Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – Landesmesse Stuttgart Gmbh & Co. Kg - Europe-Wide Awarding Of Services From An External Information Security Officer (Isb)

It Services: Consulting, Software Development, Internet And Support – Landesmesse Stuttgart Gmbh & Co. Kg - Europe-Wide Awarding Of Services From An External Information Security Officer (Isb). The Lms Intends To Commission The Services Of An External Information Security Officer (Isb) In Order To Improve The Security Level Holistically And Sustainably. The Plan Is To Implement An Internationally Recognized Standard For Information Security Management Systems. The Security Level Of The Lms Should Be Based On Iso 27001. Certification Is Currently Not Planned, But Could Become Relevant In The Future (E.G. Due To Customer Requirements). The Following Tasks Are Assigned To The External Information Security Officer In Particular: - Development And Implementation Of Security Strategies: Creation Of Security Concepts, Policies And Guidelines That Are Tailored To The Specific Needs Of The Lms. This Includes The Further Development Of The Information Security Management System (Isms). - Risk Management: Carrying Out And Continuously Updating Risk Analyzes And Business Impact Analyzes (Bia) To Identify And Evaluate Potential Threats. - Reporting: Establishment Of Reporting Processes As Well As Regular Evaluation And Presentation Of Security-Relevant Information To The Departments And Management. - Continuous Monitoring: Monitoring The Effectiveness Of The Implemented Security Measures And Adjusting The Implemented Measures As Necessary. - Regulatory Compliance: Ensuring That The Lms Complies With All Relevant Information Security Laws, Regulations And Industry Standards. - Security Incidents: Investigating, Processing And Risk Assessment Of Security Incidents, Including Taking Measures To Limit Damage - Collaboration: Close Collaboration With The Internal Information Security Manager And The Other Departments (Especially It) As Well As The Security Operations Center (Soc), The Data Protection Officer And The Management - Internal And External Audits: Support In Preparing For Internal And External Audits On Information Security - Technical Security Measures: Inclusion In The Conception, Evaluation And Decision To Introduce Or Modernize Technologies (E.G. New Edr Solution, Network Segmentation), Which Is Why The Contractor Should Have Appropriate It And It Security Architecture Know-How. The Contractor Does Not Have To Be Responsible For The Decisions, But Must Be Able To Provide Advice In Accordance With His Role In An Advisory Function. The Subject Of The Procedure Is Now The Europe-Wide Awarding Of The Services Of An External Information Security Officer (Isb) Through A Negotiated Procedure With A Preliminary Participation Competition. Further Information On The Content Of The Tender Will Be Made Available To Tenderers Who Are Invited To Submit Tenders. The Benefits Are To Be Awarded For A Period Of 24 Months (2 Years), Expected To Begin On April 1, 2026.