Public procurement notice: Contract Notice
Published: 2022-02-11
Buyer: NORGES BANK
Country: NO
Contract type: Services
Procedure: Competitive procedure with negotiation
CPV classification: 48151000 | 48710000: Backup or recovery software package | 48730000: Security software package | 48731000: File-security software package | 48732000: Data-security software package
Estimated value: 80000000 NOK
Submission deadline: 2022-03-11
Award criteria: The most economic tender

Technical requirements: Υπηρεσίες τεχνολογίας των πληροφοριών: παροχή συμβουλών, ανάπτυξη λογισμικού, Διαδίκτυο και υποστήριξη
Tenderers must be a legally established company. Documented by a company registration certificate (Norwegian tenderer). Certificates of registration in a professional register as mandated in the legislation in the country where the tenderer is established (other tenderers). -- -- Tenderers must have their tax and VAT payments in order. Documented by a tax and VAT certificate, not older than 6 months from the deadline for receipt of tenders. This requirement only applies to Norwegian tenderers.
Tenderers must have the economic and financial capacity to carry out the assignment/contract throughout the entire contract period. Documented by: The annual accounts, including the annual report for the last two years, as well as the auditor's report for the last two years, and a credit rating from a global credit rating supplier or a supplier with a licence in Norway (must not be older than 2 months).
cyber security monitoring and cyber security incident response. Documented by: The most important and most relevant deliveries (depersonalised) in the last three years, including the business field of the customer, scope, value, and date, to both the public and private sectors. (Central banks, banks, and other financial institutions, authorities, government institutions, and critical infrastructure are of particular interest.) -- -- Tenderers must have sufficient competence to provide the services in accordance with the contract. Documented by: An overview of the number of technical personal within the following areas: Cyber security monitoring, response to cyber security incidents, a short overview of administered security services and any support products. A description of the architecture for the MSS delivery ability, including elements in the security operation centre (SOC), computer centre, and network. -- Work with triaging security warnings and security events must be carried out on site from Bankplassen 2, Oslo by qualified personnel with Norwegian security clearance. Documented by: Confirmation that you have qualified personnel to carry out local work with triaging security warnings and security incidents fro Bankplassen 2, Oslo. Personnel must also be able to be security cleared. -- In the event of a major security incident, the tenderer must have qualified personnel who can work locally with cyber security incident stand-by from Bankplassen 2, Oslo within 6 hours. Documented by confirmation that you, in the event of a major security incident, have qualified personnel who can work locally with cyber security incident response from Bankplassen 2, Oslo within 6 hours. -- Information protection
Documentation that the tenderer and sub-suppliers can ensure that graded information is dealt with and kept responsibly for the entire contract period and after the contract has expired. Documented by: A description of policy and routines for handling and storing graded information at both company and employee level. Sufficient information on the sub-suppliers that have already been chosen by the tenderer, so that the contracting authority is able to decide whether each sub-supplier can fulfil the requirements set for processing and storing graded information. Equivalent information can be required for new sub-suppliers. -- Storage and processing of customer data must be done in a country that has a 'contract between the mentioned country and Norway for the exchange and mutual protection of classified information'. Documentation by: Please state in which country the Central Bank of Norway's data will be stored and processed.

Eligibility requirements: Tenderers must be a legally established company. Documented by a company registration certificate (Norwegian tenderer). Certificates of registration in a professional register as mandated in the legislation in the country where the tenderer is established (other tenderers). -- -- Tenderers must have their tax and VAT payments in order. Documented by a tax and VAT certificate, not older than 6 months from the deadline for receipt of tenders. This requirement only applies to Norwegian tenderers.

Award value: 80000000