Wzmocnienie cyberodporności sieci IT i OT oraz ciągłości działania systemu wodnokanalizacyjnego poprzez wdrożenie kluczowych środków technicznych oraz rozwój kompetencji

The contract's total duration is a maximum of 90 days from the contract signing date. The planned completion date is a placeholder: "………………2026 r."

Key milestones include:

• The Contracting Authority will check the subject of the contract for compliance with the SWZ and the offer within 7 working days.
• The day of order fulfillment is considered the day of acceptance of the subject of the order by handover protocol.
• 70% of the security value will be returned within 30 days from the date of completion of the order and its recognition by the Contracting Authority as properly performed.
• 30% of the security value will be retained as security for warranty claims and returned no later than 15 days after the expiry of the warranty or guarantee period.

• Any modern web browser (Chrome, Firefox, Edge)
• Data center located within the European Union
• Administrative access in English or Polish
• User access in Polish, English, and a third language chosen by the Ordering Party
• Training content in Polish, English, and a third language chosen by the Ordering Party
• Cluster architecture
• Redundancy of elements
• Resistance to failures of individual components
• High performance of all components
• Scalability by adding application/web servers
• Client applications must not communicate directly with the database
• System installation on Red Hat Enterprise Linux 8 or newer
• System installation on Windows Server 2019 Datacenter or newer
• Virtual appliance option available from the official manufacturer's website with dedicated OS and regular security patches
• Regular updates for all system components, operating systems, and databases
• Integration with Active Directory on Windows Server for user and administrator authentication
• No physical security devices such as cards, USB keys, or physical network license servers
• Administrator authorization based on user roles (Role-Based Access Control - RBAC)
• Multi-level hierarchical permissions for system resources
• Web application must not use ActiveX
• Web application must not use NPAPI plugins
• Web application must not use Flash
• Web application must not use Silverlight
• Web application must not use Java applets
• Web application must not use other client technologies not natively supported by W3C standards
• Use of trusted X.509 certificates (provided by Ordering Party or commercially purchased)
• Certificates must be compatible with PKI infrastructure
• System based on an operating system version supported by the manufacturer
• All components, applications, and server services must run as system services
• Internal event log (audit)
• Configurable reporting and automatic monitoring and logging of operator activity
• System must be covered by a backup system
• Minimum backup of system configuration
• System must be entirely on-premises in the Ordering Party's infrastructure
• No communication with components located outside the Ordering Party's infrastructure
• System agent must not listen on any network port on the user's workstation
• Agent installation in standard and secure mode (without remote management, file transfer, remote desktop)
• Operator authentication in the management console via physical hardware security (local or network) with a password
• Integration with Active Directory accounts for management console user login
• AES encryption for sensitive data storage within hardware security
• Additional management console user authorization via Google Authenticator
• Additional management console user authorization via Microsoft Authenticator
• Software must cooperate with MSSQL Server 2008R2-2019
• Software, across all layers, must not require Java components for proper operation
• DLP client on Windows 10 (64-bit) with all security updates
• DLP client on Windows 11 (64-bit) with all security updates
• DLP client on MacOS 12 or newer
• DLP administrative server on Windows Server 2016 (64-bit) and newer
• DLP administrative server supporting MS SQL Server 2016 or newer
• DLP administrative server supporting MS SQL Express
• DLP administrative server supporting AzureSQL S3 or newer
• DLP program help and documentation in English
• DLP administrative console and client messages in Polish
• PAM system must record keyboard input for SSH sessions
• PAM system must record keyboard input for RDP sessions
• PAM system must guarantee scalability for new resources and services
• ITSM software must have a Polish interface
• ITSM software must have an English interface
• ITSM software must have a three-layer architecture (Database, Application Server, Agent/Management Console)
• ITSM software must allow dedicated encryption keys for communication between agents, application server, and management console