LOTUL 1 – Servicii dezvoltare platformă eUNBR și securitate cibernetică, inclusiv pregătire personal

The contract timeline is as follows:

• Total Duration: The implementation period of the contract is a maximum of 21 months.
• Contract Start Date: The contract enters into force on the date it is signed by both parties. The 21-month implementation period commences from the date of the contract's conclusion/signing. The exact signing date is not fixed at the time of clarification, as it depends on the tender procedure.
• Order to Start: An Order to Start will be issued within a maximum of 5 working days after the performance guarantee is established. However, the issuance of this order does not change the commencement date of the 21-month implementation period, which remains the contract signing date.
• Key Milestones/Phases: The contract includes six indicative stages:
• Stage 1: approximately 2 months.
• Stage 2: approximately 10 months.
• Stage 3: approximately 3 months.
• Stage 4: approximately 2 months.
• Stage 5: approximately 3 months.
• Stage 6: approximately 1 month.

The stated durations for these stages are indicative, and the total duration of 21 months represents a firm maximum ceiling. Offerors are permitted to propose an alternative distribution of durations for these stages.

The core scope of work and statement of work summary for this tender involves the comprehensive development, implementation, and operationalization of the eUNBR platform and its associated integrated cybersecurity solution.

Key activities include:

• Developing, implementing, integrating, configuring, testing, and operationalizing software components and the cybersecurity solution.
• Delivering, installing, configuring, and commissioning hardware equipment.
• Managing the logistics of hardware equipment, including packaging, labeling, handling, transport, delivery, and insurance.
• Providing technical support, maintenance, warranty, and remediation for incidents, vulnerabilities, and defects during the warranty and support period.
• Conducting analysis, design, integration, and operationalization of the eUNBR platform and its cybersecurity components.
• Ensuring interoperability with external IT systems, data migration, and synchronization.
• Configuring and commissioning developed software components, monitoring and analyzing security events, identifying vulnerabilities, and setting up detection and alerting mechanisms.
• Providing training and instruction for designated personnel.
• Ensuring the system functions securely, with interoperability, scalability, availability, and performance suitable for national use, continuous security monitoring, and compliance with legal requirements for information security, data protection, and cybersecurity.
• Defining the operational, functional, and technical framework for the contractor's activities through a logical structure of activities and results to ensure a phased, coherent, and controllable implementation process.
• The contract's object and expected results are cumulatively defined by the Statement of Work and its annexes, covering detailed non-functional requirements, functional modules, infrastructure, implementation activities and deliverables, technical requirements for the SIEM solution, security event collection, correlation and analysis, vulnerability scanning, integration, training, support, maintenance, and service levels for the "PLATFORMA e-UNBR" project (Lot 1).

Core deliverables explicitly stated include:

• Project Management Plan (L-01): Defining project organization, management structure, coordination, activity planning, monitoring, and control procedures.
• Requirements Analysis Document (L-02): Describing functional and non-functional requirements, operational flows, and identified needs.
• Architecture and Design Document (L-03): Outlining the functional and technical architecture, solution components, integration mechanisms, and overall system structure.
• Implementation and Testing Plan (L-04): Detailing the implementation strategy, testing scenarios, validation mechanisms, and testing phase planning.
• Testing and Validation Report (L-05): Presenting results from functional, technical, and operational tests.
• Technical and Operational Documentation (L-06).
• User and Administration Manuals (L-07).
• Consolidated mandatory deliverables also include the solution, configurations, executables, documentation, reports and testing, governance, and training and acceptance.