Internal audits and security reviews for the information security of the European Union paying agency

Summary

The tender concerns flexibly requested internal audit and security review services for the information security framework of the Brandenburg-Berlin EU paying agency. The framework is certified under ISO 27001 on the basis of BSI IT-Grundschutz. Approximately four audits per year are planned, covering the Ministry, the directly subordinate authority and other organisations and service providers involved in the paying agency process. The multi-year follow-on contract is intended to ensure continuous auditing until 2030. The work is intended for demonstrably experienced experts in information security auditing or ISMS auditing under BSI IT-Grundschutz. The submission deadline is 22 September 2026.