Επιστολή προσφοράς για παροχή υπηρ πιστοποίησης Συστήματος Διαχείρισης Ασφάλειας Πληροφοριών 27001

The contract involves the re-certification of an Information Security Management System (ISO/IEC 27001:2022). The existing certificate expires on 30/12/2026, and a re-certification audit must be conducted before this date to renew the certificate for the next three years. The new certificate will have a three-year validity. The overall process includes annual surveillance audits for the years 2027 and 2028. The deadline for submitting offers is 22/10/2026 at 11:00 AM. The invitation for bids was issued on 15-10-2026.

The core scope of work for this tender involves the provision of certification services for the Elefsina Port Authority S.A.'s Information Security Management System, aligning with the ISO/IEC 27001:2022 standard, and the subsequent issuance of a new three-year validity certificate. This project aims to renew an existing certificate that is set to expire on December 30, 2026. The organization has already transitioned its system from ISO/IEC 27001:2013 to ISO/IEC 27001:2022.

The activities and processes covered by this new assessment and certification include:

• Services related to the loading and unloading of solid, bulk, and liquid cargoes.
• Procedures for the decommissioning of vessels.
• The operation and management of the marina.
• The execution of port projects and public procurement activities.

The overall process is structured into the following key stages and deliverables:

1. Certification Process:

• Documentation review/assessment: This stage involves a thorough review of the essential and standard-required documentation, including an assessment of the Risk Assessment methodology and its implementation results. This review may not necessarily be conducted at the Organization's premises.
• Certification audit: An on-site audit will be performed to confirm the presence, operational effectiveness, and efficiency of the management system.
• Audit and results evaluation report: A comprehensive report detailing the findings and evaluated results of the audit.
• Certificate issuance: The final step, where the new ISO/IEC 27001:2022 certificate with a three-year validity is issued.

2. Annual Surveillance Audits:

• Two annual surveillance audits are scheduled for the subsequent two years (2027 and 2028).
• These audits will verify the continuous implementation of the information security management system, assess its compliance with certification requirements, and identify areas for improvement.
• Each successful audit will conclude with a report of findings and a confirmation of the system's successful audit.
• Maintaining the certificate's validity is contingent upon the successful completion of these annual surveillance audits.

The total estimated budget for these services is €2,630.00, plus 24% VAT, distributed as follows: €890.00 for the recertification audit, and €870.00 for each of the two annual surveillance audits in 2027 and 2028. Payment to the contractor will be made upon the successful delivery of these specified services and associated legal documentation.