Public procurement notice: Contract Notice
Published: 2017-03-15
Buyer: Statens arbeidsmiljøinstitutt
Country: NO
Region: Oslo
Contract type: Services
Procedure: Competitive procedure with negotiation
CPV classification: 72000000
Submission deadline: 2017-04-19
Award criteria: The most economic tender

Technical requirements: Υπηρεσίες τεχνολογίας των πληροφοριών: παροχή συμβουλών, ανάπτυξη λογισμικού, Διαδίκτυο και υποστήριξη
This is a pre-qualification. You do not need to submit a complete tender now, only an application to be invited to submit a tender in a later phase.
Stami, (hereafter called the Contracting Authority), shall enter into a contract for the implementation of a secure zone model on STAMI's IT infrastructure. The intention of implementing such a model is to ensure that the institute's IT services users have access based on service need and from relevant locations. The model shall see to and ensure that STAMI fulfils existing and new legislation on information security and personal information (the new amendments come into force from 1.1.2018), including secure storage of personal information.
This is a pre-qualification. You do not need to submit a complete tender now, only an application to be invited to submit a tender in a later phase.
Stami, (hereafter called the Contracting Authority), shall enter into a contract for the implementation of a secure zone model on STAMI's IT infrastructure. The intention of implementing such a model is to ensure that the institute's IT services users have access based on service need and from relevant locations. The model shall see to and ensure that STAMI fulfils existing and new legislation on information security and personal information (the new amendments come into force from 1.1.2018), including secure storage of personal information.
STAMI shall implement a strengthened model for security and zone design on our infrastructure. The STAMI IT strategy has the following template for the ICT unit: ‘2. We shall ensure satisfactory IT security, which is not at the cost of flexible, user friendly systems. A principle is that sensitive personal information is stored on the servers that are localised in STAMI's computer room in Gydas vei. Users get access to data based on their service need’. One of the measures that supports the above aim is this: ‘Implement a flexible zone model that only allows those who have a service need access and that fulfils the requirements for securing data and traceability. Sensitive personal data shall be stored centrally. Access management to sensitive personal information is to be a part of the secure zone model.’ A zone can be an individual VLAN that does not have any restrictions on communication between connected units, but STAMI is open to tenderers' system proposals as to how a secure zone model shall be designed, based on best practice related to IT security and the amended Personal Information Act, which comes into force from 2018. The procurement shall see to the obligatory securing of STAMIs 1. IT-Infrastructure 2. PC-park, both laptop and stationary machines 3. Other clients (equipment) that are used for work, such as mobiles, tablets, etc. The aim is to prevent unauthorised access to infrastructure and accompanying services. STAMI shall protect from external threats and ensure that internal employees get access according to what their service requirements are. The implemented model must fulfil the obligatory requirements, such as the eManagement regulations § 15, the new Personal Information Act, which will apply from 2018 and other relevant legislation.
The procurement involves recommending a model that fulfils the above requirements and the chosen tenderer shall implement and commission the model in STAMI's IT environment with the help of proposals for methodology, tools, hardware and raising competence of employees at different levels of the organisation. Furthermore, the tenderer shall see to preparing relevant documentation, both for STAMI's in-house users and for the technical system and operational documentation.
Those who are invited to submit a tender will receive a current situation report that a supplier has prepared in cooperation with STAMI in autumn 2016.
Stami operates most of the services itself, from its own ICT environment. The IT service portfolio consists of both Linux and Windows based systems, e.g. MySQL and MS-SQL, Apache, VMware vCenter, AD, Cisco.
The procurement's value is estimated to 1 760 000 NOK  excluding VAT. The volume is an estimate and not binding.