Information security services procurement for SFM

Summary

This tender concerns the procurement of information security services for SFM, including ongoing IT governance and information security management (GRC), planning for ENS certification and monitoring, risk assessment, policy and standard updates, training and awareness programs, and supplier management. The contract will establish and maintain an ENS certification plan and ensure data protection, confidentiality, and compliance throughout the service lifecycle; it includes audits, qualitative and quantitative service assessment, and coordination of responsibilities and tasks. The contract duration is 18 months with an option to extend up to 9 months, covering contractual and data-related obligations and documentation.