Tenders Are Invited For Computer Audit And Testing Services – Providing It Security Audit Services, Physical Security Audits And Support For Pfron

Computer Audit And Testing Services – Providing It Security Audit Services, Physical Security Audits And Support For Pfron. 1. In Order To Ensure Transparency, Uniform Interpretation And Facilitate The Implementation Of The Subject Of The Contract, The Following Defined Terms Are Used In This Specification Of Terms And Conditions (Swz) And The Draft Provisions Of The Contract (Ppu): 1.1. Year 1 - A Period Of 12 Months For The Implementation Of The Contract Under The Basic Order, Counted From The Date Of Conclusion Of The Contract, In Which All Tasks Will Be Completed; 1.2. Year 2 - A Period Of 12 Months Of Implementation Of The Contract Under The Basic Order, Starting No Earlier Than 12 Months From The Date Of Conclusion Of The Agreement, And Ending No Later Than 24 Months From The Date Of Conclusion Of The Agreement, During Which All Tasks Will Be Performed Again, Excluding Task 3; 1.3. Year 3 - A 12-Month Period Of Contract Implementation Under The Option, Starting No Earlier Than 24 Months From The Date Of Conclusion Of The Agreement, And Ending No Later Than 36 Months From The Date Of Conclusion Of The Agreement, During Which All Tasks Will Be Performed Again, Excluding Task 3. 2. The Subject Of The Order Is: 2.1. Task No. 1 - Conducting Ict Security Audits Of Pfron It Systems In Accordance With The Provisions Of The Agreement And Opz (Appendix No. 1 To The Agreement) Under The Basic Order, I.E. In Year 1 And Year 2 And Under The Option In Year 3, While The Scope, Methodology, Subject Of The Audits, And Reporting Requirements Are Identical For Each Year. 2.2. Task No. 2 - Constant Support Service Of Specialists In The Scope And In The Manner Described In The Agreement And Opz (Appendix No. 2 To The Agreement), In The Amount Of: As Part Of The Basic Order (1,000 Man-Hours) And As Part Of The Option (500 Man-Hours). 2.3. Tasks No. 3 - Designing, Preparing And Conducting E-Learning Training In The Area Of ​​Cybersecurity In Year 1 Of The Contract (Basic Order), To The Extent And In The Manner Described In The Agreement And Opz (Appendix No. 3 To The Agreement): 2.3.1. Stage 1 - Preparation Of The Scope, Content, Tests And All Training Materials; 2.3.2. Stage 2 - Placing The Training On The Moodle Platform And Testing The Operation Of The Training And Tests; 2.3.3. Stage 3 - Conducting Training And Preparing A Report. 2.4. Tasks No. 4 – Phishing Simulations: 2.4.1. Include Planning, Conducting And Settling Two Controlled Campaigns Of Phishing Attacks On The Ordering Partys Employees In A Given Implementation Year, With An Interval Of No Less Than 3 Months, In Accordance With The Scope And In The Manner Described In The Agreement And Opz (Appendix No. 4 To The Agreement); 2.4.2. Will Be Implemented Twice As Part Of The Basic Order, I.E. In Year 1 And Year 2, And Once As Part Of The Option In Year 3; 2.4.3. The Scope, Methodology, Number Of Campaigns, Method Of Their Implementation And Reporting Requirements Are Identical For Each Year. 2.5. Task No. 5 - Carrying Out Physical Security Audits Of Pfron Offices And Branches And Preparing A Set Of Reports In Accordance With The Provisions Of The Agreement And Opz (Appendix No. 5 To The Agreement) In