Public procurement notice: Contract Notice
Published: 2025-05-15
Buyer: Nasjonal sikkerhetsmyndighet
Country: NO
Region: NO084
Contract type: Services
Procedure: Open procedure
CPV classification: 48000000 | 72000000 | 72420000
Estimated value: 2200000 NOK
Submission deadline: 2025-05-26

Technical requirements: Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003,  p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted of fraud has been convicted of fraud by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Fraud included in Article 1 of the Convention on protection of the Financial Interests of the European Communities (EFT C 316 of 27.11.1995, p. 48).
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of money laundering or financing terrorism by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Money laundering or financing terrorism As defined in Article 1 of the European Parliament and Council Directive 2005/60/EF of 26 October 2005 on preventive measures against the use of the financial system for money laundering and financing terrorism (EUT L 309 of 25.11.2005, p. 15).
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)
Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body, or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of acts of terrorism or criminal acts connected to terrorist activities by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Acts of terrorism or criminal acts relating to terrorist activity as defined in Article 1 and 3 of the Council ́s framework decision 2002/475/RIA of 13 June 2002 on combating terrorism (EFT L 164, af 22.6.2002, p. 3). This rejection reason also includes incitement to, participation or attempts to commit such actions as included in Article 4 in the mentioned framework decision.

Eligibility requirements: Tenderers are registered in a company register or a trade register in the member state in which the tenderer is established. As described in annex XI of directive 2014/24/EU; suppliers from certain member states may have to fulfil other requirements in the mentioned annex.
For financial key figures stated in the notice or in the procurement documents, the tenderer declares that the actual value(s) of the requested key figures are as follows:
Minimum qualification requirements
The tenderer will be able to use the following management of the supply chain and tracing systems for the execution of the contract:
Minimum qualification requirements
The Norwegian National Security Authority (NSM) is Norway ́s directorate for preventive safety. NSM makes up, together with the Intelligence Service and the Police Security Service (PST), Norway ́s three intelligence surveillance and security services. The directorate's main task is to improve Norway's ability to protect against snooping, sabotage, terror and compound threats. Through consultancy, control activities, inspections, testing and research, NSM contributes to ensuring civil and military information, systems, objects and infrastructure of importance to national security. NSM is responsible for a national warning system (VDI) that shall uncover and notify about cyber operations against digital infrastructure. NSM also has a national responsibility to coordinate the handling of serious cyber operations. The National Cyber Security Centre (NCSC) is a part of NSM. NSM is administratively subject to the Ministry of Justice and Emergency Services, at the same time that the Ministry of Defence has instructions to the NSM in cases of their area of responsibility. The Government will launch a national portal for digital security where advice from the authorities gather. The portal shall be a common gateway for different user groups, but designed so that everyone gets uniform advice suitable for their user group. This is without a prior knowledge of roles and responsibilities within the area. NSM shall manage and coordinate the work on the portal, in close cooperation with the relevant authorities and any other actors. Denmark, Australia and the United Kingdom have similar portals on digital security. Other public services that may be relevant to refer to that also share information from several authorities are norge.no and ung.no.The Digitalisation Council has previously shared recommendations for the project and the recommendations can be found here: National Security Authority: Authority Portal
Digdir Insight work beyond this will be shared with the tenderer during the execution of this assignment. See the nsm.no for general information advice and guidance from NSM on digital security. See also information in the National Cyber Security Centre - National Security Authority. NSM envisages a gradual development after flexible methodology, with the ambition of launching a first version, a so-called MVP (Minimum Viable Product), already in the summer/autumn of 2025.NSM envisages that the use of artificial intelligence (KI) and that a reporting service (warning to the authorities) will be part of the solution within one year.