Tenders Are Invited For Services Of Implementation And Development Of Szbi As Part Of The Project Entitled: Cyber ​​-Secure Local Government In The Czersk Commune

Services Of Implementation And Development Of Szbi As Part Of The Project Entitled: Cyber ​​-Secure Local Government In The Czersk Commune Including: 1) Development And Implementation Of Szba Documentation For The Municipal Office And 13 Organizational Units, As Part Of The Service Regarding The Implementation Of The Information Security Management System (Szbi), Review And Analysis Of Sample Documentation Is Expected. As Part Of The Implementation, New Documentation Will Also Be Developed, Adapted To The Specific Needs Of The Organization, In Accordance With Applicable. And Requirements. The Service Includes Comprehensive Support In The Development And Establishment Of The System, The Implementation And Operation Of The System, As Well As Its Monitoring, Review And Further Maintenance And Improvement. Improving, Monitoring And Implementing Changes In The Information Security Management System And Personal Data Protection, In The Scope Of A Specified Description Of The Subject Of The Contract Constituting Annex 3 To Swz. The Contractor Is Obliged To Prepare And Conduct Training In The Field Of Information Security Management System And Personal Data Protection For The Employers Employees, Covering At Least The Following Areas: A. Information Security: A) Discussion Of The Basic Principles Of Information, Including Personal Data Protection Principles; B) Explaining The Definitions Related To The Information Security Management System; C) Contexts And Needs Of The Parties Taking Into Account Legal And Regulatory Requirements; D) The Scope And Policy Of The Information Security Management System; E) Purpose Of The Information Security Management System; F) Classification Of Information; G) Risk Estimation Methodology Under The Information Security Management System; H) Methodology For Estimating An Opportunity Under The Information Security Management System; I) Discussing The Rules And Security Under The Application Declaration; J) Supervision Over Documented Information; K) Reviews And Improving The Information Security Management System; L) Methodology For Recording Information Assets; M) User Access Management; N) Arrangement Of Techniques, Standards And Software Supporting Cryptography; O) Information Security Policy And Personal Data Protection; P) Building Procedures Under The Information Security Management System; Q) Responsibility For Violating The Rules Of Szb; R) Principles Of Identification, Reporting And Responding To Incidents; P) It Security In The Workplace; T) Compliance Of It Systems With The Gdpr And The Nis2 Directive; Information Security Procedures And Policy: • Data Transmission Encryption Procedures At Remote Work, • Remote Labor Policy And The Use Of Mobile Devices, • Procedures For Verifying Candidates For Work, • Disciplinary Procedures, • Record Assets Records, • Information Asset Management Policy, • Information Classification Policy, • Information Designation Procedures In Accordance With Classification, • Information

Refer document

FileName	File Description
Global Tender Document	Tender Notice