Public procurement notice: Prior Information Notice Without Call For Competition
Published: 2023-06-20
Buyer: Norsk Helsenett SF
Country: NO
Contract type: Supplies
CPV classification: 30200000 | 30212000 | 32422000 | 48730000: Security software package | 48731000: File-security software package

Technical requirements: Market dialogue (RFI) - Cryptographic management: Procurement of Hardware Security Modules (HSM) and associated services
The Norwegian Health Network [Norsk helsenett SF] (NHN) is a Norwegian state-owned enterprise established and owned by the Ministry of Health and Care Services that provides digital services and infrastructure to the entire health and care sector in Norway. NHN is responsible for the health network, which is the health and care services' shared communication arena, and which includes national ICT infrastructure, shared services and shared components for electronic interaction. NHN's social mission is to ensure that up-to-date information is available to the health administration, healthcare professionals and citizens - when they need it.
NHN currently operates 80 national ICT systems with hundreds of applications and platforms, such as the national systems Helsenorge, Kjernejournal, Helsenettet and Pasientreiser. This involves handling huge amounts of sensitive personal data that must be protected against unauthorised access and alteration, while ensuring that authorised healthcare personnel and residents are guaranteed quick access when needed.
In order to deliver on its social mission in a manner that is efficient and secure, NHN has made a strategic decision to store all health data in a private cloud. This means that NHN is responsible for operating the entire cloud platform, without the use of third parties.
As a national service provider, NHN is responsible for the operation and management of socially critical ICT systems in the health sector, and our deliveries and service development are affected by national and international guidelines and regulations. This applies in particular to regulations relating to the delivery of socially critical ICT systems that entail additional requirements for the level of security in the areas of confidentiality, integrity and availability.
In order to strengthen the work on information security and meet future security requirements, NHN will procure "Hardware Security Modules" for local installation and operation and establish services for NHN that ensure proper management of information and support NHN's strategic choices regarding the use of a private cloud.
The purpose of the procurement is to enter into a contract with a manufacturer/supplier that is financially robust, has a high level of expertise and extensive experience in the development and delivery of Hardware Security Modules (HSM) and associated services to customers and environments with high security requirements.
Based on HSM, we plan to establish a centralised cryptography-as-a-service operated and managed by NHN. The cryptography service must be available for all national systems for which NHN is responsible. It is crucial that the HSM system has a high level of security and is suitable as a foundation for the production and delivery of cryptography services.
NHN needs a future-proof and scalable system that can grow along with NHN's business needs. It is crucial that the system fulfils the existing and future national and international regulatory requirements for socially critical services. It is also of great importance that the system contributes to a reduction in risk and costs and facilitates simple and efficient cryptography services for the national health and care systems and NHN's operating organisation.
- Provide information on and create interest in the procurement of Hardware Security Modules (HSM) and associated services
- Obtain input and experience from HSM manufacturers or suppliers regarding hardware and service deliveries related to HSM
- Take the input and experience from the market dialogue into account when preparing the tender documentation.
A joint tenderer meeting will be held on 14 September 2023 at 13:00 - approx. 15:30, location: NHN's premises at Verkstedveien 1, Oslo.
Companies that would like to participate in the market dialogue are asked to contact NHN via the communication module in Mercell. Please state the number of participants. NHN notes that all participants in the market dialogue must sign a declaration of confidentiality.
Interested tenderers are asked to arrange 1:1 meetings in week 39 (25 - 29 Sept.), location: Oslo The duration of the 1:1 meetings is up to 120 minutes.