Supply and implementation of an integrated cybersecurity platform for Mercasevilla

Summary

The tender seeks an integrated cybersecurity platform for Mercasevilla, including licences and subscriptions, implementation, configuration, integration, support, maintenance, updates, technical monitoring, training and knowledge transfer. The solution must protect workstations, servers, mobile devices, Microsoft 365 and email, and provide extended detection and response, security information and event management, Zero Trust access, control over the use of artificial-intelligence services, and exposure and vulnerability management. A separate compliance-management platform must also be implemented to manage assets, risks, security measures, documentation, incidents, business continuity, the supply chain and data-protection obligations. Minimum capacity includes email and collaboration protection for 50 users; Zero Trust and AI-service access controls for 60 users; exposure management for 60 devices; protection for 50 user endpoints and 10 servers; 15 mobile devices; and a compliance platform for five named users. The security information and event management system must handle at least 5 GB of security data per day, keep data available for analysis for at least 90 days, and retain archived data for at least 24 months. The initial contract term is three years, with up to two one-year extensions, for a maximum total term of five years. Initial implementation, configuration, integration, migration, testing and production launch must be completed within 90 calendar days. At least 10 on-site implementation days are required during the first month; 24 on-site service-monitoring days per year are included during operation. Critical incidents must receive support 24 hours a day, 7 days a week, year-round. Evaluation awards 65 points for price, up to 5 for a shorter implementation period, up to 5 for improved support availability and up to 25 for the technical proposal. A minimum of 12.5 out of 25 technical points is required to remain in the competition. The initial tender budget is EUR 31,200 excluding VAT (EUR 37,752 including VAT); the estimated total contract value, including extensions and possible modifications, is EUR 58,240 excluding VAT. The contract is not divided into lots. Bidders must submit a detailed technical proposal and a requirement-by-requirement compliance matrix, and demonstrate the required turnover, comparable experience and staffing. At least one social or environmental contract-performance condition and compliance with the ethical obligations are required. No bid security or ordinary final performance guarantee is required, although a supplementary guarantee equal to 5% may be requested for an abnormally low bid.