Lote 01: centro de operaciones de seguridad (soc) e inteligencia de amenazas

The contract has an initial duration of four (4) years, commencing the day after the signing of the work initiation act. There is a possibility of a one (1) year extension, making the maximum total duration five (5) years, including any extensions. This extension is mandatory for the contractor if they are notified at least two (2) months before the initial contract period ends.

While specific calendar start and end dates are not explicitly provided, the budget distribution indicates an initial period from the second semester of 2026 to the first semester of 2030, with a potential extension covering the second semester of 2030 and the first semester of 2031.

A key phase mentioned is a guarantee period of one (1) year, which begins upon the acceptance of the services.

The core scope of work for this tender, Contract No. 265/2025, involves cybersecurity services divided into three distinct lots to ensure global cybersecurity practices for Canal de Isabel II, S.A., M.P..

The Statement of Work summary and core deliverables are as follows:

LOT 01: SECURITY OPERATIONS CENTER (SOC) AND THREAT INTELLIGENCE

• Core Services: Cybersecurity Operation Services. These include monitoring information systems from various security event reporting sources, managing and operating these sources, normalizing and correlating events for security incident detection and response, and performing threat intelligence analysis to protect Canal de Isabel II, S.A., M.P. or its legitimate interests.
• Key Deliverables/Requirements: The contractor must maintain ISO/IEC 27001 or equivalent certification and ISO 22301 or equivalent certification throughout the service execution. Failure to recover these certifications within six months, if lost, may result in contract termination.

LOT 02: TECHNICAL SECURITY OFFICE (OTS)

• Core Services: Services designed to enhance the protection of Canal de Isabel II, S.A., M.P.'s infrastructures. This encompasses various security tests such as pentesting, audits, and reviews of security configurations, architectures, and capabilities. The objective is to elevate the current security level and ensure that both existing and new technologies are optimally configured and free from vulnerabilities.

LOT 03: ANALYSIS OF INFORMATION ASSET RISKS, REGULATIONS, AND CYBERSECURITY MATURITY

• Core Services: Services concentrating on cybersecurity governance management, risk analysis of information assets, and ensuring regulatory compliance in cybersecurity. These services specifically include the definition, maintenance, and ongoing monitoring of the internal regulatory framework, adherence to all relevant legal cybersecurity regulations, generation of security reports, dashboards, and metrics, implementation of training and awareness programs, and the assessment of cybersecurity maturity.