Servizi professionali per la gestione e conduzione di infrastrutture di cybersecurity delle PAC

The contract timeline is structured with two main components: the Framework Agreement (Accordo Quadro) and the Executive Contracts (Contratti Esecutivi).

The Framework Agreement has an initial duration of 30 months, starting from its activation date. This period is when administrations can send Preliminary Supply Requests. An additional 2 months, referred to as "Closing Time," are appended to this 30-month period, allowing for the finalization of Executive Contracts related to requests submitted within the initial 30 months. The Framework Agreement can also be extended by up to an additional 2 months if the potential erosion value is not exhausted by the initial 30-month term. This extension also includes an additional 2 months of Closing Time.

Each Executive Contract becomes effective from its stipulation date and can last for a maximum of 36 months. This 36-month duration is calculated either from the stipulation date or from the activation date of the first service as outlined in the General Work Plan. Exceptional circumstances may allow for the extension of a Supply Contract for the duration strictly necessary to identify a new contractor, provided specific conditions are met.

The core scope of work for this tender involves professional services for the management and operation of cybersecurity infrastructures within Public Administrations.

The Statement of Work summary and core deliverables include:

• Operational Management of Security Systems: This includes providing technical evidence to support operational management activities of security systems, such as configuration excerpts, system logs, and execution reports.
• Technical Coordination: Participation in and documentation of technical-operational coordination meetings to align on planned and completed activities.
• Security System Operational Management Plan: An initial document outlining the perimeter of managed security systems, operational procedures, and interactions with the Administration's structures.
• Access Management Process Analysis and Evaluation: Reporting on the analysis of existing access and identity management processes, including technical evaluations and identifying areas for improvement.
• Operational Implementation and Access Control: Describing support for the operational implementation of access and identity management models, encompassing access request management, privilege verification, and identity control, in collaboration with the Administration.
• Profile, Account, and Identity Remediation: Documenting activities for verifying and remediating digital profiles, accounts, and identities, specifically targeting the removal of obsolete accounts, correction of inconsistent privileges, and elimination of duplicate or unnecessary identities.
• Technical Mitigation Recommendations: Providing documentation with recommended technical and procedural mitigation measures consistent with the security controls adopted by the Administration.
• Specialized Contribution to Continuous Vulnerability Management: Offering technical evidence and specialized input to contextualize the results of continuous vulnerability management, particularly concerning vulnerabilities, exposures, and risks related to Artificial Intelligence and Machine Learning components or services.
• Security Event and Activity Logging: Maintaining a chronological log to support security event management activities, triage, and classifications, which serves as the information base for reports.
• Periodic Work Progress Reports (SAL periodico): Submitting operational and executive-level reports on work progress, detailing activities performed during specific periods.
• Responses to Clarification Requests: Providing technical feedback to the Administration's requests for clarification on activities or deliverables.