Public procurement notice: Contract Notice
Published: 2021-06-08
Buyer: Banca Națională a României
Country: RO
Contract type: Services
Procedure: Open procedure
CPV classification: 72820000: Computer testing services
Estimated value: 600000 EUR
Submission deadline: 2021-07-12
Award criteria: The most economic tender

Technical requirements: Achiziție comună/Joint Procurement: teste de penetrare infrastructură informatică/Supply of IT Security Assessment Services: Penetration Testing/IT Security Assessment Services according to the TIBER-EU framework
Malta Financial Services Authority, Triq l-Imdina, Zone 1, Central Business District, Birkirkara, Malta
Other institutions, having the right to participate in EPCO’s activities (according to Decision ECB/2008/17 as amended), which did not express an interest in this procedure before the publication of the contract notice in the OJEU will also have the possibility to join the Framework Agreements - if they wish so - before its expiry. The identity of EPCO members may be consulted on EPCO's website: https://epco.lu/.
The objective of the current joint tender procedure is to contract the services for identifying the cybersecurity risks and for guidance to take appropriate technical and organizational measures to minimize those risks within current and future EPCO members of the ESCB.
To cover a wider scope, according to the testing methodology, the National Bank of Romania identified three lots for the joint tender procedure:
• Lot no. 1 - IT Security Assessment Services in line with the latest Regular Penetration Testing Execution Standards;
Each lot will result in a framework agreement with the following characteristics: multi-supplier framework agreement (max 5), with reopening the competition. For all Participating Institutions, except NBR, this Framework Agreement shall be non-exclusive, meaning that these Participating Institutions will not have obligation to award assignments to the Contractor according to this Framework Agreement for the purchase of IT Security Assessment Services with the Contractor. For NBR this Framework Agreement shall be exclusive, meaning that during the term of this Framework Agreement NBR will have the obligation to fulfill its needs for IT Security Assessment Services through this Framework Agreement by concluding Further Agreements with the Contractors.
All current and future EPCO member central banks are together potential beneficiaries of the Framework Agreements, which the Participating Institutions will implement via reopening of the competition (mini-competition) among the Contractors. Each Participating Institution shall be entitled to describe its specific needs regarding the IT Security Assessment Services (the IT infrastructure that needs to be tested), apply its own offers evaluation methodology, and quality/price weighting within the terms of the Framework Agreement to assign the Further Agreements.
Deadline for requesting clarifications to the award documentation: 16 days before the deadline for submission of offers
Date of response to all requests for clarification: 11 days before the deadline for submission of offers
According to the requested manner of preparing and presenting the tenders, the tenderers can submit their tenders for one or all lots.
Regarding the estimated volume in the case of participating institutions, EPCO members, the following information will be taken into account:
• interested Institutions in using the framework agreements from the beginning: Banco de Espana, Banque Centrale du Luxembourg, Central Bank of Cyprus, Central Bank of Ireland, Central Bank of Malta, Oesterreichische Nationalbank, European Central Bank, Banca d'Italia, Malta Financial Services Authority.
• The total estimated volume based on the information provided by the institutions listed above, for all lots, for a period of 4 years: 2,975,636 EURO
• The total real value of the further agreements could increase considerably considering that any other EPCO participating institution (https://epco.lu/) has the right to access the framework agreements that will result from this joint procurement.

Eligibility requirements: The DUAE completed with reference data / information in relation to the provisions of art. 164 of Law no. 98/2016. DUAE will be presented for each entity participating in the award procedure, respectively Tenderer, associate, subcontractor or third party supporter. The supporting documents proving the fulfillment of those assumed by completing the DUAE are to be presented at the contracting authority's request, only by the Tenderers ranked on the first 5 places in the intermediate ranking drawn up at the end of the evaluation of the tenders. Documents that may be requested: — criminal record for the Tenderer and for the persons who are members of the administrative, management or supervisory body of the respective Tenderer or have the power of representation, decision or control within it, as it results from the ascertaining certificate issued by ONRC / act constitutive. For foreign tenderers, any document considered edifying in the country of origin or in the country where it is established is accepted, such as declarations on their own responsibility, certificates, criminal records or other equivalent documents issued by the competent authorities of that country, accompanied by an authorized translation. in Romanian. Requirement no. 2 Reasons related to the payment of taxes and social security contributions The manner of fulfillment and the applicability within the procedure The DUAE completed with reference data / information in relation to the provisions of art. 165 of Law no. 98/2016. DUAE will be presented for each entity participating in the award procedure, respectively tenderer, associate, subcontractor, or third party supporter. The supporting documents proving the fulfillment of those assumed by completing the DUAE are to be presented at the contracting authority's request, only by the Tenderers ranked on the first 5 places in the intermediate ranking drawn up at the end of the evaluation of the tenders. Documents that may be requested: — fiscal attestation certificates regarding the payment of taxes, fees or contributions to the general consolidated budget, etc. so as to show the lack of outstanding debts at the date of presentation of the documents, — documents proving that the economic operator can benefit from the derogations provided in art. 166 para. (2), art. 167 para. (2), art. 171 of Law no. 98/2016 (if applicable). For foreign Tenderers, any document considered edifying in the country of origin or in the country where it is established is accepted, such as declarations on their own responsibility, certificates, criminal records or other equivalent documents issued by the competent authorities of that country, accompanied by an authorized translation. in Romanian. Requirement no. 3 Reasons related to insolvency, conflicts of interest or professional misconduct. The manner of fulfillment and the applicability within the procedure The DUAE (Part III - Reasons for exclusion) completed with reference data / information in relation to the provisions of art. 167 of Law no. 98/2016. DUAE will be presented for each entity participating in the award procedure, respectively tenderer, associate, subcontractor or third party supporter. The supporting documents proving the fulfillment of those assumed by completing the DUAE are to be presented, at the request of the contracting authority, only by the Tenderers ranked on the first 5 places in the intermediate ranking drawn up at the end of the evaluation of the tenders: — for the Romanian economic operator - ascertaining certificate issued by the Trade Register Office attached to the competent territorial Tribunal. From the ascertaining certificate / register extract presented it must result: a) the condition of the tenderer; b) the persons representing the tenderer in the relationship with third parties. The information contained in this document must be real / current at the date of submission. Itcano prove the capacity to exercise the professional activity by presenting the ascertaining certificate issued by ONRC in electronic form, signed with the extended electronic signature. — for a foreign economic operator: the tenderer will present edifying documents, translated into Romanian by an authorized translator, real / current at the date of presentation, proving a form of registration as a natural / legal person or registration / attestation or belonging from the point from a professional point of view and in which to mention the persons representing the entity in relations with third parties, in accordance with the legal provisions of the country in which the Tenderer is resident. Also, the submitted documents must include information on the status of the Tenderer. NOTE: The supporting documents will be presented for each entity participating in the award procedure, respectively tenderer, associate, subcontractor or third party supporter. The persons with decision-making positions within the contracting authority, regarding the organization, development and completion of the award procedure are: National Bank of Romania Board of Directors: • Governor - Mugur Isarescu • First Deputy Governor - Florin Georgescu • Deputy Governor - Eugen Nicolaescu • Deputy Governor - Leonardo Badea • Member - Csaba Bálint • Member - Cristian Popa • Member - Dan Radu Rușanu • Member - Gheorghe Gherghina • Member - Virgiliu Stoenescu Management of the Procurement Department • Gabriela Preda - Director • Petre Augustin Dutu - Deputy Director Management of the Budget and Financial Analysis Department • Ion Paduraru - Director • Gabriela Latea - Deputy Director Management of the Accounting Department • Iulia Stanciu - Director • Daniela Ilie - Deputy Director Management of the Legal Department • Alexandru Paunescu - Director Management of the IT Services Department • Ovidiu Dragomir - Director • Tiberiu Parvulescu - Deputy Director Information and formalities necessary for evaluating if the requirements are met: Information regarding the capacity to exercise the professional activity The manner of fulfillment and the applicability within the procedure The DUAE (Part IV A - Ability to comply with the requirements) supplemented with reference data / information in relation to the provisions of art. 173 of Law no. 98/2016. The supporting documents proving the fulfillment of those assumed by completing the DUAE are to be presented, at the request of the contracting authority, only by the Tenderers ranked on the first 5 places in the intermediate ranking drawn up at the end of the evaluation of the tenders: — for the Romanian economic operator - ascertaining certificate issued by the Trade Register Office attached to the competent territorial Tribunal. From the ascertaining certificate / register extract presented it must result: a) the main activity object and the secondary activity objects. The object of the contract must have a correspondent in the CAEN code from the Finding Certificate issued by ONRC b) the legal situation of the Tenderer and his condition; c) the persons representing the bidder in the relationship with third parties. The information contained in this document must be real / current at the date of submission. It can prove the capacity to exercise the professional activity by presenting the ascertaining certificate issued by ONRC in electronic form, signed with the extended electronic signature. — for a foreign economic operator: the tenderer will present edifying documents, translated into Romanian by an authorized translator, real / current at the date of presentation, proving a form of registration as a natural / legal person or registration / attestation or belonging from the point professionally and in which to mention the persons representing the entity in relations with third parties, in accordance with the legal provisions of the country in which the bidder is resident. Also, the submitted documents must contain information on the status of the bidder. NOTE: The supporting documents will be presented for each entity participating in the award procedure, respectively tenderer, associate, subcontractor or third party supporter.

Award value: 600000