Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – 81322863 - Framework Agreement (Rv) Carrying Out It Audits To Cover Capacity Peaks Or To Use External Know-How For The Audit Department

It Services: Consulting, Software Development, Internet And Support – 81322863 - Framework Agreement (Rv) Carrying Out It Audits To Cover Capacity Peaks Or To Use External Know-How For The Audit Department. The Subject Of This Call For Tenders Is The Conclusion Of A Framework Agreement (Rv) On The Implementation Of It Audits To Cover Capacity Peaks Or To Use External Know-How. These It Audits Must Be Carried Out In Accordance With The Relevant International Auditing Standards (Such As Iia, Isaca And Iso/Iec). At The Request Of The Client, Audits Can Also Be Carried Out With Mixed Audit Teams Consisting Of Employees From Sts Audit And The Contractor (So-Called Joint Audits). The Aim Is To Transfer Specialist And Methodological Knowledge/Competence From The Contractor To The Client. Exams May Require On-Site Travel, Including To Fragile States And Crisis Countries. The An Is Expected To Travel To Fragile States And Crisis Countries If Giz Also Has Employees On Site From Germany. If Giz Withdraws These Staff For Safety Reasons, We Do Not Expect The An Employees To Check On Site. The Audit Order Relates To The Implementation Of The Following Audits: It Processes In Order To Provide Its Services, Giz Is Absolutely Dependent On Adequate, Reliable And Secure It Support. At The Same Time, Giz’S Strategic Goals Include Consistent Digitalization Of Business Processes. For This Purpose, Extensive Digitization Projects With Substantial Budgets Have Been Initiated. The Assignment Can Include Both It Processes And Technical It Security Aspects. The Audit Areas In Accordance With The It Audit Universe Of The Sts Revision Include: - It Governance, Strategy And Organization - It Operations (Including Archiving, Hosting, Cloud, License Management, Third-Party Providers, Maintenance) - It Support - It Security (Including User And Identity Access Management, Screening And Monitoring, Intrusion Detection, Atp, Incident Management) In Addition, Project-Accompanying Audits Can Be Carried Out In Accordance With The Specifications Of The Idw Ps 850 Will Be Commissioned For Selected (Large) Giz Projects. At The Application Level, Application Security Checks Are Particularly Planned For The Sap Application (Currently Sap S/4Hana). The Professionally Relevant Itgc (It General Controls) Must Be Applied, Both At The Application Level And At The Database And Operating System Level. The Commissioning Of It Audits Can Also Include Partial Aspects/Audit Areas As Part Of A Larger (It) Audit. For Example, The Need For Vulnerability Assessment And Penetration Testing (Vapt) Of Individual Applications May Arise As Part Of A Process Test. The Respective Audits Are Accompanied By Employees Of The Audit Department And A Corresponding Transfer Of Specialist And Methodological Knowledge From The Contractor To The Client Is Expected.