Public procurement notice: Contract Notice
Published: 2025-04-17
Buyer: Norsk Tipping AS
Country: NO
Region: NO020
Contract type: Services
Procedure: Open procedure
CPV classification: 72000000 | 72220000: Systems and technical consultancy services | 73220000 | 79000000 | 79410000
Submission deadline: 2025-05-21

Technical requirements: Is the supplier in a situation where he has been forced debt arrangement? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Is the tenderer in a bankruptcy situation? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003, p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)
Has the tenderer entered into agreement(s) with other tenderers with the intention of turning the competition?

Eligibility requirements: Requirement: Tenderers shall have satisfactory finances. • Documentation requirement: Income statement and balance with notes, as well as annual reports and auditor ́s report for the last year. In addition a cash flow statement is required for the companies that are obliged to set this up. • Credit evaluation/rating, not older than 6 months from the tender deadline. • If it is more than 6 months since the balance sheet for the last annual accounts, the sub-year accounts must be enclosed. • Any other information of relevance to the company's fiscal figures. • If a tenderer, for a justifiable reason, cannot present the documentation that Norsk Tipping has requested, he can prove his economic and financial style with any other document that the contracting authority can accept. If the tenderer has such a justifiable reason, he may contact Norsk Tipping in writing in order to clarify which other documentation is acceptable.
Tenderers are registered in a company register or a trade register in the member state in which the tenderer is established. As described in annex XI of directive 2014/24/EU; suppliers from certain member states may have to fulfil other requirements in the mentioned annex. Requirement: The tenderer shall be a legally established company. Foreign companies: Proof that the company is registered in a trade or business register as prescribed by the law of the country where the tenderer is established.
Sub-area 1 - Strategic consulting cyber security Requirement: • Tenderers shall have a satisfactory and well-functioning management system for information security. The information security system must cover all processes that are relevant for this contract and be compliant with ISO 27001 or equivalent standard. Relevant processes are in this context defined as i.a. the purpose and need of the sub area, see annex 1 chapter 2. Documentation requirement: • To document this, a description shall be enclosed of the tenderer's management system for information security (policy, procedures and guidelines), possibly enclose an ISO 27001 certificate. Lot 2 - Security testing No qualification requirements for a management system for information security. Sub-area 3 - Cyber security exercises Requirement: • Tenderers shall have a satisfactory and well-functioning management system for information security. The information security system must cover all processes that are relevant for this contract and be compliant with ISO 27001 or equivalent standard. Relevant processes are in this context defined as i.a. the purpose and need of the sub area, see annex 1 chapter 2. Documentation requirement : • To document this, a description shall be enclosed of the tenderer's management system for information security (policy, procedures and guidelines), possibly enclose an ISO 27001 certificate Sub-area 4 - Security competence, consultancy and security audits Requirement: • The tenderer shall have a satisfactory and well-functioning system for information security, as well as be certified in accordance with ISO 27001. The information security system must cover all processes that are relevant for this contract. Relevant processes are in this context defined as i.a. the purpose and need of the sub area, see annex 1 chapter 2. Documentation requirement: • To document this, enclose a valid ISO 27001 certificate.
The aim of this procurement is to enter into a consultancy agreement with one or several tenderers within information security.
Up to one year
The aim of the agreement is to continually assist the company with strategic competence, consultancy, including assisting Norsk Tipping's Board of Directors, Security Committee and Security Environment etc. Norsk Tipping would like to enter into a contract for strategic consultancy in the areas of management and control with information security, cyber security, threat assessments, strengthening the company's management system for information security etc.
The aim of the procurement is to cover Norsk Tipping ́s need for testing within main security. This area includes general testing of defence systems, but also testing quality, resilience and robustness of both the existing and new codes, systems and equipment. Norsk Tipping emphasises the entire KIT triad and would like, through testing, to gain knowledge of the condition and what measures must be taken to increase the safety of the test object and the system included in this object.