoint Detection and Response (EDR)
- Lot 5 - Managed Detection and Response (MDR)
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Extended Detection and Response (XDR)
Lot No
3
two.2.2) Additional CPV code(s)
- 48000000 - Software package and information systems
two.2.3) Place of performance
NUTS codes
- UKM - Scotland
two.2.4) Description of the procurement
ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches
The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots:
- Lot 1 - Privileged Access Management (PAM)
- Lot 2 - Lot 2 - Security Information and Event Management (SIEM)
- Lot 3 - Extended Detection and Response (XDR)
- Lot 4 - Endpoint Detection and Response (EDR)
- Lot 5 - Managed Detection and Response (MDR)
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Endpoint Detection and Response (EDR)
Lot No
4
two.2.2) Additional CPV code(s)
- 48000000 - Software package and information systems
two.2.3) Place of performance
NUTS codes
- UKM - Scotland
two.2.4) Description of the procurement
ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches
The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots:
- Lot 1 - Privileged Access Management (PAM)
- Lot 2 - Lot 2 - Security Information and Event Management (SIEM)
- Lot 3 - Extended Detection and Response (XDR)
- Lot 4 - Endpoint Detection and Response (EDR)
- Lot 5 - Managed Detection and Response (MDR)
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
two.2) Description
two.2.1) Title
Managed Detection and Response (MDR)
Lot No
5
two.2.2) Additional CPV code(s)
- 48000000 - Software package and information systems
two.2.3) Place of performance
NUTS codes
- UKM - Scotland
two.2.4) Description of the procurement
ScotRail Trains Limited (SRT) invites prospective suppliers to participate in this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection and management for privileged accounts; Rationalise and/or integrate and mesh cyber security systems together to ensure events are correlated and a view can be taken across multiple systems; Improve ScotRail's ability to prevent cyber security events and breaches; Improve ScotRail's ability to detect cyber security events and breaches; Improve ScotRail's ability to contain cyber security events and breaches; Improve ScotRail's ability to recover from security events and breaches
The opportunity is split into the following Lots and suppliers are invited to apply for 1 or multiple lots:
- Lot 1 - Privileged Access Management (PAM)
- Lot 2 - Lot 2 - Security Information and Event Management (SIEM)
- Lot 3 - Extended Detection and Response (XDR)
- Lot 4 - Endpoint Detection and Response (EDR)
- Lot 5 - Managed Detection and Response (MDR)
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
Section four. Procedure
four.1) Description
four.1.1) Type of procedure
Negotiated procedure with prior call for competition
four.1.8) Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement: Yes
four.2) Administrative information
four.2.1) Previous publication concerning this procedure
Notice number: 2023/S 000-011496
Section five. Award of contract
Lot No
2
Title
Security Information and Event Management (SIEM)
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
27 February 2024
five.2.2) Information about tenders
Number of tenders received: 13
Number of tenders received from SMEs: 6
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 13
Number of tenders received by electronic means: 13
The contract has been awarded to a group of economic operators: No
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Telephone
+44 1612095200
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
Section five. Award of contract
Lot No
3
Title
Extended Detection and Response (XDR)
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
27 February 2024
five.2.2) Information about tenders
Number of tenders received: 13
Number of tenders received from SMEs: 6
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 13
Number of tenders received by electronic means: 13
The contract has been awarded to a group of economic operators: No
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Telephone
+44 1612095200
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
Section five. Award of contract
Lot No
4
Title
Endpoint Detection and Response (EDR)
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
27 February 2024
five.2.2) Information about tenders
Number of tenders received: 13
Number of tenders received from SMEs: 6
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 13
Number of tenders received by electronic means: 13
The contract has been awarded to a group of economic operators: No
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Telephone
+44 1612095200
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
Section five. Award of contract
Lot No
5
Title
Managed Detection and Response (MDR)
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
27 February 2024
five.2.2) Information about tenders
Number of tenders received: 13
Number of tenders received from SMEs: 6
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 13
Number of tenders received by electronic means: 13
The contract has been awarded to a group of economic operators: No
five.2.3) Name and address of the contractor
NCC Group Security Services Limited
XYZ Building, 2 Hardman Boulevard, Spinningfields,
MANCHESTER
M3 3AQ
Telephone
+44 161209200
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
Section six. Complementary information
six.3) Additional information
(SC Ref:761953)
six.4) Procedures for review
six.4.1) Review body
Glasgow Sheriff Court
Glasgow
Country
United Kingdom