Tenders Are Invited For Consulting, Auditing And Implementation Services In The Field Of Cybersecurity Carried Out As Part Of The Cybersafe Waterworks Project

Advisory And Audit Services In The Field Of Cyber Security: The Ordering Party Waived From Dividing The Subject Of The Order Into Parts, Including The Implementation Of The Information Security Management System (Isms), Business Continuity Plans (Bcp/Drp), Security Tests And Post-Implementation Audit (Tasks 1, 2, 3, 4 And 5). This Decision Is Fully Justified By Objective Organizational And Technical Reasons. The Ordering Party Found It Necessary To Entrust The Entire Subject Of The Order To One Contractor In Order To Minimize The Risk Of Dilution Of Responsibility For The Final Security And Coherence Of The Implemented Systems. Commissioning The Post-Implementation Audit (Task 3) To A Separate Entity Would Generate A High Risk Of Competence Disputes Between The Implementation Company And The Auditing Company In The Event Of Non-Compliance. Integration Of Tasks Within One Order Guarantees The Ordering Party That The Responsibility For Removing Any Vulnerabilities Shown In The Audit Rests With One Entity, Which Must Eliminate Them Within The Framework Of A Unified Budget And Project Schedule. At The Same Time, In Order To Avoid The Risk Of Conflict Of Interest Referred To In Art. 116 Section 2 Of The Public Procurement Law, The Ordering Party Imposed In The Terms Of The Order A Strict Requirement For The Contractor To Appoint A Completely Independent Audit Team. The Contractor Is Absolutely Obliged To Ensure That The Persons Delegated To Carry Out The Audit (Task 3) Do Not Take Any Part In The Implementation Work (Task 1 And 2) Or In Security Tests. This Solution Allows For The Use Of The Market Potential Of Entities With Specialized, Independent Audit Departments, And Provides The Ordering Party With A Guarantee Of Objectivity While Maintaining The Principle Of One Point Of Responsibility For The Entire System. As Part Of The Order, The Contractor Is Obliged To Perform The Following Tasks: 1) Updating And Developing The Information Security Management System (Isms) After Completed It Implementations; 2) Updating And Developing Business Continuity Plans (Bcp) And Disaster Recovery Plans (Drp) For Sti; 3) Conducting A Post-Implementation Information Security Audit; 4) Conducting Social Engineering Tests; 5) Conducting Penetration Tests - Min. 5 Daysthe Subject Of The Order Is To Carry Out Audits, Tests And Updates And Prepare Isms Documentation As Part Of The Grant Project For The Project Called Improving The Level Of Data Protection And Resilience Of It And Ot Infrastructure, Which Is An Element Of The Investment Under The National Recovery And Resilience Plan Financed By The Instrument For Recovery And Resilience Investment C3.1.1. Cybersecurity - Cyberpl, Data Processing Infrastructure And Optimization Of The Infrastructure Of State Services Responsible For Security. Cybersecurity - Cyberbezpieczne Wodociągi. Grant Competition Entitled “Cybersafe Waterworks” Number Kpod.05.10-Cw.01-001/25