Public procurement notice: Contract Notice
Published: 2021-12-20
Buyer: Bane NOR SF
Country: NO
Contract type: Services
Procedure: Negotiated procedure
CPV classification: 32400000 | 72000000 | 72220000: Systems and technical consultancy services | 72230000: Custom software development services | 72250000: System and support services
Estimated value: 350000000 NOK
Submission deadline: 2022-01-17
Award criteria: The most economic tender

Technical requirements: Υπηρεσίες τεχνολογίας των πληροφοριών: παροχή συμβουλών, ανάπτυξη λογισμικού, Διαδίκτυο και υποστήριξη
Bane NOR’s goal for IAM is to enter into a long term contract with a strategic partner. The contract will ensure management and optimisation of the existing solution, cooperation for development of a long term solution, and establish a service-based delivery model for the existing and future IAM solutions.
After the completion of the procurement project, Bane NOR will have entered into a contract with a professional supplier with a clear operational and management responsibility within the IAM area in Bane NOR. Clear SLA and KPIs, management and reporting structures, processes and procedures, and future goals for IAM are established with the associated transformation projects. The new supplier will take comprehensive end-to-end responsibility for IAM in Bane NOR.
• Comprehensive IAM solutions, hereunder within the functional areas of Identity Management (IDM), Access Management (AM), Identity Governance Administration (IGA) og Privileged Access Management (PAM).
The contracting authority will invite four to eight qualified tenderers (tenderers who fulfil the minimum qualification requirements) to participate in the tender contest. If there are more qualified tenderers than the number we would like to invite, a selection will be made after an evaluation and ranking of the tenderers based on 'best qualified' and the following selection criteria:
A contract will be entered into with an initial period of seven years, thereafter automatic extension for two years at a time until it is cancelled by the parties within the deadlines in the contract.
1. Tenderers must be a legally established company and registered in accordance with the current laws and regulations.
2. Tenderers must have sufficient organisation to handle the delivery within EU/EFTA/UK. Hereunder, the tenderer must have good implementation ability that includes both capacity and ability to establish and deliver IAM services to a socially critical player, including operation and further development of IAM services, and with personnel within relevant competence categories. Operative/critical mass for the delivery must be able to be delivered from Norway if necessary, for example in crisis situations.
4. The tenderer must have a management system for information security that is build on an approved framework for ICT security, ISO27001, ISF SOGP, NIST CSF or equivalent and an independent verification of quality in the IT management processes such as ISAE3402 SOC2 TYPE II and the like.
Tenderers must have an economic and financial standing that gives the contracting authority confidence that the tenderer will be financially viable throughout the entire contract period.
Tenderers must have relevant experience from establishing, operating and further development of equivalent scope and complexity.
The contracting authority will invite four to eight qualified tenderers (tenderers who fulfil the minimum qualification requirements) to participate in the tender contest. If there are more qualified tenderers than the number we would like to invite, a selection will be made after an evaluation and ranking of the tenderers based on 'best qualified' and the following selection criteria:

Eligibility requirements: 1. Tenderers must be a legally established company and registered in accordance with the current laws and regulations. 2. Tenderers must have sufficient organisation to handle the delivery within EU/EFTA/UK. Hereunder, the tenderer must have good implementation ability that includes both capacity and ability to establish and deliver IAM services to a socially critical player, including operation and further development of IAM services, and with personnel within relevant competence categories. Operative/critical mass for the delivery must be able to be delivered from Norway if necessary, for example in crisis situations. 3. Tenderers must comply with a documented and functional quality assurance system. 4. The tenderer must have a management system for information security that is build on an approved framework for ICT security, ISO27001, ISF SOGP, NIST CSF or equivalent and an independent verification of quality in the IT management processes such as ISAE3402 SOC2 TYPE II and the like.

Award value: 350000000