Sistem za zaznavanje in odzivanje na omrežne kibernetske grožnje (NDR, Network Detection and Response) na podlagi umetne inteligence za poslovna IT okolja

The contract duration is 24 months from the date of its conclusion. The contract becomes valid upon signature by both parties, and also when the contractor submits a security instrument for proper performance and defect correction during the warranty period, no later than 10 or 20 working days after signing.

Key milestones and phases include:

• CTI platform access: The supplier must provide access to the CTI information platform within 10 working days after the contract's conclusion.
• Full platform use: The supplier must ensure the client can begin full use of the platform within 30 days of the contract's conclusion, including initial integration and settings.
• System warranty: The system warranty period is 36 months from the officially recorded acceptance as per Article 6.
• Optional extended maintenance: After the initial warranty, the client has the option to order software maintenance, subscriptions, and hardware maintenance/warranty for an additional fourth and fifth year, according to Annex 2 of the contract and prices in Annex 1.

It is also stated that the contract enters into force on the day of signature by both parties and is concluded for an indefinite period; however, section 5, specifically titled "CONTRACTUAL DEADLINES AND DURATION OF THE CONTRACT", states the 24-month period. The indefinite period likely pertains to general terms like business cooperation and confidentiality, rather than the primary service performance.

The core scope of work for this tender is divided into three main lots:

Lot 1: Network Detection and Response (NDR) System

This involves the provision of a system for detecting and responding to network cyber threats based on artificial intelligence for business IT environments. It includes hardware and software with user licenses, set up in two separate environments (ELES and Informatika) for seven entities. The scope covers licenses for network detection and traffic monitoring on end devices, as well as dedicated devices (management and capture servers, network packet brokers) across nine capture points in Slovenia. All data must be processed and stored exclusively within the client's environment, without cloud processing. Maintenance and software support are included for three years, with an option for an additional two years for ELES-installed equipment.

Lot 2: CTI Information Platform

This lot entails a cloud-based platform for cyber threat intelligence (CTI) investigation, accessible via a web application and API. The platform delivers information for technical, tactical, and strategic cyber intelligence, covering investigations of cyber threats, actors, identities, credentials, vulnerabilities, brand abuse, digital property abuse, and supply chain risks. An optional, scored service includes the discontinuation of harmful domains and removal of harmful content. The scope comprises five named accesses with full rights for analysts from ELES, URSIV, and ARNES. Client data will be processed and stored on infrastructure within the EU or EEA, with any exceptions explicitly stated by the provider. The contract duration is 24 months.

Lot 3: Server Equipment and Industrial Edge Computers

This lot focuses on the supply of hardware, including maintenance, warranty, and operating system subscriptions. It includes two servers for artificial intelligence systems (one for ELES, one for Informatika environments), each with two processors and four server graphic cards (GPUs) with at least 96 GB memory per card, intended for AI processing. Additionally, fifteen industrial x86-64 architecture edge computers are required for the operational technology environments of electricity distributors and ELES. Red Hat Enterprise Linux subscriptions are to be provided for all equipment. The warranty and maintenance period is three years from acceptance, with 24x7 coverage and next-business-day on-site fault resolution. Equipment is to be delivered to ELES, Informatika, and five electricity distribution locations. Servers require installation in server cabinets with basic configuration, while edge computers are supplied without installation. Both servers must be from the same manufacturer, as must all edge computers. An offer with a binding price for the 4th and 5th year for equipment installed at ELES is also required.

General Deliverables and Obligations:

The contractor is responsible for producing all necessary documentation, performing required training, addressing and resolving errors and requests, and informing the client about ongoing issues, including changes in software versions. The contractor must also attend operational meetings and rectify errors or shortcomings at their own expense if not in accordance with agreed solutions. The tender is linked to the ALIENS-SOC project, which is co-financed by the Digital Europe program.