Public procurement notice: Contract Notice
Published: 2025-08-13
Buyer: Digitaliseringsdirektoratet
Country: NO
Region: NO081
Contract type: Services
Procedure: Negotiated with prior call for competition
CPV classification: 48732000: Data-security software package | 72000000 | 72200000 | 72212730 | 72212731
Estimated value: 16000000 NOK
Submission deadline: 2025-09-16

Technical requirements: Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003,  p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted of fraud has been convicted of fraud by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Fraud included in Article 1 of the Convention on protection of the Financial Interests of the European Communities (EFT C 316 of 27.11.1995, p. 48).
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of money laundering or financing terrorism by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Money laundering or financing terrorism As defined in Article 1 of the European Parliament and Council Directive 2005/60/EF of 26 October 2005 on preventive measures against the use of the financial system for money laundering and financing terrorism (EUT L 309 of 25.11.2005, p. 15).
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body, or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of acts of terrorism or criminal acts connected to terrorist activities by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Acts of terrorism or criminal acts relating to terrorist activity as defined in Article 1 and 3 of the Council ́s framework decision 2002/475/RIA of 13 June 2002 on combating terrorism (EFT L 164, af 22.6.2002, p. 3). This rejection reason also includes incitement to, participation or attempts to commit such actions as included in Article 4 in the mentioned framework decision.

Eligibility requirements: Tenderers are registered in a company register or a trade register in the member state in which the tenderer is established. As described in annex XI of directive 2014/24/EU; suppliers from certain member states may have to fulfil other requirements in the mentioned annex.
Minimum qualification requirements
Documentation requirement: Tenderers shall be a legally established company. Norwegian companies shall enclose a company registration certificate. Foreign companies: Verification that the company is registered in a trade register, company register, professional register or a commerce register as prescribed by the law of the country where the tenderer is established.
The tenderer does not have significant arrears:
Requirement: The tenderer does not have significant arrears in connection with payment of taxes, VAT and social security contributions. Documentation requirement: Norwegian tenderers: Tax and VAT certificate from the tax authorities. Not older than 6 months calculated from the deadline for requests to participate in the competition. The contracting authority will obtain a certificate via e Proof if a licence is given. If a tenderer does not give consent to the use of an e-Certificate on tax certificates, the documentation must be submitted manually by the tenderer. Foreign tenderers must provide certificates from authorities equivalent to the Norwegian authorities.
Economic and financial qualifications:
Requirement: The tenderer shall have sufficient financial strength to be able to fulfil the contract. Documentation requirement: The tenderer (i.e. the tenderer) shall enclose a credit rating from a certified credit institution/company. The credit report shall be based on the last known accounting figures. The credit assessment shall include a so-called rating (credit rating, part judgement and historical rating). The credit rating shall not be lower than score A (credit worthy) or equivalent if a different rating is used (assessment of figures). Tenderers with a rating lower than A or equivalent (i.e. not credit worthy or credit worthy with security) will not be considered. Newly established tenderers shall not be worse than AN (creditworthy newly established companies) or equivalent if a different rating is used (number rating).
Requirement: The tenderer shall have relevant competence and the capacity to carry out the service. The entity is required, in total, to have provided such services for at least 3 years. Documentation requirement: A short, overall description shall be given of the company (maximum three pages), including: - The company's core competence related to the service - Possibly implementation methodology and certifications - The company's experience with different technologies and tools for security monitoring services - The organisation of the company - how the tenderer is organised for the execution of this agreement, including a description of which parts of the assignment shall be taken care of by sub-suppliers -  How the tenderer will ensure good capacity for the execution of this contract - Confirmation that the company has been carrying out such services for at least three years If the tenderer is newly established, the experience requirement can be fulfilled by one or several employees at the tenderer.
Requirement: Tenderers shall not have ownership interests from actors who are deemed to have malicious intentions or who can pose a security risk. This includes, but is not limited to, ownership of countries or entities subject to international sanctions or that have a history of unethical or illegal activity. Documentation requirement: Tenderers shall document the ownership structure, including the identity of all significant owners, as well as confirming that there are no ownership interests from actors who are deemed to have malicious intentions or that could pose a security risk.
Requirement: The tenderer shall have experience from similar services. Documentation requirement: A short description of three of the tenderer's most relevant contracts in the course of the last three years. Tenderers shall highlight their competence and experience and it shall, among other things, be stated: - Contact information for reference persons - Choice of technology - Choice of implementation method - Size of the assignment and the period in which the tenderer has had the roles in the assignment It is the tenderer ́s responsibility to document relevance through the description. The contracting authority reserves the right to contact the references in order to verify the information.
Ten day waiting period.
Digdir is seeking a provider of security monitoring services that can assist in detecting and preventing malicious activity connected to Altinn 3 (Hereafter referred to as "External SOC"). Digdir aims to enter into a SSA-L (Contract for ongoing service procurements) for 3 years and an option for an extension for up to 2 years. The estimated contract value is NOK 16,000,000. excluding VAT over a period of four years. The estimated value does not give any purchasing obligations.