Tenders Are Invited For Preparation And Implementation Of Documentation Of The Information Security Management System (Isms) For The Municipal Office Of The Rawicz Commune And Subordinate Units As Part Of The Cybersecure Local Government Task

1. The Subject Of The Order Is The Purchase And Delivery Of It Equipment And Software As Part Of The Task Strengthening Cybersecurity Systems In The Rawicz Commune As Part Of The Cybersecure Local Government Project In Accordance With The Scope And Provisions Resulting From This Swz Together With The Annexes.2. As Part Of The Subject Of The Order, The Contractor Is Obliged To:1. Carrying Out An Analysis Of Documentation Related To Information Security In Force At The Ordering Party, Which Will Allow Determining The Needs Related To The Need To Adapt The Documentation To The Requirements Of The Amended Act On The National Cybersecurity System And Iso 27000 Standards In The Field Of Information Security (In Particular In Accordance With The Requirements Of The Current Pn-En Iso/Iec 27001 Standards And The Recommendations Of The Current Pn-Iso/Iec 27002, Pn-Iso-27005 And Iso 31000 Standards In The Field Of Risk Management And Ensuring Business Continuity Management In Accordance With The Pn-En Iso 22301.2 Standard. Presenting To The Ordering Party A Report Documenting The Results Of The Analysis Performed, Presenting The Compliance Of The Documentation With Specific Requirements And Recommendations Regarding Updating The Documentation And The Need To Create New Documents As Part Of The Information Security Management System.3. Development And Implementation Of Documentation For The Information Security Management System, Together With A Pilot Audit And Management Review With The Participation Of Management. A Detailed Description Of The Activities Carried Out As Part Of The Order Related To The Analysis Of Documentation Related To Information Security In Force At The Ordering Party, Which Will Allow For The Identification Of Needs Related To The Need To Adapt The Documentation (Point Number 1): 1. As Part Of The Work Performed, The Contractor Will Carry Out A Comprehensive Verification Of The Documentation Held By The Ordering Party In Order To Determine The Validity Of Leaving Selected Elements Of The Documentation And Updating Them. 2. As Part Of The Verification, The Contractor Will Prepare A Report Documenting The Results Of The Analysis, Which Will Include A Comparison Of The Current Documentation, Human Resources, Processes And Systems (It/Ot) Held By The Ordering Party With The Expectations Formulated In The Order.3. As Part Of The Process, The Contractor Will Conduct A Comprehensive Analysis Of The Assets Owned By The Ordering Party, Which It Will Present To The Ordering Party For Approval In A Report. The Assets Will Become The Basis For Developing Information Security Management System Documentation.4. The Contractor Is Obliged To Prepare A Full Information Security Risk Assessment System In Accordance With The Requirements Of The Iso/Iec 27001:2022 Standard And - Optionally - With The Iso/Iec 27005:2022.3 Guidelines. The Task Includes: 1) Development Of Isms Documentation For The Commune Office2) Development Of Isms Documentation For Subo