Published
Servizi Managed Security Services gestiti da remoto per le PAC
Notice number: 00505032-2026
KEY INFORMATION
- Submission deadline
- • Sep 15, 2026
- Location
- 🇮🇹 Italy
- Contracting authority
- Consip S.p.A.
- Accepted Languages
- Italian
- Tender type
- Services
- Contract Value
- Published date
- Jul 22, 2026
TENDER DESCRIPTION
This tender is for the provision of remotely managed Managed Security Services, along with comprehensive Governance, Risk Analysis, and Control services for Public Administrations. The scope includes developing operational continuity plans, proposing solutions for regulatory compliance (with a focus on NIS-2), conducting vulnerability assessments, providing security governance, and preparing Incident Response Plans, all while ensuring direct usability and know-how transfer. Technically, services require compatibility with various programming languages (e.g., .NET, PHP, C#) and frameworks (e.g., React, Angular), adherence to AgID Guidelines, and the application of methodologies like the MITRE ATT&CK framework, with delivery options including Public Cloud, Hybrid, or Contender's Infrastructure. The Framework Agreement spans 24 months, extendable by up to 6 months, with Executive Contracts having a maximum duration of 48 months, commencing after a 10-working-day takeover and startup phase. Bidders must demonstrate a global turnover of at least €40,000,000.00 excluding VAT, achieved in the best three years of the last five calendar years preceding the tender publication.
TENDER BRIEF
The contract timeline is structured as follows:
The Framework Agreement (Accordo Quadro) has a duration of 24 months from its activation date, or a shorter period if the maximum established value is reached. This duration can be extended by up to an additional 6 months.
Each Executive Contract will commence its effects after the "Presa in carico e startup" (Takeover and startup) phase and will have a maximum duration of 48 months.
The operative phases of the supply include:
a) Presa in carico e startup (Takeover and startup)
b) Erogazione a regime (Full operation)
c) Fine fornitura (End of supply)
The "Presa in carico e startup" phase must be completed within 10 working days from the contract stipulation date.
Key milestones mentioned include:
- Expected start date of activities.
- Expected end date of activities.
- Deadline for completing requirements gathering, estimation, and work plan preparation.
- Intermediate approval and compliance verification.
- Final acceptance and compliance verification.
Sources
- 1ID 2737 - Capitolato Tecnico Generale.pdf — “Controllo per le Pubbliche Amministrazioni (ID 2737) Capitolato Tecnico Generale Classificazione Consip: Ambito pubblico 12 Consip 3. DURATA L'Accordo Quadro ha una durata di 24 mesi a decorrere dalla data di attivazione…”
- 2ID 2737 - Schema di Accordo Quadro Lotti 1 e 2.pdf — “in corso d'esecuzione del Contratto esecutivo le verifiche sostanziali circa l'effettivo possesso dei requisiti e delle risorse oggetto dell'avvalimento da parte dell'impresa ausiliaria, nonché l'effettivo impiego delle…”
- 3ID 2737 - Schema di Accordo Quadro Lotti 3 e 4.pdf — “eseguono in corso d'esecuzione del Contratto esecutivo le verifiche sostanziali circa l'effettivo possesso dei requisiti e delle risorse oggetto dell'avvalimento da parte dell'impresa ausiliaria, nonché l'effettivo impie…”
- 4ID 2737 - Capitolato d'oneri.pdf — “Quadro per l'approvvigionamento delle prestazioni oggetto dell'Accordo Quadro. Ciascun Contratto esecutivo dispiegherà i suoi effetti dal termine della fase di Presa in carico e startup di cui al Capitolato Tecnico Speci…”
- 5ID 2737 - Capitolato Tecnico Speciale Lotto 3 e 4.pdf — “stesse i documenti acquisiti nel corso della suddetta verifica. Resta inteso che: è demandata alle singole Amministrazioni la responsabilità di richiedere e verificare gli ulteriori documenti necessari alla comprova dei…”
- 6ID 2737 - Capitolato Tecnico Speciale Lotto 1 e 2.pdf — “degli artefatti previsti dal piano di lavoro, sia intermedi che finali Riscontro degli artefatti consegnati in quantità e tipologia (ricevuta), senza valutazione di contenuto Validazione dei prodotti intermedi, previa ve…”
The core scope of work for this tender involves the provision of Managed Security Services from remote, along with Governance, Risk Analysis, and Control services for Public Administrations.
The Statement of Work summary and core deliverables include:
- Developing and maintaining operational continuity plans, which encompass Business Impact Analysis.
- Proposing a solution for "Compliance Normativa" (Regulatory Compliance), specifically addressing data protection and cybersecurity, with a focus on NIS-2.
- Proposing a solution for "Vulnerability Assessment," detailing technologies, methodologies, and delivery models (Contender's infrastructure, Public Cloud, or Hybrid).
- Providing a Security Governance service to assist the Administration in defining its cybersecurity strategy and monitoring strategic actions.
- Preparing an Incident Response Plan (IRP).
- Conducting at least annual reviews of Information Security Management System (ISMS) policies, including evaluations for improvement opportunities and necessary changes, with documented results in a review report.
- Creating and maintaining, with at least annual updates, a document for risk assessment related to Service Centers and managed information security, to be provided to Consip upon request.
- Establishing a register of actions to record incidents and findings, outlining corrective measures to prevent recurrence.
- Developing and consistently updating general and service-specific work plans.
- Ensuring all deliverables are directly usable by the Administration and include appropriate know-how transfer.
- Executing services primarily on-site at the Administration's locations or, alternatively, at the supplier's premises.
Sources
- 1ID 2737 - Capitolato Tecnico Speciale Lotto 1 e 2.pdf — “se gli obiettivi del controllo, i controlli, i processi e le procedure del ISMS | Entro 20 giorni solari dalla stipula dell'Accordo Quadro e entro 20 giorni solari da ogni successivo | | aggiornamento Template campi del…”
- 2ID 2737 - Capitolato d'oneri.pdf — “deliverable proposti per l'elaborazione e il mantenimento di piani di continuità operativa, comprensivi della Business Impact Analisys. | 6 | | La valutazione si baserà sulla completezza e aderenza della soluzione, compl…”
- 3ID 2737 - Capitolato Tecnico Speciale Lotto 3 e 4.pdf — “rispetto dei requisiti definiti nel Piano della Qualità Generale e di quelli espressi nel Piano di qualità dello specifico Contratto esecutivo, anche in termini di adeguatezza e conformità della documentazione e degli el…”
Login to view all answers and insights
Unlock tender brief for freeTENDER DOCUMENTS
DIRECTORY • 80 FILES
- ID 2737-Bando di gara - GUUE S-112 12-06-2026.pdf247 KBPDF
- ID 2737 - All. 9 - Dichiarazioni titolare effettivo PNRR.pdf302 KBPDF
- ID 2737 - All. 12 - Rettifica dell'offerta.pdf170 KBPDF
and 73 other documents
Login to view and download all tender documents
Unlock documents for freeASK AI ABOUT THIS TENDER
Can a foreign company apply?
Yes, foreign companies can apply as long as they meet all the requirements set out in the procurement documents.
Login to ask more questions.
Unlock AI tender chat for freeUnlock your tender workflow
Run your first search, evaluate the results, save a daily monitor and start building a pipeline of tenders worth pursuing.