Advisory services for preparing and following up BSI IT-Grundschutz audits

Summary

The Logistics Centre of Lower Saxony is procuring information security management advice for the Lower Saxony, Bremen and Hamburg EU Paying Agency and the Lower Saxony Service Centre for Land Development and Agricultural Support, in preparation for and follow-up to annual ISO 27001 certification or surveillance audits based on BSI IT-Grundschutz. The work includes advice on developing the information security management system, assessing new security building blocks, internal audits, audit preparation and support, and advice on preparing an action plan. The estimated workload is approximately 60–80 person-days per year, with up to 50 additional days in exceptional cases; the contract may be extended for up to six years.