Cyber threat analysis and risk management service for the .es ccTLD registry

Summary

This tender concerns the provision of cyber threat analysis and risk management services for the Red.es ccTLD registry .es. The supplier must deliver a holistic solution covering context understanding, asset and threat inventory, cyber threat analysis, risk assessment, risk treatment planning, design of a metrics and dashboard system, and knowledge transfer at project closure. The contract requires compliance with ENS/ISO 27001 and NIS2 requirements, collaboration with partners, and proper evaluation and compliance requirements.