Tenders Are Invited For Conducting Security Audits And Developing Szba Documentation In The Cyber ​​-Safed Local Government Project

I. The Subject Of The Order Is: 1. Execution At The Municipal Office In Oborniki Audits: 1) Audit Of The Compliance Of The Information Security Management System In Accordance With The Requirements Of The Regulation Of The Council Of Ministers Of May 21, 2024 On The National Interoperability Framework, Minimum Requirements For Public Registers And Exchange Of Information In Electronic Form And Minimum Requirements For Ict Systems (Kri) Together With The Assessment Mitigating Disclosed Risks. When Formulating Recommendations, Recommendations, The Contractor Should Take Into Account The Requirements For The Protection Of The It System, Physical Security, Human Resources That Will Involve The Entry Into Force Of The Requirements Of Directive Naw 2.2) Audit Of The It System Of The Municipal Office In Oborniki Along With The Performance Of Penetration Tests, Including Infrastructure Tests, Base Instances Maintained By The City Hall In Oborniki. 2. Execution In 17 Organizational Units Of The Oborniki Commune Audit: 1) An Audit Of The Compliance Of The Information Security Management System In Accordance With The Requirements Of The Regulation Of The Council Of Ministers Of May 21, 2024 On The National Interoperability Framework, Minimum Requirements For Public Registers And Exchange Of Information In Electronic Form And Minimum Requirements For Ict Systems (Kri) Together With The Assessment Mitigating Disclosed Risks. 2) An Audit Of The It System Together With Penetration Tests Including Infrastructure Tests, Database Instances Maintained By Organizational Units Of The Oborniki Commune Covered By These Proceedings. 3. Development, Review, Updating And Implementation Of Information Security Management System At The Municipal Office In Oborniki And 17 Subordinate Units; 1) The Information Security Management System Developed And Implemented (Szbi) Must Take Into Account The Requirements: A) The Regulation Of The Council Of Ministers Of May 21, 2024 On The National Interoperability, Minimum Requirements For Public Registers And Exchange Of Information In Electronic And Minimum Information And Minimum Information Exchange And Minimum Exchange. Requirements For Ict Systems (Kri); B) Of The Act Of 5 July 2018 On The National Cybersecurity System In The Extent That It Applies To Public Entities Not Providing Key Services (Uoksc); C) Of The European Parliament And The Council (Eu) 2016/679 Of April 27, 2016 On The Protection Of Natural Data In Connection With The Processing Of Personal Data And In The Case Of Freedom The Flow Of Such Data And The Repeal Of Directive 95/46/Ec Gdpr; D) Of The Act Of 10 May 2018 On The Protection Of Personal Data (Journal Of Laws 2018 Item 1000) E) Of The Act Of 17 February 2005 On The Computerization Of The Activities Of Entities Performing Public Tasks (Journal Of Laws 2005 No. 64 Item 565); F) The Field Provisions Of Eu And/Or National Law Specifying For The Contracting Authority In The Field Of Information Security; G) Good P

Refer document

FileName	File Description
Global Tender Document	Tender Notice