Public procurement notice: Contract Notice
Published: 2025-09-25
Buyer: OFA IKS
Country: NO
Region: NO092
Contract type: Services
Procedure: Open procedure
CPV classification: 72000000 | 72200000 | 72220000: Systems and technical consultancy services | 72222300: Information technology services | 72225000: Systems quality assurance services
Estimated value: 8000000 NOK
Submission deadline: 2025-10-30
Award criteria: price, quality

Technical requirements: The framework agreement is for security testing of infrastructure, applications, cloud services (IaaS, Paas, Saas etc.).

Areas for security testing can be applications, cloud services, integrations, databases, infrastructure and system/source code. In addition there can be password testing, social manipulation, denial of service attack testing and security testing/revision of systems purchased by sub-suppliers. The list is not exhaustive.
Tax Certificate 
Documentation requirement:
The certificate must not be more than six months old. The certificate must not be more than six months from the deadline for receipt of tenders. The certificate can be obtained electronically from Altinn. See the Skatteetaten.no for further information.

Foreign tenderers:

Foreign tenderers must submit equivalent certificates from their own country that show that they have an arrangement for the payment of taxes and duties. If the authorities in the relevant country do not issue such certificates, the tenderer shall submit a statement which states that all taxes and duties have been paid. The declaration shall be approved and signed by the tenderer's Financial Director/ person responsible for Finance.
Demand:
Tenderers shall be registered in a company register, professional register or a commerce register in the country where the tenderer is established.

Documentation requirement:
• Norwegian companies: Company Registration Certificate.
• Foreign companies: Verification that the tenderer is registered in a company register, professional register or a commerce register in the country where the tenderer is established.
Quality assurance system
Demand:
Tenderers shall have implemented and functioning quality assurance systems.

Documentation requirement:
Description of the company's quality assurance system that is implemented in the company.

If a tenderer is certified in accordance with ISO 9001 or equivalent third-party verified systems, it is sufficient to enclose a copy of a valid certificate.
Economic and financial capacity Requirement:
Tenderers shall have sufficient economic and financial capacity to fulfil the contract.

The required financial capacity will be assessed in relation to the contract ́s value, services, risk and duration.

Documentation requirement:
The contracting authority will obtain a credit rating of the tenderer itself. The contracting authority reserves the right to obtain supplementary information about the tenderer's finances.

Select:
If a tenderer has a justifiable reason, they can document their economic and financial capacity by presenting other relevant documentation.

Eligibility requirements: Tax Certificate 
Documentation requirement:
The certificate must not be more than six months old. The certificate must not be more than six months from the deadline for receipt of tenders. The certificate can be obtained electronically from Altinn. See the Skatteetaten.no for further information.

Foreign tenderers:

Foreign tenderers must submit equivalent certificates from their own country that show that they have an arrangement for the payment of taxes and duties. If the authorities in the relevant country do not issue such certificates, the tenderer shall submit a statement which states that all taxes and duties have been paid. The declaration shall be approved and signed by the tenderer's Financial Director/ person responsible for Finance.
Demand:
Tenderers shall be registered in a company register, professional register or a commerce register in the country where the tenderer is established.

Documentation requirement:
• Norwegian companies: Company Registration Certificate.
• Foreign companies: Verification that the tenderer is registered in a company register, professional register or a commerce register in the country where the tenderer is established.
Quality assurance system
Demand:
Tenderers shall have implemented and functioning quality assurance systems.

Documentation requirement:
Description of the company's quality assurance system that is implemented in the company.

If a tenderer is certified in accordance with ISO 9001 or equivalent third-party verified systems, it is sufficient to enclose a copy of a valid certificate.
Economic and financial capacity Requirement:
Tenderers shall have sufficient economic and financial capacity to fulfil the contract.

The required financial capacity will be assessed in relation to the contract ́s value, services, risk and duration.

Documentation requirement:
The contracting authority will obtain a credit rating of the tenderer itself. The contracting authority reserves the right to obtain supplementary information about the tenderer's finances.

Select:
If a tenderer has a justifiable reason, they can document their economic and financial capacity by presenting other relevant documentation.
Documentation: 
Completed Annex 5
The following volume figures will form the basis of the evaluation: 
• Senior consultant: 100 hours 
• Meet in DDV: 3 
• Meet in ICT Agder: 6 
• Meet Lillesand, Birkenes 3
• Meet in Kristiansand: 5
Documentation: The contracting authority will evaluate the prepared methodology description and routines in requirements Annex 1 The contracting authority ́s requirement specifications, chapters 4, requirements 2 and 3. 

In addition, emphasis will be put on whether the tenderer has AN NBMS certification scheme for data interventions.

Tenderers shall describe response time for normal assignments.

Annex 2 can be used to gather the documentation.
Documentation: Completed Annex 1 a Template CV with requested information on the offered key personnel.

The following points can be emphasised in the evaluation in: 
- Relevance of the reference assignments to the contracting authority ́s needs. 
- Certifications and their relevance for the contracting authority ́s needs. 
- Formal competence and its relevance for the contracting authority ́s needs. 
- Courses, post education etc. and the relevance of these for the contracting authority ́s needs. 
- Number of years of relevant experience 
- Number of offered consultants

The contracting authority reserves the right to contact the contracting authority for each reference assignment in order to verify the content of the reference project. Contact information for the contracting authority is to be given on request.
See the Public Procurement Regulations §§ 25-2 and 25-3
The framework agreement is for security testing of infrastructure, applications, cloud services (IaaS, Paas, Saas etc.).

Areas for security testing can be applications, cloud services, integrations, databases, infrastructure and system/source code. In addition there can be password testing, social manipulation, denial of service attack testing and security testing/revision of systems purchased by sub-suppliers. The list is not exhaustive.
Agder County, Norway