Public procurement notice: Buyer Profile
Published: 2018-06-15
Buyer: European Space Agency (ESRIN)
Country: IT
Contract type: Services
CPV classification: 73000000

Technical requirements: The Earth observation enhanced security operations services (eSOS) for Copernicus addresses the gap between the new generation of cyber-attacks and the traditional security defence approach.
The eSOS is a prevention-driven cyber security solution that is powered by the most advanced threat prevention solutions, identifies and blocks advanced cyber-attacks. The service advices EOP regarding the main threats and vulnerabilities, it elaborates an overall level of security, and it provides guidance for optimization and enhancement of the security operational chain, including the reduction of false positives.
1) detection of the security incidents based on the analysis of anomalies received from the relevant interfaces of the Copernicus entities, and from the contractor’s provided cyber-security solution;
2) Handling of blocking incidents (with full 24/7 service coverage) with the provisioning of manned and continuous support to the Sentinel missions;
3) Deployment and operation of an enhanced cyber security solution capable of monitoring and analysing activity on networks, servers, endpoints, applications, websites and other systems, looking for anomalous activity that could indicate a security breach;
4) Interface with ESA security entities and international partners for full coordination with the ESA emergency response team, the Security Operation Centre and the security team of the different international partners;
5) Security advisor function that includes proactive advises on the cyber-risks and on-demand requests for specific issues. Alerts and suggestions on the threats assessment and containment actions are part of this task as well;
6) Security Posture assessment of the infrastructure in scope (physical, virtual and cloud) in order to verify the current level of risk and identify the mitigation actions. Penetration test and vulnerability assessment will be part of this process and will be performed on a regular basis. Other Security services will be considered by the Agency in the frame of the contract (Extended Log Collection and analysis, endpoint security solution, Security deception solution, Service extension to other ESA entities and partners).
This intended ITT will be published on Emits under the following reference numbers: AIRN number 18.187.06 and AO number 1-9450. This Invitation to tender will be issued by the European space agency (ESA). It will be open exclusively to economic operators that have their registered office in an EU Member state or Iceland or Norway.
The European space agency (ESA) will make the ITT (Cover letter, Statement of work, Special conditions of tender, Draft contract) available on its tendering website (Emits http://emits.sso.esa.int/emits/owa/emits.main).
And on its dedicated Copernicus server (https://copernicus-emits.esa.int/). In order to access the ITT package from Emits, a Tenderer must be registered as a potential ESA Tenderer.
Any potential Tenderers wishing to register with ESA as a potential Tenderer is requested to complete the online questionnaire on the “esa-star registration” website: https://esastar-emr.sso.esa.int While the registration process is underway, Tenderers may access the ITT package through ESA’s dedicated Copernicus server, which is accessible at: https://copernicus-emits.esa.int/
Tenderers are informed, however, that before submitting a proposal they must at least have completed the “light registration” as described in the following “esa-star” Registration Manual: http://esamultimedia.esa.int/docs/business_with_esa/CG-EM-ORR-S-16_End_User_Manual_v1.2.pdf
Further information on the registration process can be found on the Industry Portal pages available at: http://www.esa.int/About_Us/Business_with_ESA/How_to_do/esa-star_Registration_Process