Management and operation of RedIRIS's DDoS security service

Summary

The tender covers management, administration and operation of RedIRIS’s DDoS attack mitigation platform. The work includes round-the-clock platform and network-traffic monitoring, attack detection and mitigation, incident resolution, equipment configuration and software updates, coordination with RedIRIS-affiliated institutions and equipment manufacturers, and regular reporting and technical documentation. Physical hardware maintenance and replacement are excluded, but the contractor must open, escalate and follow hardware incident cases with the manufacturer through to resolution. The work has two components: platform administration mainly at Red.es’s Madrid office on working days for eight hours a day, and incident management and attack mitigation from the contractor’s Spain-based SOC, available 24/7. The SOC must handle simultaneous attacks, and the service must be available in Spanish and English. The contractor must provide two independent connections to RedIRIS in Madrid, each with at least 100 Mbps symmetrical capacity. The contract lasts two years, with the possibility of two consecutive one-year extensions. The maximum value for the initial term is €775,000 excluding indirect taxes; the estimated total value including extensions is €1,550,000. Tenderers must demonstrate the required turnover, relevant service experience and EN ISO 27001 or an equivalent certificate or evidence. Four specialists meeting the specified qualifications and experience must be assigned to the work, together with additional staff to ensure continuous SOC coverage. Arbor T3 certification and a high-level national security compliance certificate for the SOC are required. Price accounts for 65% of the evaluation; the remaining 35% depends on technical improvements and additional staff experience. The bid must be a single offer without alternatives and must not exceed €775,000 excluding applicable indirect taxes.