Tenders Are Invited For Miscellaneous Health Services – Ftb_1-1_Internal Risk Management – ​​New Tender

Miscellaneous Health Services – Ftb_1-1_Internal Risk Management – ​​New Tender. With Regard To The Security Of The It Systems, Their Use And Ensuring Data Protection, Diakovere Must Comply With The Requirements Of The Khzg And The Khsfv. A Regular Internal Threat Analysis Is Intended To Uncover Vulnerabilities In The Servers And Services Used By Diakovere, The Desktop Operating Systems And Their Applications, As Well As The Implemented Medical Technology Devices, In Order To Increase The Security Of Diakoveres It Infrastructure. Diakovere Attaches Particular Importance To The Fact That The Contractor Has Many Years Of Expertise In Vulnerability Analysis, Including In The Clinical Sector, And That The Reports Created Are Particularly Protected Against Access By Unauthorized Persons. Diakoveres It Infrastructure Has Approximately 10,000 Ip Addresses, Which Must Be Completely Scanned Within Three Days. The Risk Analysis Should Be Carried Out Regularly On A Monthly Basis. The Knowledge Gained From The Risk Analysis Should Be Recorded In Reports, Explained And Provided With Suggestions For Solving The Identified Weak Points So That Diakovere Can Close/Eliminate Them In A Targeted Manner. Further Required Service Content Can Be Found Below And In The Contract. The Use Of Cloud Solutions To Provide The Service Is Not Permitted. The Advertised System Is Not Explicitly Intended To Be Used To Detect Or Detect External Cyber Attacks. The Risk Analysis Should Be Carried Out Over A Period Of 36 Months. With An Extension Option, They Can Be Provided For A Further 24 Months. A Solution That Does Not Use A Vulnerability Scanner Can Also Be Offered. The Products And Services Used To Provide The Service Must Comply With The Applicable Legal Regulations, In Particular Safety Regulations According To Khzg, And Labeling Standards (Ce Mark, Etc.). The Overall System Should Consist Of, Among Other Things, An Appliance (Hardware + Software). The Client Is Open To Alternative Solution Concepts. The Alternative Solution Concepts Must Meet All The Minimum Requirements That Are Placed On The Main Offers. However, No Cloud Solution/Software As A Service May Be Offered And/Or Used By The Contractor. In Order To Achieve The Goal, The Contractor Should Create An Overall System That Will Be Provided On A Permanent Basis. The Entire System Should Be Integrated Into The Clients It System (Installed, Set Up, Supported And Put Into Operation). In Addition, In Order To Produce The Entire System, The Contractor Must Successfully Carry Out The Required Kick-Off Workshop And The First Vulnerability Analysis In Accordance With The Provisions Of The Contract. After Acceptance, The Contractor Must Provide Ongoing Monthly Services For 36 Months. Among Other Things, He Should Procure And Integrate The Current Data Feeds For Internal Security At His Own Expense, Carry Out The Monthly Vulnerability Analysis In Accordance With