Products and services for the security and firewall area.

The objective of the procurement is to enter into a contract for the procurement of products and services for security and the firewall area. The following areas are included in the contract: - Delivery and operation of the outer firewall. Managed detection and response (MDR) - Security products - Security …

CPV: 48000000 Pakiety oprogramowania i systemy informatyczne, 48730000 Pakiety oprogramowania zabezpieczającego, 48732000 Pakiety oprogramowania do zabezpieczania danych, 72000000 Usługi informatyczne: konsultacyjne, opracowywania oprogramowania, internetowe i wsparcia, 72200000 Usługi doradcze w zakresie programowania oprogramowania, 72220000 Usługi doradcze w zakresie systemów i doradztwo techniczne, 72260000 Usługi w zakresie oprogramowania, 72310000 Usługi przetwarzania danych, 72315000 Usługi zarządzania siecią danych oraz usługi wspierające
Termin:
18 lutego 2025 11:00
Rodzaj terminu:
Złożenie oferty
Miejsce wykonania:
Products and services for the security and firewall area.
Miejsce udzielenia zamówienia:
Riksrevisjonen
Numer nagrody:
2024/00538

1. Buyer

1.1 Buyer

Official name : Riksrevisjonen
Legal type of the buyer : Central government authority
Activity of the contracting authority : Economic affairs

2. Procedure

2.1 Procedure

Title : Products and services for the security and firewall area.
Description : The objective of the procurement is to enter into a contract for the procurement of products and services for security and the firewall area. The following areas are included in the contract: - Delivery and operation of the outer firewall. Managed detection and response (MDR) - Security products - Security services (including an option for the operation of security products) - Assistance and advice within security and the firewall area. - Incident Assistance (if the Auditor General's office is attacked) Maintenance of purchased products (existing/new, both software and hardware)
Procedure identifier : 5e865f6c-03b6-4007-8b75-e5e8206f0b61
Internal identifier : 2024/00538
Type of procedure : Open
The procedure is accelerated : no
Justification for the accelerated procedure :
Main features of the procedure : The procurement will be made in accordance with the Act from 17 June 2016 no. 73 on public procurements (the Procurement Act) and regulations 12 August 2016 no. 974 on public procurements (the procurement regulations) parts I and part III. The contract will be awarded in accordance with the open tender contest procedure, cf. the procurement regulations § 13-1(1). Negotiations are not allowed in this competition. Tenders cannot, therefore, be changed after the tender deadline has expired. Furthermore, attention is agreed that tenders that include significant deviations from the procurement documents shall be rejected in accordance with the procurement regulations § 24-8 (1) b. The contracting authority can reject tenders that include deviations from the procurement documents, uncertainties or similar that must not be considered insignificant, cf. the regulations § 24-8 (2) a. Tenderers are encouraged to follow the instructions given in this tender documentation with annexes and to ask questions about uncertainties.

2.1.1 Purpose

Main nature of the contract : Services
Additional nature of the contract : Supplies
Main classification ( cpv ): 72000000 IT services: consulting, software development, Internet and support
Additional classification ( cpv ): 48000000 Software package and information systems
Additional classification ( cpv ): 48730000 Security software package
Additional classification ( cpv ): 48732000 Data security software package
Additional classification ( cpv ): 72200000 Software programming and consultancy services
Additional classification ( cpv ): 72220000 Systems and technical consultancy services
Additional classification ( cpv ): 72260000 Software-related services
Additional classification ( cpv ): 72310000 Data-processing services
Additional classification ( cpv ): 72315000 Data network management and support services

2.1.2 Place of performance

Country : Norway
Anywhere in the given country
Additional information : Parts of the delivery require physical attendance in Oslo.

2.1.3 Value

Estimated value excluding VAT : 70 000 000 Norwegian krone
Maximum value of the framework agreement : 70 000 000 Norwegian krone

2.1.4 General information

Legal basis :
Directive 2014/24/EU

2.1.6 Grounds for exclusion

Analogous situation like bankruptcy under national law : Is the supplier in a situation where he has been forced debt arrangement? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Bankruptcy : Is the tenderer in a bankruptcy situation? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Corruption : Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003, p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.
Arrangement with creditors : Is the supplier in a situation where he has been forced debt arrangement? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Participation in a criminal organisation : Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)
Agreements with other economic operators aimed at distorting competition : Has the tenderer entered into agreement(s) with other tenderers with the intention of turning the competition?
Breaching of obligations in the fields of environmental law : Is the tenderer aware of breaches of environmental provisions as stated in national law, the relevant notice or procurement documents or Article 18 (2) of Directive 2014/24/EU.
Money laundering or terrorist financing : Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of money laundering or financing terrorism by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Money laundering or financing terrorism As defined in Article 1 of the European Parliament and Council Directive 2005/60/EF of 26 October 2005 on preventive measures against the use of the financial system for money laundering and financing terrorism (EUT L 309 of 25.11.2005, p. 15).
Fraud : Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted of fraud has been convicted of fraud by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Fraud included in Article 1 of the Convention on protection of the Financial Interests of the European Communities (EFT C 316 of 27.11.1995, p. 48).
Child labour and other forms of trafficking in human beings : Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of child labour and other forms of human trafficking by a verdict handed down no more than five years ago, or a rejection period determined directly in the judgement that still applies? Child labour and other forms of human trafficking as defined in Article 2 of the European Parliament and council directive 2011/36/EU of 5. 1 April 2011 on the prevention and control of human trafficking and the protection of its victims and for compensation of the Council ́s framework decision 2002/629/RIA (EUT L 101 of 15.4.2011, p. 1).
Insolvency : Is the tenderer in an insolvency situation? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Breaching of obligations in the fields of labour law : Is the tenderer aware of breaches of provisions on working conditions as stated in national law, the relevant notice or procurement documents or Article 18 (2) of Directive 2014/24/EU.
Assets being administered by liquidator : Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Guilty of misrepresentation, withheld information, unable to provide required documents and obtained confidential information of this procedure : Have the tenderer:a) given grossly incorrect information when notifying the information required to verify that there is no basis for rejection, or of the qualification requirements being met,b) failed to provide such information,c) subject to immediately submitting the supporting documents requested by the Contracting Authority, ord) improperly affecting the Contracting Authority's decision process to acquire confidential information that could give this an unlawful advantage in connection with competition, or negligently has given misleading information that can have a significant influence on decisions on rejection, selection or award?
Purely national exclusion grounds : According to ESPD part III: Rejection Reasons, Section D: "Other rejection reasons stipulated in the national legislation of the Contracting Authority's Member State" The Norwegian procurement rules go further than what follows the rejection reasons stated in the EU directive on public procurements and in the standard form for ESPD. Emphasis is put on the fact that all the rejection reasons in the procurement regulations § 24-2, including the purely national rejection reasons, apply for this competition. The following rejection reasons in the procurement regulations § 24-2 are purely national rejection reasons: - §24-2(2). This provision states that the contracting authority shall reject a tenderer when he is aware that the tenderer has been legally convicted or has accepted a wrought for the stated punishable conditions. The requirement that the contracting authority shall reject tenderers who have accepted a wreap for the stated punishable conditions is a distinctively Norwegian requirement. - 24-2(3) letter in. The rejection reason in the ESPD form only concerns serious errors in professional practice, whilst the Norwegian rejection reason also includes other serious errors that can lead to doubt about the tenderer's professional integrity.
Conflict of interest due to its participation in the procurement procedure : Are tenderers aware of a conflict of interest as stated in national law, the relevant notice or procurement documents?
Direct or indirect involvement in the preparation of this procurement procedure : Has the tenderer or an entity associated with the supplier advised the contracting authority or in another way been involved in the planning of the competition?
Guilty of grave professional misconduct : Has the tenderer committed serious errors in professional practice? If relevant, see the definitions in national law, the relevant notice or procurement documents.
Early termination, damages or other comparable sanctions : Has the tenderer committed significant breaches of contract in connection with the fulfilment of a previous public contract, a previous contract with a public contracting authority or a previous concession contract, where the breach has led to the cancellation of the contract, compensation or other similar sanctions?
Breaching of obligations in the fields of social law : Is the tenderer aware of breaches of provisions on social conditions as stated in national law, the relevant notice or procurement documents or Article 18 (2) of Directive 2014/24/EU.
Payment of social security contributions : Have tenderers failed to fulfil all their social security obligations in the country where they are established and in their member state, if this is a different country than what he is established in?
Business activities are suspended : Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.
Payment of taxes : Has the tenderer not fulfilled his tax and duty obligations in the country in which he is established, and in the contracting authority's member state, if this is a different country than what he is established in?
Terrorist offences or offences linked to terrorist activities : Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory body, or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of acts of terrorism or criminal acts connected to terrorist activities by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Acts of terrorism or criminal acts relating to terrorist activity as defined in Article 1 and 3 of the Council ́s framework decision 2002/475/RIA of 13 June 2002 on combating terrorism (EFT L 164, af 22.6.2002, p. 3). This rejection reason also includes incitement to, participation or attempts to commit such actions as included in Article 4 in the mentioned framework decision.

5. Lot

5.1 Lot technical ID : LOT-0000

Title : Products and services for the security and firewall area.
Description : The objective of the procurement is to enter into a contract for the procurement of products and services for security and the firewall area. The following areas are included in the contract: - Delivery and operation of the outer firewall. Managed detection and response (MDR) - Security products - Security services (including an option for the operation of security products) - Assistance and advice within security and the firewall area. - Incident Assistance (if the Auditor General's office is attacked) Maintenance of purchased products (existing/new, both software and hardware)
Internal identifier : 2024/00538

5.1.1 Purpose

Main nature of the contract : Services
Additional nature of the contract : Supplies
Main classification ( cpv ): 72000000 IT services: consulting, software development, Internet and support
Additional classification ( cpv ): 48000000 Software package and information systems
Additional classification ( cpv ): 48730000 Security software package
Additional classification ( cpv ): 48732000 Data security software package
Additional classification ( cpv ): 72200000 Software programming and consultancy services
Additional classification ( cpv ): 72220000 Systems and technical consultancy services
Additional classification ( cpv ): 72260000 Software-related services
Additional classification ( cpv ): 72310000 Data-processing services
Additional classification ( cpv ): 72315000 Data network management and support services

5.1.2 Place of performance

Country : Norway
Anywhere in the given country
Additional information : Parts of the delivery require physical attendance in Oslo.

5.1.3 Estimated duration

Duration : 4 Year

5.1.4 Renewal

Maximum renewals : 2
The buyer reserves the right for additional purchases from the contractor, as described here : Riksrevisjonen has the option to extend for one year + one year.

5.1.5 Value

Estimated value excluding VAT : 70 000 000 Norwegian krone
Maximum value of the framework agreement : 70 000 000 Norwegian krone

5.1.6 General information

Reserved participation : Participation is not reserved.
The names and professional qualifications of the staff assigned to perform the contract must be given : Not required
Procurement Project not financed with EU Funds.
The procurement is covered by the Government Procurement Agreement (GPA) : yes

5.1.9 Selection criteria

Criterion :
Type : Economic and financial standing
Name : The tenderer's economic and financial capacity
Description : Demand: Tenderers shall have good or better credit worthiness. Documentation requirement: • A credit rating based on the most recent financial figures. The rating shall be carried out by a credit rating company with licence to conduct this service. • The contracting authority reserves the right to obtain further credit ratings or other financial information that, but not limited to, annual accounts including notes, the board's annual reports and auditor's reports. If a tenderer has a justifiable reason for not submitting the documentation required by the contracting authority, he can document his economic and financial capacity with any other document that the contracting authority deems suitable.
Use of this criterion : Used
Criterion :
Type : Suitability to pursue the professional activity
Name : 3.3.1 The tenderer ́s registration, authorisation etc.
Description : Tenderers shall be registered in a company register, professional register or registered in a commerce register in the country where the tenderer is established. Documentation requirement: • Norwegian companies: Company Registration Certificate. • Foreign companies: Verification that the tenderer is registered in a company register, professional register or a commerce register in the country where the tenderer is established.
Use of this criterion : Used
Criterion :
Type : Technical and professional ability
Name : the tenderer's technical and professional qualifications.
Description : 3.3.3 Requirement for the tenderer ́s technical and professional qualifications. Requirement 1: Tenderers shall have experience from assignments where the tenderer has delivered and operated an external firewall system for Customers and delivered MDR systems. Documentation requirement: Description of at least three of the tenderer's assignments during the last 3 years, for the operation of an external firewall system and MDR system. At least one of the deliveries (for each area) must be for entities with at least 100 employees. The description must include a statement of the time frame and recipient. It is the tenderer ́s responsibility to document relevance through the description. Tenderers can document their experience by referring to competence of the personnel he has at his disposal and can use this assignment, even if the experience has been worked up while the personnel have served another service provider.
Use of this criterion : Used
Criterion :
Type : Technical and professional ability
Name : the tenderer's technical and professional qualifications.
Description : Requirement 2: Tenderers shall have a management system for information security that fulfils the requirements in ISO/IEC 27001 or equivalent. Documentation requirement: Tenderers shall document their information security management system. Valid certifications from an independent body can be used as sufficient documentation.
Use of this criterion : Used
Criterion :
Type : Technical and professional ability
Name : The tenderer ́s technical and professional qualifications.
Description : When awarding a contract, the tenderer must be certified by the National Security Authority (NSM) for handling computer attacks. Documentation requirement: • Documentation demonstrating that they are certified by NBIM ́s quality scheme for handling ICT events. Tenderers must maintain certification during the entire contract period. The termination of NSM ́s approval can lead to the contract being terminated.
Use of this criterion : Used

5.1.10 Award criteria

Criterion :
Type : Price
Name : Price
Description : When evaluating the price, we will apply all the costs that will apply so that the products and services will function in accordance with the requirement descriptions for the areas below: • Outer firewall including SLA, implementation assistance and any other costs that the tenderer specifies • MDR including SLA, implementation, assistance and any other costs that the tenderer specifies. • IRT including any SLA, assistance and any other costs that the tenderer specifies. • The maintenance costs of; Inner Firewall (PaloAlto), End Point Protection (Cortex XDR), Opswat, Tripwire, Splunk, Tenable and RSA •Aid All costs are calculated over 6 years and in accordance with the stated scope in the price matrix, with the exception of the inner firewall, which is cost calculated over 3 years. The price matrix indicates to some degree the expected consumption, but does not bind the Customer to minimum consumption.
Weight (percentage, exact) : 40
Criterion :
Type : Quality
Name : quality
Description : Under this criteria: - Technical and functional requirements. - Solution descriptions -Implementation -SLA - Interaction with the customer -Product catalogue When evaluating quality, we will: • assess the responses to the joint requirements in SSA-D annex 1. • assess the responses to all the requirements for the MDR system, including SLA and implementation. • assess the responses to all the requirements for the outer firewall system including SLA and implementation. • assess responses to all the requirements for the IRT system including SLA, • Assess the breadth of the tenderer's product catalogue. • Assess the interaction plan with the customer
Weight (percentage, exact) : 35
Criterion :
Type : Quality
Name : Consultants
Description : When evaluating consultants, emphasis will be put on formal education, experience and certifications based on the information completed in the Requirement specification consultancy services. How the tenderer works to ensure well qualified consultants and that they have consultants who can meet in Oslo as needed, will also be emphasised.
Weight (percentage, exact) : 25
Description of the method to be used if weighting cannot be expressed by criteria :
Justification for not indicating the weighting of the award criteria :

5.1.11 Procurement documents

Languages in which the procurement documents are officially available : Norwegian
Deadline for requesting additional information : 11/02/2025 11:00 +00:00

5.1.12 Terms of procurement

Terms of submission :
Electronic submission : Required
Languages in which tenders or requests to participate may be submitted : Norwegian
Electronic catalogue : Allowed
Variants : Not allowed
Tenderers may submit more than one tender : Not allowed
Deadline for receipt of tenders : 18/02/2025 11:00 +00:00
Deadline until which the tender must remain valid : 131 Day
Information that can be supplemented after the submission deadline :
At the discretion of the buyer, some missing tenderer-related documents may be submitted later.
Additional information : Documentation of qualifications is to be sent upon request. Otherwise, all documents must be enclosed with the tender.
Information about public opening :
Opening date : 18/02/2025 12:00 +00:00
Place : Oslo
Terms of contract :
The execution of the contract must be performed within the framework of sheltered employment programmes : No
A non-disclosure agreement is required : yes
Electronic invoicing : Required
Electronic ordering will be used : no
Electronic payment will be used : yes

5.1.15 Techniques

Framework agreement :
Framework agreement, without reopening of competition
Maximum number of participants : 1
Information about the dynamic purchasing system :
No dynamic purchase system
Electronic auction : no

5.1.16 Further information, mediation and review

Review organisation : Oslo tingrett
Organisation receiving requests to participate : Riksrevisjonen
Organisation processing tenders : Riksrevisjonen

8. Organisations

8.1 ORG-0001

Official name : Riksrevisjonen
Registration number : 974760843
Postal address : Storgata 16
Town : OSLO
Postcode : 0184
Country : Norway
Contact point : Jon Gisle Sæther
Telephone : +47 22241176
Roles of this organisation :
Buyer
Organisation receiving requests to participate
Organisation processing tenders

8.1 ORG-0002

Official name : Oslo tingrett
Registration number : 926725939
Postal address : C.J.Hambros plass 4,
Town : oslo
Postcode : 0164
Country : Norway
Telephone : +47 22035200
Roles of this organisation :
Review organisation

11. Notice information

11.1 Notice information

Notice identifier/version : 621adeb7-0361-4c78-b31b-4643477e9cbb - 01
Form type : Competition
Notice type : Contract or concession notice – standard regime
Notice dispatch date : 16/01/2025 10:15 +00:00
Notice dispatch date (eSender) : 16/01/2025 11:00 +00:00
Languages in which this notice is officially available : English

11.2 Publication information

Notice publication number : 00035327-2025
OJ S issue number : 12/2025
Publication date : 17/01/2025