Published
BIG – Incident Response Retainer (IRR) – Unterstützung im Fall eines Cybersicherheitsvorfalls
Notice number: 00684807-2026
KEY INFORMATION
- Submission deadline
- • Nov 3, 2026
- Location
- 🇦🇹 Austria
- Contracting authority
- Bundesimmobiliengesellschaft m.b.H.
- Accepted Languages
- German
- Tender type
- Services
- Contract Value
- Published date
- Oct 5, 2026
TENDER DESCRIPTION
This tender seeks a qualified Incident Response Retainer (IRR) service provider to deliver comprehensive incident response, forensics, and crisis management support in the event of cybersecurity incidents. The core scope encompasses 24x7 availability for rapid incident handling, IRR onboarding, incident management, detailed incident response and forensic investigations (including log/malware analysis and system restoration), and crisis management support, ensuring seamless cooperation with the client's SOC and adherence to GDPR and Data Protection Act regulations. Services must operate within the EEA or Switzerland, and personnel will undergo security checks. Bidders are required to demonstrate a minimum annual turnover of EUR 500,000 over the last three fiscal years and hold professional liability insurance with a coverage of at least EUR 1,000,000, with submissions to be made electronically in German. The contract is scheduled to commence on April 1, 2027, for an initial period of 60 months, with options for up to four two-year extensions.
TENDER BRIEF
The contract is scheduled to begin on April 1, 2027, and has an initial duration of 60 months. This means the contract is expected to end on April 1, 2032. The contract also includes options for extension, allowing it to be prolonged multiple times in two-year increments, with a maximum of 4 such extensions.
Sources
- 1256812-00.pdf — “im Fall eines Cybersicherheitsvorfalls : 1 : : Dienstleistungen : ja EUR : 72000000 : AT130 : Österreich Beschreibung Bezeichnung des Auftrags Referenznummer / Losnummer Kurze Beschreibung Qualifizierte Incident Response…”
The core scope of work for this tender is the provision of an Incident Response Retainer (IRR) to offer qualified incident response, forensics, and crisis management support in the event of a cybersecurity incident.
The statement of work summary includes:
- Incident Response Retainer (IRR) Provision: The main objective is to have 24x7 availability for rapid and structured handling of cybersecurity incidents, both technically and organizationally.
- IRR-Onboarding: Initial setup and integration of the retainer services.
- Incident Management: Support for coordinating the processing of cybersecurity incidents.
- Incident Response and Forensics: This involves supporting incident containment, conducting or assisting with forensic investigations, performing log and malware analyses (including evidence preservation), aiding in the restoration of affected systems, and ensuring close collaboration with the client and a Security Operations Center (SOC) partner. The contractor is also expected to ensure seamless cooperation with the client's SOC service provider, including the exchange of Indicators of Compromise, log data, and analysis results.
- Crisis Management: Providing support to the client's crisis team, assisting with notifications to authorities and cooperation with law enforcement, supporting communication and negotiation with attackers, and preparing final reports along with conducting "Lessons Learned" workshops.
- Capacity and Response Times: The selected contractor must guarantee that agreed-upon response times are met even during multiple simultaneous security incidents, and ensure adequate personnel and technical capabilities are available.
- Contract Duration: The framework agreement is for a period of five (5) years, with the possibility of multiple extensions in two-year increments.
Sources
- 1BIG_IRR_VVmBK_TNU_261001_ef.pdf — “Dienstleister auszulagern. Dies umfasst insbesondere die Bereitstellung eines Incident Response Retainers (IRR) zur kurzfristigen Unterstützung im Fall eines Cyber�sicherheitsvorfalls. Ziel ist es, im Bedarfsfall jederze…”
- 2256812-00.pdf — “Contract notice Document ID: 256812-00 Questions in advance Legal basis of the procedure: Directive 2014/24/EU Date of dispatch of this notice Date: October 1, 2026 Section I: Public Contracting Authority organization Of…”
Login to view all answers and insights
Unlock tender brief for freeTENDER DOCUMENTS
DIRECTORY • 2 FILES
- BIG_IRR_VVmBK_TNU_261001_ef.pdf442 KBPDF
- 256812-00.pdf113 KBPDF
Login to view and download all tender documents
Unlock documents for freeASK AI ABOUT THIS TENDER
Can a foreign company apply?
Yes, foreign companies can apply as long as they meet all the requirements set out in the procurement documents.
Login to ask more questions.
Unlock AI tender chat for freeUnlock your tender workflow
Run your first search, evaluate the results, save a daily monitor and start building a pipeline of tenders worth pursuing.