fourniture, la mise en oeuvre, l’exploitation, la maintenance et le support de solutions de cybersécurité au bénéfice du syndicat mixte régional e-Collectivités et de ses collectivités adhérentes.

The initial duration of the framework agreement is one year, commencing from its notification. It is tacitly renewable three times for successive periods of one year. The total duration of the contract cannot exceed four years.

The tender "2026FOUR02 - Acquisition of mutualized cybersecurity products licenses" is divided into three distinct lots, each with a specific core scope of work and associated deliverables.

Lot 1: Externalized Backup Solution

The core scope involves the provision, implementation, and operation of a secure and resilient externalized data backup solution, ensuring compliance with standards such as GDPR.

Key deliverables include:

• Initial setup fees for the solution.
• Annual subscriptions for the externalized backup solution, initially for an estimated volume (e.g., 39 TB) and subsequently per defined data tranches (e.g., 50 GB or 100 GB per year).
• Creation or activation of additional community/tenant spaces.
• Complementary technical support, which may include assistance with deployment, consulting, migration, advanced configuration, or optimization of backup policies.
• Emergency intervention or reinforced assistance in case of major disaster, data loss, or critical incidents, if not already included in the subscription.

Lot 2: EDR/SOC Solution

The core scope is the provision, implementation, and operation of an Endpoint Detection and Response (EDR) solution, coupled with a Security Operations Center (SOC) service. This service provides supervision and processing of security events to enhance the cybersecurity of adherent IT systems by effectively detecting and responding to threats.

Key deliverables include:

• Initial setup fees for the EDR/SOC solution.
• Annual subscriptions for the EDR/SOC solution per protected agent (e.g., an initial volume of 900 agents), including the cloud/SaaS console, EDR agents, supervision, alert processing, reporting, and associated support.
• Creation or activation of additional community/tenant spaces with dedicated access and logical partitioning.
• Complementary technical support, covering assistance with agent deployment, migration, advanced configuration, security policy parameterization, rights structuring, or general cybersecurity consulting.
• Emergency intervention or enhanced assistance for critical incidents, compromises, cyberattacks, or advanced remediation needs, if not covered by the subscription.

Lot 3: Email Protection Solution (Antispam)

The core scope focuses on the provision, implementation, and operation of an email protection and anti-spam solution. This aims to protect electronic communications against spam, phishing attacks, and other targeted threats.

Key deliverables include:

• Initial setup fees for the anti-spam solution, potentially involving domain integration.
• Annual subscriptions for the anti-spam solution for an estimated volume (e.g., 2,500 licenses), and subsequently per license or protected mailbox. This includes the cloud/SaaS platform, incoming and outgoing email filtering, quarantine management, supervision, reporting, and associated support.
• Creation or activation of additional community, domain, or tenant spaces with dedicated access and logical partitioning.
• Complementary technical support, encompassing assistance with migration, advanced domain configuration, filtering policy parameterization (e.g., SPF/DKIM/DMARC), quarantine management, rights management, or email cybersecurity consulting.
• Emergency intervention or reinforced assistance in the event of critical incidents.