Internal Audits and Security Reviews to Maintain the Information Security of the EU Paying Agency at MLEUV

Summary

The tender covers the planning and performance of internal audits and security reviews for the information security system of the Brandenburg-Berlin EU paying agency, based on the BSI IT-Grundschutz and ISO 27001 principles. The work consists of audits ordered flexibly during 2027–2030; the contracting authority may order up to two additional audits in 2026. The core scope is 18 audits and approximately 180 person-days, normally four audits per year and around 10 person-days per audit. The bidder must provide an experienced lead auditor, the required certifications and at least two suitable reference projects from the last three years. The tender must include an implementation concept of no more than 10 pages. The electronic tender must be submitted in German by 28 September 2026 at 12:00. Quality evaluation gives 60% to auditor experience and 40% to the implementation concept; tenders scoring below 60% of the quality points are excluded.