Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – Carrying Out Security Analyzes And Evaluations Of Products And Services As Well As Standards And Test Specifications From The Areas Of Consumer And Public Iot (Pracys)

It Services: Consulting, Software Development, Internet And Support – Carrying Out Security Analyzes And Evaluations Of Products And Services As Well As Standards And Test Specifications From The Areas Of Consumer And Public Iot (Pracys). This Framework Agreement Is Intended To Take On Tasks As A Service For Designing Cybersecurity In The Areas Of Consumer Iot And Public Iot As Well As Email Services And Digital Consumer Protection In General. Explicitly Excluded Are Regulated Iot Products From The Energy Sector (Such As Measuring And Control Devices In Accordance With Msbg And Enwg), Energy Transition Systems (Such As Pv Inverters, Energy Management Systems And Battery Storage), Regulated Iot Products From The Healthcare Sector And Telematics Infrastructure, The Area Of ​​Intelligent Transport Systems And Industrial Applications. The Results Serve To Improve The Completeness, Testability And Applicability Of New Standards That Will Be Used, For Example, Within The Framework Of The Cra. In Addition, Recommendations For Action And Demonstrators For Cybersecurity Prevention Are To Be Developed With The Aim Of Strengthening The Cyber Resilience Of The State, Economy And Society. Practical Findings Are Of Great Importance For Our Standardization Work. For This Purpose, Weak Points In Products Must Be Analyzed And Evaluated, Standards And Test Specifications Must Be Evaluated For Their Practical Suitability Based On Specific Products (Proof Of Concept, Poc) And New Technologies (E.G. Security Protocols) Must Be Examined For Their Applicability Before They Can Be Incorporated Into Standards. If Vulnerabilities In Products And Services From The Above Become Known. If Necessary, Initial Assessments Are Carried Out In Areas, Recommendations For Action Are Created And Accompanied Processes Are Created That Contribute To Closing The Weak Point, Such As The Cvd Process. Depending On The Criticality And Specifics Of The Existing Vulnerability, A Technical Assessment May Require, For Example, A Practical Re-Creation Of The Vulnerability Or An Impact Assessment. Findings From The Development And Maintenance Of Standards, As Well As Studies And Security Analyses, Are An Important Part Of The Bsis Prevention Work To Raise Awareness And Strengthen The Cyber Resilience Of The State, Economy And Society. For Prevention Purposes, The Bsi Also Publishes Recommendations For Action, Test Tools And Test Environments And Develops Demonstrators, E.G. For Trade Fairs, In Order To Be Able To Present Common Vulnerabilities In A Practical Way. Another Important Task Of The Bsi Is Technical Consumer Protection. As Part Of Security Investigations Into Selected Digital Consumer Products, The Bsi Can Identify Current It Security Risks On The Market In Order To Use The Knowledge Gained To Advise, Inform And Warn Consumers.