Dodávka, licence, implementace a uvedení do provozu firewallových a NGFW řešení

The total duration of the services for the SIEM system is a minimum of 24 months. The documents do not explicitly state a contract start date, end date, or any specific key milestones or phases.

The core scope of work and statement of work summary for this tender primarily involves the provision of services and deliveries related to cybersecurity and network infrastructure.

Key services include:

• Providing Security Operations Center (SOC) services, which must also encompass vendor services over a SIEM (Security Information and Event Management) system, with a financial scope of at least 200,000 CZK without VAT per month for a minimum duration of 24 months.
• Delivery and implementation of a firewall solution that includes central management of security policies and management of multiple security nodes within an organization, with a value of at least 5,000,000 CZK without VAT.
• At least one of the submitted deliveries of a similar nature must simultaneously include:
• Delivery and implementation of an NGFW (Next-Generation Firewall) solution or similar network security solution.
• Central management of security policies.
• Operation or implementation in more than one client location.
• High availability (HA) or other measures ensuring the availability of key infrastructure parts.

The tender also classifies the subject into two categories:

• Category 1 (Network Devices): This includes network devices, software implementation services, software configuration services, and IT services.
• Category 2 (Data Network Management and Support): This involves managing and supporting data networks, software support, software maintenance and repairs, system support, and technical computing support.

For Category 2, suppliers may have administrative or privileged access to the security infrastructure and internal operational and security information. Before concluding individual contracts in this category, a risk assessment of the supplier relationship will be conducted, the supplier's significance determined, specific security measures defined, and relevant requirements from Annex 5 of Decree No. 409/2025 Sb. incorporated into the contract. These contracts will include provisions for confidentiality and protection of information integrity and availability, named and uniquely identifiable accounts, separation of regular and administrative accounts, the principle of least privilege, multi-factor authentication, managed remote access, time-limited and approved privileged access, logging and auditing of administrative activities, and the obligation to report security events, incidents, and vulnerabilities.The core scope of work and statement of work summary for this tender focuses on cybersecurity and network infrastructure services and deliveries. This includes providing Security Operations Center (SOC) services, which must incorporate vendor services for a SIEM (Security Information and Event Management) system, with a minimum monthly financial scope of 200,000 CZK without VAT for at least 24 months.

Another significant aspect is the delivery and implementation of a firewall solution. This solution must include central management of security policies and the management of multiple security nodes within a single organization, valued at a minimum of 5,000,000 CZK without VAT. Furthermore, at least one of these deliveries must simultaneously involve:

• The provision and deployment of an NGFW (Next-Generation Firewall) solution or a similar network security solution.
• Centralized management of security policies.
• Implementation or operation across more than one client location.
• High availability (HA) or alternative measures to ensure the availability of critical infrastructure components.

The tender classifies the subject into two main categories:

• Category 1 covers network devices, along with software implementation, configuration, and general IT services.
• Category 2 involves data network management and support, including software support, maintenance, repairs, system support, and technical computing support. For Category 2, suppliers may be granted privileged access to security infrastructure and internal operational data, necessitating a risk assessment and the implementation of specific security measures such as confidentiality, unique user accounts, separation of administrative accounts, least privilege principles, multi-factor authentication, controlled remote access, time-limited access, audit logging, and incident reporting.