Public procurement notice: Contract Notice
Published: 2025-01-17
Buyer: Riksrevisjonen
Country: NO
Contract type: Services
Procedure: Open procedure
CPV classification: 48000000 | 48730000: Security software package | 48732000: Data-security software package | 72000000 | 72200000
Estimated value: 70000000 NOK
Submission deadline: 2025-02-18
Award criteria: price, quality

Technical requirements: Is the supplier in a situation where he has been forced debt arrangement?  Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Is the tenderer in a bankruptcy situation? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003,  p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)
Has the tenderer entered into agreement(s) with other tenderers with the intention of turning the competition?

Eligibility requirements: Demand:
Tenderers shall have good or better credit worthiness.
Documentation requirement:
• A credit rating based on the most recent financial figures. The rating shall be carried out by a credit rating company with licence to conduct this service. 
• The contracting authority reserves the right to obtain further credit ratings or other financial information that, but not limited to, annual accounts including notes, the board's annual reports and auditor's reports.
If a tenderer has a justifiable reason for not submitting the documentation required by the contracting authority, he can document his economic and financial capacity with any other document that the contracting authority deems suitable.
Tenderers shall be registered in a company register, professional register or registered in a commerce register in the country where the tenderer is established.
Documentation requirement:
• Norwegian companies: Company Registration Certificate.
• Foreign companies: Verification that the tenderer is registered in a company register, professional register or a commerce register in the country where the tenderer is established.
3.3.3 Requirement for the tenderer ́s technical and professional qualifications.
Requirement 1:
Tenderers shall have experience from assignments where the tenderer has delivered and operated an external firewall system for Customers and delivered MDR systems. 
Documentation requirement:
Description of at least three of the tenderer's assignments during the last 3 years, for the operation of an external firewall system and MDR system. At least one of the deliveries (for each area) must be for entities with at least 100 employees. 
The description must include a statement of the time frame and recipient. It is the tenderer ́s responsibility to document relevance through the description. Tenderers can document their experience by referring to competence of the personnel he has at his disposal and can use this assignment, even if the experience has been worked up while the personnel have served another service provider.
Requirement 2:
Tenderers shall have a management system for information security that fulfils the requirements in ISO/IEC 27001 or equivalent. 
Documentation requirement:
Tenderers shall document their information security management system. Valid certifications from an independent body can be used as sufficient documentation.
When awarding a contract, the tenderer must be certified by the National Security Authority (NSM) for handling computer attacks. 
Documentation requirement: 
• Documentation demonstrating that they are certified by NBIM ́s quality scheme for handling ICT events. 

Tenderers must maintain certification during the entire contract period. The termination of NSM ́s approval can lead to the contract being terminated.
Documentation of qualifications is to be sent upon request. Otherwise, all documents must be enclosed with the tender.
When evaluating the price, we will apply all the costs that will apply so that the products and services will function in accordance with the requirement descriptions for the areas below: 
• Outer firewall including SLA, implementation assistance and any other costs that the tenderer specifies
• MDR including SLA, implementation, assistance and any other costs that the tenderer specifies.
• IRT including any SLA, assistance and any other costs that the tenderer specifies.
• The maintenance costs of; Inner Firewall (PaloAlto), End Point Protection (Cortex XDR), Opswat, Tripwire, Splunk, Tenable and RSA 
•Aid
All costs are calculated over 6 years and in accordance with the stated scope in the price matrix, with the exception of the inner firewall, which is cost calculated over 3 years. The price matrix indicates to some degree the expected consumption, but does not bind the Customer to minimum consumption.