ENSOC Hosting Site ES ICT Infrastructure (Computing, Storage, Networking, Cybersecurity)

The contract duration is 36 months. The contract enters into force on the date the last party signs it. Renewal of the contract is not applicable. There is a mention of the performance of the contract being divided into phases, but this is presented as an "if applicable" clause and no specific phases or their durations are provided for this contract.

The core scope of work for this tender involves the provision of services by the contractor to the contracting authority in accordance with specified terms and requirements. The tender is specifically for the ENSOC Hosting Site ES ICT Infrastructure, encompassing Computing, Storage, Networking, and Cybersecurity. The objective is to establish and operate a European Cross-border Platform (ENSOC CBP) to enhance capacities for analyzing, detecting, and preventing cyber threats, supporting the generation of high-quality cyber threat intelligence through data exchange, tool sharing, and joint development of cyber detection, analysis, and prevention capabilities in a trusted environment.

The statement of work summary includes the provision of a segregated infrastructure and services compliant with Spanish National Security Scheme (ENS) regulations, Classified Information Management requirements from the National Security Office (ONS), and European Union Classified Information requirements up to EU-R (RESTREINT UE/EU RESTRICTED) level. The project also aims to provide secure communication services throughout its 36-month lifecycle.

The core deliverables and areas of work are explicitly divided into five main categories:

• Hardware requirements for ENSOC CBP ES Hosting Site: This includes specifications for computing, RAM, OS storage, operational storage, appliances, and other requirements for hosted solutions such as REYES CBP, IRIS-CBP, AWAKE-CBP, MISP-CBP, Chatbot, Website, and Anonymization and AI Modules. It also covers identity governance for centralized user and identity management, back-up solutions, and updates and maintenance services.
• Minimum Security Requirements and Services of ES Hosting Site: This encompasses Intrusion Detection Systems (network and host-based), Intrusion Prevention Systems (IPS), Firewalling, Network segmentation, End-to-end traffic encryption, Activity/traffic monitoring and traceability, User authentication and authorization, Vulnerability scanning and monitoring, Sensitive information protection, and Security awareness and training.
• Minimum Secure Communications requirements: This involves initial project delivery and ensuring Internet connectivity for the entire project lifecycle, along with detailed redundancies via alternative Internet Service Providers (ISPs).

Deliverables will be further detailed in the Technical Specifications document and may include project-specific Intellectual Property Rights (IPR) arrangements, such as CTI feed licenses, commercial software configured for the ENSOC Hosting Consortium, and subsequent software development. The contractor is also expected to draft and maintain specific data protection documentation, ensuring compliance and incorporating data protection by design.