Published

    Podniesienie odporności na zagrożenia cybernetyczne infrastruktury wodno-ściekowej w Gminie Dobczyce, w ramach projektu "Cyberbezpieczne Wodociągi"

    Notice number: 00533423-2026

    🇵🇱 PolandGmina i Miasto DobczyceGoods

    KEY INFORMATION

    Submission deadline
    Sep 7, 2026
    Location
    🇵🇱 Poland
    Contracting authority
    Gmina i Miasto Dobczyce
    Accepted Languages
    Polish
    Tender type
    Goods
    Contract Value
    Published date
    Jul 31, 2026

    TENDER DESCRIPTION

    This tender seeks a comprehensive solution to enhance the cyber resilience of the Dobczyce Municipality's water and sewage infrastructure, encompassing the delivery of essential cybersecurity devices and the implementation of robust security solutions as part of the "Cybersecure Waterworks" project. The scope includes providing physical servers, storage, managed network devices, Next-Gen Firewalls (NGFWs), OT network monitoring probes, UPS, and various software such as Privileged Access Management (PAM), SIEM Wazuh, EDR, and backup systems. The selected contractor will be responsible for solution design, integration of complex IT/OT/ICS/IoT environments, configuration of redundant network infrastructure and highly available virtualization, deployment of Active Directory aligned with IEC 62443, security testing, development of an Information Security Management System (ISMS - SZBI), and extensive staff training. Key technical requirements include adherence to standards like 802.1x, WPA3-Enterprise, and methodologies such as OWASP, NIST SP 800-115, and MITRE ATT&CK for ICS, with specific hardware specifications for servers, Wi-Fi access points, and UPS devices, including support…

    TENDER BRIEF

    Question: What is the contract timeline?

    Context: Contract start date, end date, total duration, and any key milestones or phases mentioned. Return null if not stated.

    Format: Answer with a plain text string. If not found, write "null".

    Contract start date: null

    Contract end date: null

    Total duration: null

    Key milestones or phases:

    • Offer submission deadline: 07/09/2026 09:00 (UTC+02:00).
    • Offer opening date: 07/09/2026 09:30 (UTC+02:00).
    • Offer validity period: 3 months.
    • Offer binding period: 90 days from the offer submission deadline, concluding on 28.11.2026. This period may be extended by up to 60 days.
    • Delivery and implementation of the subject of the contract: Up to 45 days from the date of contract conclusion.
    • Technical support: A minimum of 36 months, starting from the date the acceptance protocol is signed without reservations.
    • Direct reporting of service issues to the manufacturer: 60 months from the date the acceptance protocol is signed without reservations.

    Sources

    • 1ogloszenie o zmianie opublikowane 2026-OJS146-00533423-pl.pdf — “Organ odwoławczy Organizacja udzielająca dodatkowych informacji na temat procedur odwoławczych 8.1. ORG-0000 Oficjalna nazwa: Publications Office of the European Union Numer rejestracyjny: PUBL 533423-2026 Page 7/7 Miejs…
    • 2Ogłoszenie o zamówieniu opublikowane 524150-2026 - Procedura konkurencyjna - TED.pdf — “ul. Spokojna 13a Zamówienie jest objęte zakresem Porozumienia w sprawie zamówień rządowych (GPA): nie 5.1.9. Kryteria kwalifikacji Źródła kryteriów wyboru: Dokumenty zamówienia 5.1.10. Kryteria udzielenia zamówienia Kryt…
    • 3Część nr I 24-07-2026-SWZ-dostawa urządzeń dla Cyberbezpiecznego Wodociągu w GMD.pdf — “dokumentów elektronicznych oraz środków komunikacji elektronicznej (Dz. U. z 2020 r. poz. 2452) oraz rozporządzenia Ministra Rozwoju, Pracy i Technologii z dnia 23 grudnia 2020 r. w sprawie podmiotowych środków dowodowyc…
    • 4Część II Wzór PPU Cybernetyczne_Wodociągi_dostawa_urządzeń_wdrożenie_systemu.pdf — “do 45 dni od dnia zawarcia umowy tj. do dnia 2. Wykonawca uruchomi wsparcie techniczne przez okres co najmniej 36 miesięcy od dnia podpisania protokołu odbioru przez Zamawiającego bez zastrzeżeń. Wykonawca do protokołu o…

    • Citrix
    • Amazon WorkSpaces
    • VDI (Virtual Desktop Infrastructure)
    • X Window system
    • macOS (client monitoring)
    • Ubuntu 22.04 (client monitoring)
    • Wayland (desktop environment for Ubuntu 22.04)
    • X Window Forwarding
    • AIX system monitoring
    • AppStream
    • Azure VDI/App
    • SaaS (Software as a Service)
    • On-premises (software version)
    • Azure SQL (data storage type)
    • SQL Database (data storage type)
    • gMSA/sMSA accounts (for SQL database connection)
    • Object storage (data storage)
    • File storage (data storage)
    • API (Application Programming Interface)
    • TOTP (Time-based One-Time Password)
    • Active Directory (integration)
    • SIEM (Security Information and Event Management) (integration)
    • WebLogin systems (integration)
    • SAML (Security Assertion Markup Language) (integration)
    • 802.1x (standard for Access Point WiFi and switches)
    • WPA3-Enterprise (standard for Access Point WiFi)
    • IPv4 (protocol for NGFW)
    • IPv6 (protocol for NGFW)
    • DHCP (service for NGFW)
    • Stateful Inspection (Firewall class)
    • NAT n:1 (Network Address Translation)
    • NAT 1:1 (Network Address Translation)
    • PAT (Port Address Translation)
    • Layer 3 router (mode for NGFW)
    • Layer 2 bridge (mode for NGFW)
    • VLAN (Virtual Local Area Network) (for switches)
    • NGFW (Next Gen FireWall)
    • PAM (Privileged Access Management) software
    • UPS (Uninterruptible Power Supply)
    • Rack enclosure (for servers)
    • SFF SATA/SAS/NVMe 2.5” disks (for servers)
    • PoE (Power over Ethernet) IEEE 802.3af/802.3at (for Access Point WiFi)
    • LiFePO₄ (Lithium-ion battery type)
    • SCADA systems (existing infrastructure for compatibility)
    • IT/OT/ICS/IoT (scope for security solution)
    • IIoT (scope for security testing)
    • GUI (Graphical User Interface)
    • OWASP Testing Guide (methodology for penetration tests)
    • NIST SP 800-115 (methodology for penetration tests)
    • IEC 62443 (methodology for penetration tests)
    • MITRE ATT&CK for ICS (methodology for penetration tests)
    • System Zarządzania Bezpieczeństwem Informacji (SZBI) (Information Security Management System methodology)
    • BCP (Business Continuity Plans) (methodology)
    • DRP (Disaster Recovery Plans) (methodology)
    • High availability (HA)
    • Disaster recovery
    • Multi-tenant mode
    • Load balancer support
    • Server rack enclosure maximum 1U height
    • Server minimum 8 SFF SATA/SAS/NVMe 2.5” disks
    • Server motherboard must support up to two processors
    • Server motherboard must be designed by the server manufacturer
    • Access Point WiFi dimensions not exceeding 161 x 161 x 34 mm
    • UPS input voltage: 230 V (1-phase), tolerance 176 – 288 V
    • UPS input frequency: 50/60 Hz, tolerance 40–70 Hz
    • UPS input power factor/THDi: > 0.99 / < 5 %
    • UPS output voltage (pure sine wave): 230 V
    • UPS output frequency: 50 Hz
    • UPS output power factor: 1.0
    • UPS efficiency: up to 94 % in on-line mode
    • UPS overload capacity: min. 105 % continuously; 125 % for 5 min; 150 % for 60 s
    • UPS battery charging time: < 2 hours to 90% after full discharge
    • UPS battery backup time: 10 minutes for 100% load, 20 minutes for 50% load
    • UPS must support up to 8 external battery modules (EBC)
    • UPS batteries must be hot-swappable
    • UPS battery safety standards: UL1642, UL1973, UL60730-1, IEC 62619

    Sources

    • 1Część III 24-07-2026-Załącznik nr 9 do SWZ - OPZ Cyberbezpieczny Wodociąg w GMD.docx — “i Citrix. Oprogramowanie powinno obsługiwać monitorowanie Amazon WorkSpaces. Oprogramowanie powinno obsługiwać środowiska VDI z monitoringiem nieutrwalonych VDI i licencjami pływającymi. Oprogramowanie powinno obsługiwać…
    • 2Część nr I 24-07-2026-SWZ-dostawa urządzeń dla Cyberbezpiecznego Wodociągu w GMD.pdf — “szczegółowe parametry techniczne oraz zestawienie porównawcze z wymaganiami Zamawiającego w formie czytelnej tabeli z kolumnami wymagane - oferowane - odchylenie / wyjaśnienie", w sposób umożliwiający jednoznaczną ocenę…

    Login to view all answers and insights

    Unlock tender brief for free

    TENDER DOCUMENTS

    DIRECTORY • 11 FILES

    • espd-request.xml
    • espd-request.pdf
    • Część nr I 24-07-2026-SWZ-dostawa urządzeń dla Cyberbezpiecznego Wodociągu w GMD.pdf

    and 4 other documents

    Login to view and download all tender documents

    Unlock documents for free

    ASK AI ABOUT THIS TENDER

    You

    Can a foreign company apply?

    Riko

    Yes, foreign companies can apply as long as they meet all the requirements set out in the procurement documents.

    Login to ask more questions.

    Unlock AI tender chat for free

    Unlock your tender workflow

    Run your first search, evaluate the results, save a daily monitor and start building a pipeline of tenders worth pursuing.

    First monitor on Day 1All features included in trialNo credit card required

    You may also be interested in

    Similar tenders