Public procurement notice: Contract Notice
Published: 2025-07-01
Buyer: SYKEHUSINNKJØP HF
Country: NO
Region: NO072
Contract type: Services
Procedure: Negotiated with prior call for competition
CPV classification: 48730000: Security software package | 48732000: Data-security software package | 72000000 | 72200000 | 72212730
Submission deadline: 2025-08-25

Technical requirements: Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003,  p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted of fraud has been convicted of fraud by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Fraud included in Article 1 of the Convention on protection of the Financial Interests of the European Communities (EFT C 316 of 27.11.1995, p. 48).
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of money laundering or financing terrorism by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Money laundering or financing terrorism As defined in Article 1 of the European Parliament and Council Directive 2005/60/EF of 26 October 2005 on preventive measures against the use of the financial system for money laundering and financing terrorism (EUT L 309 of 25.11.2005, p. 15).
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body, or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of acts of terrorism or criminal acts connected to terrorist activities by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Acts of terrorism or criminal acts relating to terrorist activity as defined in Article 1 and 3 of the Council ́s framework decision 2002/475/RIA of 13 June 2002 on combating terrorism (EFT L 164, af 22.6.2002, p. 3). This rejection reason also includes incitement to, participation or attempts to commit such actions as included in Article 4 in the mentioned framework decision.

Eligibility requirements: Tenderers are registered in a company register or a trade register in the member state in which the tenderer is established. As described in annex XI of directive 2014/24/EU; suppliers from certain member states may have to fulfil other requirements in the mentioned annex.
Minimum qualification requirements
Company Registration Certificate, cf. qualification requirement 1.
Is a specific authorisation required from a particular organisation to provide the service in the tenderer's home country?
Minimum qualification requirements
Supplier certification in NSM, c.f. qualification requirement 2.
Tenderers are asked to provide information on the three most important and most relevant deliveries in the last three years, including information on the value and time, as well as the name of the public or private recipient.
a) The tenderer's workforce for this type of delivery at the time of the tender offer.
b) CVs for the assignment manager.
Tenderers shall document certification of licence numbers for EMAS, ISO 14001 or Miljøfyrtårn, issued by independent bodies. The certification shall be valid at the start of the agreement and for the entire contract period.

If the Tenderer shall be re-certified during the contract period, a new valid certificate shall be sent to the Customer as soon as it is ready and without request.
Tenderers shall give a short account of the most important information security measures, methods and tools used (risk assessment, access control, handling of deviations, continuous improvement etc.).

If a Tenderer is certified in accordance with ISO/IEC 27001 or has another certified third-party certification for information security (e.g. CSA STAR Certification, HITRUST CSF or SOC 2 Type II) - it is sufficient to enclose a copy of a valid certificate.
Tenderers shall have sufficient economic and financial solidity to fulfil the contractual obligations. 
Tenderers are required to fulfil the following terms (all the terms apply for the last available financial year).

Equity:
• Total equity (EK) minimum NOK 5,000,000
Solidity (equity ratio in %):
• Greater than or equal to 10%.
Liquidity degree 1:
• Greater than or equal to 0.9
10 day waiting period after award of contract.
The aim of this procurement is to establish a strategic cooperation with an external security partner who shall strengthen Helse Nord ICT ́s ability to prevent, detect and handle advanced digital threats. This includes the procurement of a general 24/7/365 Security Operations Center (SOC) and Incident Response Team (IRT) service, as well as accompanying consultancy services.