Conducting information system security, performance and compliance audits

Summary

The tender concerns security, performance and compliance audits of information systems and related infrastructure. It is divided into five lots: cybersecurity governance compliance audits; system security testing, including vulnerability analysis and penetration testing; source-code and technical-configuration security assessments; infrastructure security audits; and performance testing. Bidders may apply for one, several or all lots, but variants are not permitted. A framework agreement will run for 48 months or until the maximum aggregate value of EUR 142,000 excluding VAT is reached, whichever occurs first. Services may be performed on site in Latvia or remotely. Each assignment must generally be completed within 20 working days after the required information and access are provided. The award procedure evaluates price with 40 points and additional qualified specialists with 60 points. Offers must be submitted electronically by 1 October 2026, according to the notice metadata.