IT-Angriffserkennungssysteme

The contract timeline is as follows:

• Contract start date: The obligation to perform the contract begins immediately upon contract award. The contractor must begin providing services immediately after the contract is awarded. Services for implementation must begin no later than 2 weeks after contract award.
• Total duration: The minimum contract term is 3 years from contract award.
• Extension: After the minimum term, the contract is extended by an additional 12 months each time, unless one of the contracting parties terminates it with 9 months' notice before the end of the respective contract year.
• Key milestones/phases: The contracting parties will agree on the detailed schedule and specific service contents in workshops/jour fixe immediately after the contract is concluded and then at regular intervals. The detailed planning defines individual milestones/sub-goals.

The core scope of work for this tender is the procurement and provision of a modern, centrally administrable security solution. The goal is to ensure continuous operation of the IT security infrastructure, ongoing monitoring, and protection of IT systems. The solution must restrict data transfer and processing by manufacturers or service providers to only the data and metadata essential for operation, analysis, protection, and support, while adhering to data minimization principles and applicable data protection requirements.

The Statement of Work summary and core deliverables include:

• The permanent provision of a software solution.
• Maintenance, support, and upkeep of the software solution.
• Services required for the introduction, integration, operation, and training related to the solution.
• Specific key components:
• 24/7 Security Operations Center (SOC) including Managed Service.
• Security Information and Event Management (SIEM), Logging, and Monitoring.
• Endpoint Protection / XDR.
• Vulnerability Scanner / Vulnerability Management.
• Auditability and Evidence Management.
• Implementation, integration, and maintenance, including initial training.

The obligation to provide contractual services begins immediately upon contract award. Licenses must be provided in a timely manner before the expiration of the old contract to prevent any service gaps, and implementation services must commence within two weeks of contract award. The minimum contract duration is 3 years from the date of contract award.