SEFAP26055. Procedura aperta per l’affidamento dei servizi di Help Desk, Cybersecurity e licenze accessorie per le esigenze di Giubileo 2025 S.p.A.

The contract has a duration of 24 months from its stipulation date. There is a possibility for the contract duration to be extended by up to an additional 24 months, maintaining the same prices, terms, and conditions.

Key milestones and phases include:

• Inizio Programma Cronologico (IPC): This marks the start of the chronological program and coincides with the contract stipulation date or, if applicable, the early delivery date of the activities.
• Presa in Carico del Servizio (PCS): This phase refers to the moment the contractor can effectively begin providing a specific service, following any initial take-over activities that commenced after the IPC.
• The "Programma cronologico" (chronological program), an attachment to the contract, details the dates for each service phase.
• For the cybersecurity service, a specific payment milestone is mentioned: 30% of the first year's due amount is paid upon the completion of the cybersecurity plan implementation.

The core scope of work for this tender involves the provision of Help Desk services, cybersecurity services, and accessory licenses for Giubileo 2025 S.p.A..

The Statement of Work summary and core deliverables include:

1. Help Desk Services:

• Support for company personnel in using listed equipment and devices.
• Collection, evaluation, cataloging, and resolution of simple IT problems.
• Management of escalation for hardware and software assistance requests.
• Addressing basic work-related issues (e.g., hardware, software, connectivity, network access, email, standard software usage).
• Ensuring 1st and 2nd level support for efficient and timely problem resolution.
• HelpDesk/IT system technical consulting for 1st and 2nd level and Networking (remote and on-site).
• On-site intervention calls.

2. Cybersecurity Services:

• Delivery of a cybersecurity plan within 90 days of approval.
• Continuous Monitoring and Management (MSSP/SOC) as a Managed Detection & Response service, 24/7/365.
• Coverage for a maximum of 50 endpoints (clients and servers).
• Constant monitoring of security events.
• Threat detection activities, event analysis and classification, threat hunting, and incident response with containment and remediation actions.
• Cyber Threat Intelligence (CTI) service, including continuous provision of updated Indicators of Compromise (IOC).
• NIS (Network and Information Systems) Directive compliance: pre-notification within 24 hours of a significant incident, full notification within 72 hours, and final report within one month.
• Definition of internal escalation and communication procedures towards CSIRT Italia.
• Preparation of templates for pre-notification, 72-hour notification, and final report.
• Training of designated reference personnel and their substitutes.
• Daily Microsoft 365 backup.
• Full cybersecurity service.
• Quarterly reporting on detected issues.

3. Licences and Fees:

• Microsoft Exchange Online Plan 1 (10 annual licenses).
• Microsoft 365 Business Premium (50 annual licenses).
• Microsoft Azure AD Domain service (1 monthly fee, max 3000 authentications/hour).
• Purchase and management of societagiubileo2025.it domain (1 annual fee).
• Microsoft Power BI Premium (4 annual licenses).
• Microsoft Azure Usage (1 monthly fee).
• Microsoft Office 365 Extra File Storage - 1000 licenses for a total of 1 TB additional storage (1 annual fee).
• Management of the company's Azure subscription.

The contract duration is 24 months, excluding any options, starting from the stipulation date or urgent commencement protocol.