Consulting service for BSI attestation

Summary

The procurement concerns BUW’s need for a consulting service to prepare and support a BSI attestation (Basis-Absicherung) under IT-Grundschutz. The supplier will provide systematic preparation and support for the attestation, including two pre-audits, leadership training for BUW management on BSI-Grundschutz certification, quality assurance of the structural analysis, risk assessment and modelling, identification of gaps and remediation recommendations, and assistance with the external attestation process and potential future certifications (BSI IT-Grundschutz, Grundschutz++ or ISO 27001). The contract covers up to 50 person-days (minimum 30; 20 on-call), with an EVB-IT contract in place. Work is to begin after award, with capacity available from October 2026. All produced documents will be transferred to BUW ownership. The procurement is two-phased, and references must be provided as part of the bid.