Cybersecurity audit, implementation of an information security management system and cybersecurity training

Summary

The procurement is divided into two lots, and a tender may be submitted for either or both. Lot I covers security testing of the contracting authority’s network infrastructure, a final cybersecurity audit of its IT/OT/ICS/IIoT networks, and the development, implementation, review and updating of an Information Security Management System. It also includes preparing a business continuity plan and a disaster recovery plan for IT systems. Lot II covers cybersecurity training on implementing and applying the information security policy and management system in an IT/OT/ICS environment, as well as specialist training on existing and planned security measures. Services must be delivered on working days at the contracting authority’s premises in Lubawa. Each lot must be completed within eight weeks of contract signature and no later than 10 December 2026. The tender deadline is 6 October 2026 at 10:00. Price is the only award criterion, and the price must include all costs of delivering the relevant lot. No tender guarantee is required. To participate, tenderers must submit the completed tender form and a declaration concerning exclusion grounds and participation requirements. Additional declarations and authorisations must be included where applicable, including declarations for joint tenders and reliance on another entity’s capacity. The detailed scope for each lot is set out in the procurement documents.