Tenders Are Invited For Cyber ​​Waterworks - Increasing The Level Of Cybersecurity Of Critical Infrastructure In The Water Supply Sector

The Subject Of The Order Is To Increase The Level Of Cybersecurity Of Critical Infrastructure In The Water Supply Sector - Przedsiębiorstwo Wodociągów I Kanyzacji W Sztumie Sp. Z O. O. The Scope Of The Order Includes, Among Others: 1) Organizational Area. Audit Of The Isms Information Security Management System, Including Compliance With Kri/Uoksc. Verification Of The Isms In Terms Of The Implemented Solutions And Taking Into Account The Applied Modifications (Maintenance, Management And Improvement Of The Isms). Post-Implementation Update Of The Information Security System Documentation. Implementation, Review And Update Of The Business Continuity Management System (Szcd), Including The Development Of Bcp/Drp Plans (Business Continuity Plan / Disaster Recovery Plan).2) Competency Areaimplementation Of A Series Of Cybersecurity Training Courses For Employees - How To Identify And Respond To Cyberthreats. Training Including A Security Awareness Service For Simulated Social Engineering Attacks; And Raising Users Awareness Of Recognizing And Responding To Incidents. Training For Technical Staff In The Use Of Bcp/Drp Plans, Simulation Training In The Field Of Cybersecurity, Business Continuity, Crisis Management. Specialized Training For Management Staff And It Specialists In The Scope Of Security Measures Used As Part Of The Grant Project. Crisis Communication Training For Functionaries.3) It Technical Areapurchase And Implementation Of Enterprise-Class Network Devices With The Nac Function And Network Segmentation In Accordance With Nis2 Requirements. Purchase And Implementation Of Utm Devices. Purchase And Implementation Of Enterprise Class Wifi Access Points. Implementation And Configuration Of Physical Servers For Security And Backup Systems Using Hypervisor Technology With Data Deduplication, And Disk Arrays Supporting Raid And Data Deduplication Technology. Implementation Of Data Backup And Archiving Systems (Software With Data Deduplication, Nas Server, Local And Remote Repositories, I.E. In The Cloud). Implementation Of A Transfer Station. Purchase And Installation Of Ups Uninterruptible Power Supplies, Integration With Virtualization Server Management Software. Purchase And Implementation Of Server Operating Systems And Client Licenses (Cal). Implementation And Configuration Of Active Directory, Domain Controller, Gpo Policies And Migration Of The Ad Environment. Installation Of Server Virtualization Software (Hypervisor). Implementation Of Antivirus Software In The Ad Environment. Implementation Of Security And Monitoring Systems (Siem System, Ids System, Administrator Monitoring) Along With An Ict Asset Inventory Service And A Log Manager. Security Tests: Network Infrastructure, Applications And Websites. Implementation Of Systems, Network And Security Hardening Procedures (Optimization Of User And Application Privileges). Update Of The It System Management Manual With Attachments. Purchase Of Firewall Waf Software For The Internet Domain