Public procurement notice: Contract Notice
Published: 2025-10-01
Buyer: TSCNET Services GmbH
Country: DE
Region: DE212
Contract type: Services
Procedure: Negotiated with prior call for competition
CPV classification: 72150000 | 72800000 | 72810000: Computer audit services | 79212000
Submission deadline: 2025-10-29

Technical requirements: TSCNET Services GmbH, based in Munich and ISO 27001:2022 certified, seeks a qualified third-party Regulatory Information Security Auditor to perform audits aligned with EU energy sector regulations. The contractor must be an experienced ISO 27001:2022 Lead Auditor with strong service delivery and expertise in regulatory audits. Audits must comply with frameworks from ENTSO-E and ACER, and adapt to evolving EU and national cybersecurity, data protection, and energy governance requirements. The contract is expected to span at least four years.
Knockout criterion: ENTSO-E Security Plan experience based on ISO 27001:2022 and ISO 27002:2022 Information Security Standards applicable to TSCNET Services GmbH and its suppliers contracted for IT support, software development and hosting services. Conducting Type II Effectiveness Audits using control sets based on the aforementioned ISO Standards, performed and officially reported on by a certified ISO 27001:2022 Lead Auditor.
Register 01_App - Application for Participation
Self created application letter including description of the company and its complete corporate structure (including ownership structure).

Type: 
Self-declaration

File name:
20250801_Tender_ESPEAS_01_App_Application_for_Participation_company name.pdf
Register 02_CRE - Commercial Register Extract
Current entry in the professional or commercial register of the country of origin or presentation of a corresponding certificate.

Type: 
Professional or commercial register certificate

File name:
20250801_Tender_ESPEAS_02_CRE_Commercial_Register_Extract_company name.pdf
Register 03_GFEX - Grounds for exclusion
Declaration of mandatory and optional grounds for exclusion within the meaning of Sections 123 and 124 of the GWB (German Act Against Restraints of Competition), Section 21 of the AentG (Aent Act), Section 98c of the AufenthG (Residence Act), Section 21 of the SchwarzArbG (Black Employment Act), and Section 19 of the MiLoG (Minimum Minimum Wage Act). 

Type: 
Form provided by the contacting authority.

File name:
20250801_Tender_ESPEAS_03_GFEX_Grounds for exclusion_company name.pdf

Eligibility requirements: Knockout criterion: ENTSO-E Security Plan experience based on ISO 27001:2022 and ISO 27002:2022 Information Security Standards applicable to TSCNET Services GmbH and its suppliers contracted for IT support, software development and hosting services. Conducting Type II Effectiveness Audits using control sets based on the aforementioned ISO Standards, performed and officially reported on by a certified ISO 27001:2022 Lead Auditor.
Register 01_App - Application for Participation
Self created application letter including description of the company and its complete corporate structure (including ownership structure).

Type: 
Self-declaration

File name:
20250801_Tender_ESPEAS_01_App_Application_for_Participation_company name.pdf
Register 02_CRE - Commercial Register Extract
Current entry in the professional or commercial register of the country of origin or presentation of a corresponding certificate.

Type: 
Professional or commercial register certificate

File name:
20250801_Tender_ESPEAS_02_CRE_Commercial_Register_Extract_company name.pdf
Register 03_GFEX - Grounds for exclusion
Declaration of mandatory and optional grounds for exclusion within the meaning of Sections 123 and 124 of the GWB (German Act Against Restraints of Competition), Section 21 of the AentG (Aent Act), Section 98c of the AufenthG (Residence Act), Section 21 of the SchwarzArbG (Black Employment Act), and Section 19 of the MiLoG (Minimum Minimum Wage Act). 

Type: 
Form provided by the contacting authority.

File name:
20250801_Tender_ESPEAS_03_GFEX_Grounds for exclusion_company name.pdf
Register 06_ FinCR
Submission of a current credit report.

Type:
Credit report from a recognized credit agency.

File name: 
20250801_Tender_ESPEAS_06_FinCR_Credit Report (e.g. Creditreform or D&B)_company name.pdf
Register  07_Ins - Commercial Liability Insurance
Proof of commercial liability insurance (insured event: damage event), including product liability, covering the applicant's statutory liability for personal injury and/or property damage and environmental damage to third parties with an insured sum of at least EUR 1,5 million per insured event and twice per insurance year. The proof of insurance should show coverage for the Applicant, not just for affiliated companies, if applicable.

Type:
Insurance certificate.

File name:
20250801_Tender_ESPEAS_07_Ins_Commercial Liability Insurance_company name.pdf
Register 08_FinTO - Annual Turnover Declaration

The Applicant must demonstrate financial capacity, inter alia, by showing that his average annual turnover for the last three completed financial years is at least twice the contract value of the subject matter of this contract notice.

Type:
Self declation.

File name:
20250801_Tender_ESPEAS_08_FinTO_Annual Turnover Declaration_company name.pdf
Register 10_ External Business Partner Screening Questionnaire
This questionnaire is part of the integrity check and must be completed by the Applicant as part of a self-disclosure process.

Type:
Form provided by the contacting authority.

File name:
20250801_Tender_ESPEAS_10_BP_External Business Partner Screening Questionnaire_company name.pdf
Register 11_Cond - Confirmation of TSCNET Principles of Conduct
Declaration by the applicant that he has read and understood the Supplier Code of Conduct. The code can be found at “TSCNET Principles of Conduct”.

Type: 
Self-declaration

File name:
20250801_Tender_ESPEAS_11_Cond_Confirmation of TSCNET Principles of Conduct_company name.pdf
Register 12_ Signed Non-Disclosure Agreement

The applicant agrees to sign a Non-Disclosure Agreement (NDA) to ensure the confidentiality of all sensitive information exchanged during the course of the engagement. The NDA must be signed and returned along with the application to proceed with the tender process.
Thr applicant must use the NDA document provided by the contact point.

Type: 
Form provided by the contacting authority.

File name:
20250801_Tender_ESPEAS_12_NDA_Signed Non-Disclosure Agreement_company name.pdf