1. daļa - Kiberdrošības pārvaldības atbilstības audits

The contract timeline involves two levels: a general agreement and individual contracts.

For the general agreement ("Vienošanās"):

• Start Date: The agreement becomes effective on the day it is signed by the last party with a secure electronic signature and timestamp.
• End Date / Total Duration: The agreement is valid for 48 months from its effective date, or until the total contract price of all contracts concluded under it reaches the maximum of 142,000.00 EUR (excluding VAT), whichever occurs first.

For individual contracts ("Līgums"):

• Start Date: An individual contract becomes effective on the day it is signed by the last party with a secure electronic signature and timestamp. The performance of services under the contract may begin on its effective date, a specified date (e.g., 20___. gada ___. _______), or upon receiving a written notification from the Customer.
• End Date: An individual contract remains in force until all specified obligations are fully performed, unless it is terminated earlier as per the agreement, contract, or legal provisions.
• Key Milestones/Phases:
• The audit must be completed by a specific date (20___. gada ___. _______).
• Audit deliverables must be submitted to the Customer by a specific date (20___. gada ___. _______).
• The terms for service performance can only be altered in accordance with Chapter 10 of the Agreement.

The core scope of work for this tender involves five main evaluation tasks, each targeting systems or infrastructure with specific parameters (over 3000 registered users, up to 15 operating systems, up to 10 data exchange solutions, and up to 4 database instances or 15 databases). These tasks include:

1. Cybersecurity management compliance audit for an institution's system.

2. System security testing, which encompasses vulnerability analysis and penetration tests.

3. System source code and technical configuration security assessment.

4. Infrastructure security audit.

5. Performance testing for a performance system.

For each evaluation task, the required deliverables are:

• An audit or testing plan.
• An audit or testing report, detailing activities, findings, risk assessment, and evidence.
• Recommendations for addressing identified deficiencies.
• A management summary, which in the technical specification is expected to be documented with performed activities, tools used, findings, evidence, and divided into risk groups.
• A presentation of results during one remote meeting.