How Cybersecurity keeps TRU West Alliance on track to deliver national infrastructure

Pressure on every front

As the largest section of the ~£11 billion TransPennine Route Upgrade, TRU West Alliance is responsible for delivering one of the UK’s most complex rail modernisation programmes. The work will reshape how people travel between Manchester and York, with electrification, major station upgrades and new infrastructure across a busy commuter route. 

Operating at this scale demands precision, discipline and strong governance. TRU West has established a tightly controlled digital environment to support delivery, recognising that cybersecurity plays an important role in maintaining programme momentum, protecting partner data and upholding trust across the Alliance. 

With multiple partners working within a shared environment, maintaining consistent security standards and visibility is essential to ensuring systems remain secure and the programme continues to progress as planned. 

A digital environment that feels safe

TRU West’s approach to cybersecurity has always been grounded in control and clarity. With Microsoft Office 365 acting as the central gateway to systems and access across the Alliance, maintaining a secure and well-managed environment is critical. 

The focus was not on introducing unnecessary complexity, but on reinforcing confidence. This meant ensuring continuous monitoring, clear visibility of activity, and the ability to respond quickly and effectively when required. Above all, the goal was to maintain a secure, stable digital environment that supports delivery rather than distracting from it. 

Gaps, pressure and the need for buy-in 

Chris Harrison, Head of Business Systems, recognised that as the programme evolved, so too would the demands placed on cybersecurity. While strong foundations were already in place, additional capability was needed to provide continuous coverage and specialist support aligned to the scale of the programme. 

A Deloitte audit commissioned by Network Rail reinforced this view, highlighting opportunities to further strengthen cybersecurity processes. The findings provided a clear, independent validation of the approach and helped align stakeholders around the next phase of improvement. 

A partner or part of the team?

TRU West approached the next stage with a clear view of what was required: a partner who could complement their existing capabilities, integrate smoothly into the environment, and operate with the same focus on clarity, discipline and value. 

SCC was a natural fit. Having previously worked together within the wider TransPennine Route Upgrade programme, there was already an established relationship built on trust, transparency and consistent delivery. 

Extending that relationship allowed TRU West to build on existing foundations without introducing unnecessary complexity. SCC’s approach aligned closely with the Alliance’s own operating model, making the partnership feel like a continuation rather than a change. 

Finding peace of mind

With SCC’s Managed Extended Detection and Response (MXDR) service in place, TRU West strengthened its ability to monitor and respond to potential threats across its environment. 

The service provides continuous oversight of the Alliance’s Microsoft Office 365 platform, with analysts monitoring activity, investigating alerts and responding where required. Regular reporting and check-ins ensure visibility remains high and that the service continues to align with the Alliance’s needs. 

This additional layer of support enhances the internal team’s capability, providing reassurance that coverage extends beyond standard working hours and that potential issues are addressed promptly and effectively. 

A secure foundation for a critical project

Today, TRU West operates with a level of control and consistency that reflects both the scale of the programme and the importance of the data it manages.

Its Microsoft Office 365 environment is configured with strong security controls, providing a central point of access and governance across systems. This approach supports clear visibility, consistent policy enforcement and effective risk management across the Alliance. 

Combined with SCC’s MXDR service, this creates a resilient and well-managed security posture that protects partner data and supports the continued delivery of the programme.

As Chris put it: “It gives us peace of mind. We know SCC is watching, even when we’re not.”  

Security that helps projects succeed

The TRU West Alliance demonstrates how a disciplined approach to cybersecurity supports the successful delivery of complex infrastructure programmes.  

By combining strong internal governance with trusted external expertise, the Alliance has built a secure and stable digital environment that enables progress, protects stakeholders and maintains confidence across partners. 

With the right foundations in place, TRU West is well positioned to continue delivering.