Published
Prestations d'audits de cybersécurité - Ligne C du métro Toulousain
Notice number: 26-81640
KEY INFORMATION
- Submission deadline
- • Oct 30, 2026
- Location
- 🇫🇷 France
- Contracting authority
- Tisséo Ingénierie, agissant au nom et pour le compte de Tisséo Collectivités
- Accepted Languages
- FRA
- Tender type
- Services
- Contract Value
- Published date
- Aug 20, 2026
TENDER DESCRIPTION
This tender seeks comprehensive cybersecurity audit services and associated project management for the new Toulouse Metro Line C, a fully automated system scheduled for completion by 2028. The scope encompasses Architecture, Configuration, Organizational and Physical Audits, and Penetration Tests, with deliverables including a project management plan, detailed audit reports, and meeting minutes. Bidders must demonstrate pertinent audit methodologies and hold PASSI (Prestataire d'audit de sécurité des systèmes d'information) professional qualification certificates, adhering to the PASSI reference framework, version 2.2 of August 1, 2024. The contract has a duration of 21 months, with specific milestones for audit initiation and completion, and requires a minimum annual global turnover of €500,000 (excluding tax) over the last three financial years.
TENDER BRIEF
The contract duration is 21 months, commencing from the Service Order for the start of services.
Key milestones and their associated deadlines are as follows:
- TO (Service Order for the start of project management services):
- Delivery of the Project Management Plan is due 1 month from the TO.
- T1(archi) (Service Order for the start of the architecture audit):
- The initialization meeting for the architecture audit is scheduled 2 weeks from T1(archi).
- The start of the architecture audit and data availability is 1 month from T1(archi).
- The closure of the architecture audit is 3 months from T1(archi).
- T1(conf) (Service Order for the start of the configuration audit):
- The first initialization meeting for the configuration audit is 2 weeks from T1(conf).
- The start of the configuration audit and data availability is 1 month from T1(conf).
- The final restitution meeting and closure of the configuration audit is 8 months from T1(conf).
- T1(intrusion) (Service Order for the start of intrusion tests):
- The initialization meeting for intrusion tests is 2 weeks from T1(intrusion).
- The final restitution meeting for intrusion tests is 4 months from T1(intrusion).
An audit agreement will be drafted by the service provider at milestone T1 to frame the terms and contractual aspects of each audit type. A monthly follow-up meeting is planned, with the possibility of becoming weekly during active phases (e.g., during intrusion testing). A monthly progress report will be submitted by the last working day of each month.
Sources
- 1CCAP_Prestation d'audit cyber Ligne C.pdf — “marché. Le Titulaire du présent marché reconnaît le caractère évolutif par définition, de son environnement normatif, qu'il soit technique, réglementaire ou autre. A ce titre, il reconnaît avoir la nécessité de se tenir…”
- 2RC_Prestation d'audit cyber Ligne C.pdf — “forme de groupement à l'attributaire. Pour la bonne exécution du marché, si le marché est attribué à un groupement d'entreprises, il sera conclu avec un groupement CONJOINT d'entreprises (avec mandataire SOLIDAIRE) ou un…”
- 3AE_Prestation d'audit cyber Ligne C.docx — “MARCHE Le marché est conclu pour une durée de 21 mois à compter de l’Ordre de Service de démarrage des prestations. PAIEMENTS Le maître d'ouvrage se libérera des sommes dues au titre du présent marché par virement au cré…”
- 4CCTP_Cahier des charges technique des audits de cybersécurité Ligne C.pdf — “et les jalons de chaque audit, ainsi que la comitologie et les modalités d'organisation globale de la prestation. Une convention d'audit sera également rédigée par le prestataire au jalon T1 pour encadrer les modalités e…”
The core scope of work for this tender primarily involves cybersecurity audits and associated project management for the Line C metro project.
The statement of work summary includes:
- Project Management: This encompasses the creation of a project management plan and the provision of monthly progress reports and meeting minutes.
- Audits: The tender requires several types of audits:
- Architecture Audit: Deliverables include support for the kick-off meeting, meeting minutes, and a global architecture audit report.
- Configuration Audit: Deliverables consist of support for the kick-off meeting, meeting minutes, unitary configuration audit reports (in Excel format per equipment), and a final synthesis report for the configuration audit.
- Organizational and Physical Audit.
- Intrusion Test: Deliverables involve support for the kick-off meeting, meeting minutes, and a global intrusion test report.
Sources
- 1DPGF.xlsx — “DPF Tranche Ferme,, Missions du Titulaire,,Montant en euros HT Management de Projet,, ,Livrable de management de projet : plan de management de projet ,0 ,Avancement Mensuel (RMA et réunions),0 Sous-total - Management de…”
- 2CCAP_Prestation d'audit cyber Ligne C.pdf — “marché. Le Titulaire du présent marché reconnaît le caractère évolutif par définition, de son environnement normatif, qu'il soit technique, réglementaire ou autre. A ce titre, il reconnaît avoir la nécessité de se tenir…”
- 3CCTP_Cahier des charges technique des audits de cybersécurité Ligne C.pdf — “de la présente consultation. 2.2.5 Livrables requis Les livrables attendus de l'audit de configuration sont détaillés ci-dessous. 2.2.5.1 Rapports unitaires d'audit de configuration Un rapport d'audit de configuration un…”
Login to view all answers and insights
Unlock tender brief for freeTENDER DOCUMENTS
DIRECTORY • 18 FILES
- Annexe1_RC_Liste des pièces.pdf186 KBPDF
- MPI1862843_AAPC.pdf13 KBPDF
- DPGF.xlsx25 KBXLSX
and 11 other documents
Login to view and download all tender documents
Unlock documents for freeASK AI ABOUT THIS TENDER
Can a foreign company apply?
Yes, foreign companies can apply as long as they meet all the requirements set out in the procurement documents.
Login to ask more questions.
Unlock AI tender chat for freeUnlock your tender workflow
Run your first search, evaluate the results, save a daily monitor and start building a pipeline of tenders worth pursuing.