AMT-2026-0114:suministro de una solución de nueva generación para la protección de aplicaciones y servicios web para la Xunta de Galicia, cofinanciado por la Unión Europea en un 60% con cargo al programa de Galicia FEDER 2021-2027

The contract duration, total execution period, partial execution periods (if applicable), or the start date of the service are indicated in the "Plazo de ejecución/Entrega" (Execution/Delivery Period) section of the Specifications Sheet. These deadlines are indicative and may be subject to modification following the bidding process.

The contract may include provisions for one or more extensions, provided the contract's characteristics remain unchanged during the extension period. An extension requires at least two months' notice prior to the contract's termination, unless the governing terms specify a longer period; contracts with a duration shorter than two months are exempt from this notice requirement. The maximum allowed extension limit is three times the initially planned execution period.

For "result" contracts, the maximum execution period commences on the date stipulated in the contract. For activity contracts based on a global price, or by execution units or time, the maximum validity period is either as indicated in the "Plazo de ejecución/Entrega" section of the Specifications Sheet or until the maximum budget is depleted, whichever occurs first.

The specific contract start date, end date, or total duration are not explicitly stated in the provided documents.

The core scope of work for this tender is the supply and implementation of a new generation solution designed for the protection of web applications and services for the Xunta de Galicia. This solution aims to provide mechanisms for real-time inspection and analysis of web traffic, enabling granular security policy application, event traceability, alert generation, and automatic blocking and mitigation measures against attacks and malicious behaviors.

The statement of work summary includes the following key deliverables and activities, particularly in the installation, configuration, and commissioning phase:

• Analysis of the current situation and the corporate network's communication architecture, followed by the design of the definitive deployment architecture for the solution, considering technical and functional requirements.
• Physical installation of hardware and software at Amtega's facilities in Santiago de Compostela, along with the configuration of required licenses. This includes supplying any necessary physical elements for equipment connection and securing to existing racks, and labeling installed equipment as per Amtega's guidelines.
• Configuration and parameterization of the solution's management and operation mechanisms to ensure the system is fully operational.
• Definition and configuration of applicable security and administration policies.
• Integration of the new solution with existing corporate monitoring systems and the Security Information and Event Management (SIEM) system.