Sustav za oporavak od kibernetičkih napada

The contract timeline is as follows:

• Total duration: The framework agreement duration is 12 months.
• Contract start date: The framework agreement begins from the mutual signature of both parties.
• Key milestones/phases:
• The framework agreement will be concluded in writing within 90 days from the enforceability of the Client's Decision on Selection.
• The Client and the selected Bidder will harmonize the text of the framework agreement.
• The framework agreement comes into effect on the day of the later signature by authorized representatives of both parties.
• Individual execution deadlines for the subject of the agreement will be determined in each individual order placed under the agreement.
• Orders based on the agreement must be concluded before the expiration of the agreement's term, and their duration cannot exceed 12 months from the expiration of the agreement's term.
• There is a warranty period for delivered and installed equipment and services, which starts from the date of proper delivery and installation, or from the signing of the handover protocol for each order.

The core scope of work for this tender is the realization of a "System for recovery from cyber attacks" (Sustav za oporavak od kibernetičkih napada), with an emphasis on cyber resilience.

The high-level summary of the Statement of Work and core deliverables includes:

• Acquisition and implementation of a system for secure backup.
• Integration of the new system with existing processes and technologies used for preventing and detecting cyber threats.
• Establishment of a test platform.
• Implementation of a magnetic tape storage system for the long-term storage of archival data.
• Ensuring the system functions as an active component of the client's defense ecosystem, rather than merely a passive data repository.
• The system must be capable of surviving attacks on primary infrastructure, maintaining the integrity of stored records, and enabling rapid and secure business recovery in the event of a total compromise of production systems.
• Detailed activities include the integration of backup systems with platforms, creation of backup policies, testing and validation of backups, and testing of data recovery.
• The project also covers the creation of data archiving policies for magnetic tapes and testing recovery from these archives.
• Configuration and integration tasks with existing systems such as QRadar SIEM and Cisco Catalyst Center are required.
• Deliverables include comprehensive documentation such as High-Level Design (HLD), Low-Level Design (LLD) with technical specifications, network flow matrices, RBAC structures, a technical description of the implemented state, configuration records, and an integration manual for various existing systems (Cisco network equipment, Check Point security policies, IBM QRadar SIEM, CyberArk PAM, Cisco DUO).
• A plan for the decommissioning of old TSM systems is also expected.
• Specific components to be acquired and implemented include Cyber Resilience Platforms (Type 1, 2, and 3), Magnetic Tape Storage Systems (Type 1), various Switches (Type 1, 2, and 3), Optical Transceivers (Type 1 and 2), and Subscriptions (Type 1 and 2), along with services for implementation, integration, and maintenance.