Tenders Are Invited For Software Package And Information Systems - Implementation Of An Integrated It And Ot Cybersecurity Architecture Along With The Organizational Preparation Of The Ordering Party As Part Of The Cybersafe Waterworks Grant Project

Software Package And Information Systems - Implementation Of An Integrated It And Ot Cybersecurity Architecture Along With The Organizational Preparation Of The Ordering Party As Part Of The Cybersafe Waterworks Grant Project. 1. The Subject Of The Order Is The Implementation Of An Integrated It And Ot Cybersecurity Architecture Along With The Organizational Preparation Of The Ordering Party As Part Of The Cybersafe Waterworks Grant Project. 2. Acting On The Basis Of The Act Of April 16, 1993 On Combating Unfair Competition (Journal Of Laws Of 2026, Item 85), The Ordering Party Excludes Part Of The Opz. Excluded Is Technical And Organizational Information Regarding Competence And Organizational Gaps, The Ordering Partys Needs In The Field Of Cybersecurity, It Systems And Security Mechanisms Used, Which Constitute A Business Secret And The Disclosure Of Which Could Lead To An Increase In The Risk Of A Cybersecurity Breach, In Particular By Enabling The Identification Of System Architecture Or Potential Vulnerabilities, Or Infrastructure Security Techniques And Tactics. The Scope Of The Exclusion Of Transparency Is Limited To Information Necessary To Protect The Security Of The Enterprise, Including It Systems, And Does Not Violate The Principles Of Fair Competition Or Equal Treatment Of Contractors, While Providing Contractors With Access To Information Necessary To Prepare Offers. The Subject Of The Order Includes A Coherent Security Model Combining Technical, Organizational And Competence Solutions. Although Individual Elements May Be Of A General Nature, Their Combination And Reference To The Actual Environment Of The Ordering Party Leads To The Disclosure Of The Overall Security Architecture. Disclosure Of Such A Consolidated Image Could Enable Unauthorized Persons To Identify The Security Architecture, Methods Of Responding To Incidents, Dependencies Between Systems And Potential Weaknesses, Which Consequently Increases The Risk Of A Successful Attack. According To The Approach Based On Miter Att&Ck, Knowledge About Protection Mechanisms, Organizational Procedures And User Accounting Can Be Used At Various Stages Of The Attack Chain, Including The Preparation, Reconnaissance And Access Escalation Phases. The Ordering Party Emphasizes That The Subject Of The Order Concerns Systems Important For Ensuring The Continuity Of Public Services, And Its Goal Is To Achieve A Real, Operational Level Of Resistance To Cyber Threats. The Exclusion Of Transparency Was Used As A Proportionate Measure Aimed At Protecting The Security Of The Ordering Party, While Ensuring Contractors Access To Full Documentation On Equal Terms, After Meeting Confidentiality Requirements. 3. The Public Part Of The Opz Is Annex No. 8 To The Swz. 4. The Classified Part Of The Opz, Which Is Annex No. 9 To The Swz, Will Be Made Available To The Contractor Who Submits An Appropriate Application Together With A Confidentiality Declaration, The Template Of Which Is Annex No. 10 To The Swz, On The Terms Set Out Below. 5. The Deadline For Submitting The Application Referred To In Point 4 Expires 7 Days Before The Scheduled Date Of Submission Of Offers. Applications Submitted After This Date By The Ordering Party