Consultancy for preparing and following up BSI IT-Grundschutz recertification and surveillance audits

Summary

The Land of Lower Saxony, represented by the Service Centre for Land Development and Agricultural Support, is procuring consultancy to prepare for and follow up annual BSI IT-Grundschutz-based ISO 27001 certification audits for its information network and the EU paying agency for Lower Saxony, Bremen and Hamburg. The work includes ISMS and security-control advice, review of new security building blocks and audit reference documents, risk analysis, support for service-provider discussions and audit follow-up; it may also include 1–5 internal audits per year, each of up to five person-days. The expected workload is approximately 60–80 person-days per year, with up to 50 additional person-days in exceptional cases. The contract has an initial 24-month term and may be extended by up to four further periods of 12 months each, for a maximum total duration of six years; it is not divided into lots.