Tenders Are Invited For Preparation And Implementation Of Documentation For The Information Security Management System (Isms) For The Municipal Office Of The Rawicz Commune And Its Subordinate Units.

Analyzing The Documentation Related To Information Security Applicable At The Ordering Party And Updating The Documentation By Implementing An Information Security Management System. As Part Of The Subject Of The Order, The Contractor Is Obliged To: 1. Carrying Out An Analysis Of Documentation Related To Information Security In Force At The Ordering Party, Which Will Allow Determining The Needs Related To The Need To Adapt The Documentation To The Requirements Of The Amended Act On The National Cybersecurity System And Iso 27000 Standards In The Field Of Information Security (In Particular In Accordance With The Requirements Of The Current Pn-En Iso/Iec 27001 Standards And The Recommendations Of The Current Pn-Iso/Iec 27002, Pn-Iso-27005 And Iso 31000 Standards In The Field Of Risk Management And Ensuring Business Continuity Management In Accordance With The Pn-En Iso 22301.2 Standard. Presenting To The Ordering Party A Report Documenting The Results Of The Analysis Performed, Presenting The Compliance Of The Documentation With Specific Requirements And Recommendations Regarding Updating The Documentation And The Need To Create New Documents As Part Of The Information Security Management System.3. Development And Implementation Of Documentation For The Information Security Management System, Together With A Pilot Audit And Management Review With The Participation Of Management. A Detailed Description Of The Activities Carried Out As Part Of The Order Related To The Analysis Of Documentation Related To Information Security In Force At The Ordering Party, Which Will Allow For The Identification Of Needs Related To The Need To Adapt The Documentation (Point Number 1): 1. As Part Of The Work Performed, The Contractor Will Carry Out A Comprehensive Verification Of The Documentation Held By The Ordering Party In Order To Determine The Validity Of Leaving Selected Elements Of The Documentation And Updating Them. 2. As Part Of The Verification, The Contractor Will Prepare A Report Documenting The Results Of The Analysis, Which Will Include A Comparison Of The Current Documentation, Human Resources, Processes And Systems (It/Ot) Held By The Ordering Party With The Expectations Formulated In The Order.3. As Part Of The Process, The Contractor Will Conduct A Comprehensive Analysis Of The Assets Owned By The Ordering Party, Which It Will Present To The Ordering Party For Approval In A Report. The Assets Will Become The Basis For Developing Information Security Management System Documentation.4. The Contractor Is Obliged To Prepare A Full Information Security Risk Assessment System In Accordance With The Requirements Of The Iso/Iec 27001:2022 Standard And - Optionally - With The Iso/Iec 27005:2022 Guidelines. In Particular, The Contractor Should: Develop And Implement A Risk Assessment Methodology, Including: - Description Of The Stage Of Risk Identification, Analysis And Assessment Adequate To The Specificity Of The Office, - Defined Criteria Of Impact, Prob