Public procurement notice: Contract Notice
Published: 2023-09-12
Buyer: SYKEHUSINNKJØP HF
Country: NO
Contract type: Services
Procedure: Competitive procedure with negotiation
CPV classification: 48730000: Security software package | 48732000: Data-security software package | 72000000 | 72212730 | 72212732
Submission deadline: 2023-10-11
Award criteria: The most economic tender

Technical requirements: The purpose of the procurement is to engage a security partner within ICT security that will strengthen the Hemit Trust's ability to identify, protect against, and respond to threats and vulnerabilities related to infrastructure, network systems, applications, and other digital resources.
The procurement includes consultancy services, IT security monitoring services, incident management support and any new security products that are important for detecting and managing unwanted incidents. The Security Partner must provide 24/7 security monitoring (SOC) including detection and active response, early warning of security incidents and threats, IRT, vulnerability scanning of external and internal endpoints, security testing of web applications, and conducting threat analysis and investigations as needed. The contracting authority expects the Security Partner to provide continuous follow-up, status, recommendations and improvements. The Security Partner will be responsible for setting requirements for the Contracting Authority's security work.
Through a strategic partnership with a trusted security service provider, the Contracting Authority shall achieve the following:
- The Security Partner must help to identify and manage vulnerabilities, threats and risks related to the ICT infrastructure, network systems and applications. The Tenderer's expertise and use of the latest methods and technologies will help to achieve the best possible protection.
- The Security Partner will be responsible for continuously monitoring the Contracting Authority's ICT infrastructure to identify potential threats, unusual activity or attacks. This is done by giving the security partner access to various log sources via the contracting authority's Splunk solution and events and alerts in the contracting authority's defender portals. The contracting authority also has a system for mirroring network traffic. It is therefore preferable that the tenderer can deliver a service (IDS/NDR) that can use this to detect and notify of unwanted activity. The Security Partner must be able to react quickly and recommend the necessary measures to limit the extent of damage, restore normal operations and prevent future security incidents.
- The Security Partner will assist the Contracting Authority in complying with security standards, laws and regulations. It will also provide advice and guidance on how the Contracting Authority can best utilise existing security products and solutions to achieve the best possible protection, as well as customer follow-up at strategic, tactical and operational levels. Consultancy from the Tenderer will help the Contracting Authority to make informed decisions about security investments and strategies.
- The Security Partner will contribute to increasing the Contracting Authority's expertise and understanding of threats at both the strategic and operational levels.
- The Security Partner must actively assist the Contracting Authority with various support functions during and after any undesirable incidents.
Replacing existing security products is not desired, but rather building on what has already been established to the greatest extent possible.
It has been decided that the procurement falls under § 9-1 of the Security Act as a security classified procurement. It will therefore be necessary for the Tenderer to sign a security agreement with the Contracting Authority.
The contract will be valid for 3 (three) years from the start-up date for ordinary operation. The contract will then be renewed automatically for 1 (one) year at a time, unless 6 (six) months' notice is given by the contracting authority, or 12 (twelve) months' notice by the Tenderer, before the renewal date.
the qualification requirements for participation in the contest: - Relevant experience (30%) - Capacity and
Competence (70%). When assessing the qualification requirement 'relevant experience', it will be seen as positive
other reputable credit rating agencies. The contracting authority will obtain a rating report itself from www.soliditet.no,
provided by Bisnode Credit AS in order to verify that the tenderer has sufficient economic and financial

Eligibility requirements: Tenderers must be registered in a company register or a trade register in the country where the tenderer is established. Documentation requirement: Company Registration Certificate