Zvýšení kyberbezpečnosti v NMB - technologie

The contract timeline is as follows:

• Contract Start Date: The start of the implementation ("Zahájení realizace") is the day the contract for delivery is signed ("dnem podpisu smlouvy na dodávku").
• Total Duration: The total duration for the realization of the delivery is 280 calendar days.
• End Date: The completion of the delivery implementation ("Ukončení realizace dodávky") occurs 280 days from the start date.
• Key Milestones/Phases:
• Phase 1: Start of implementation ("Zahájení realizace") - Day 0.
• Phase 2: Analysis and solution design ("Analýza a návrh řešení") - 45 days from the start.
• Phase 3: Delivery, implementation, installation, configuration of HW and SW infrastructure ("Dodávka, implementace, instalace, konfigurace HW a SW infrastruktury") - 220 days from the start.
• Phase 4: Development and implementation of SW modifications, delivery of SW documentation ("Vývoj a implementace úprav SW, dodávka dokumentace k SW") - 220 days from the start.
• Phase 5: Verification of functionality of delivered technologies and systems ("Ověření funkčnosti dodaných technologií a systémů") - 250 days from the start.
• Phase 6: Familiarization with functionalities and operation of delivered technologies and systems ("Seznámení s funkcionalitami a provozem dodávaných technologií a systémů") - 250 days from the start.
• Phase 7: Delivery of documentation for the delivered system and its parts ("Dodávka dokumentace dodaného systému a jeho částí") - 250 days from the start.
• Phase 8: Transfer to trial operation ("Převedení do zkušebního provozu") - 251 days from the start.
• Phase 9: Vulnerability testing / penetration tests ("Testování zranitelností / penetrační testy") - 280 days from the start.
• Phase 10: Completion of delivery implementation ("Ukončení realizace dodávky") - 280 days from the start.

The core scope of work and statement of work summary for this tender involve the comprehensive delivery, implementation, and support of a robust IT infrastructure and security system. Key areas include:

• Security Monitoring and Management: Implementation of Log Management (LM), Security Information and Event Monitoring (SIEM), and Privileged Access Management (PAM) systems, including software, licenses, installation, configuration, user training, and ongoing consultation and development activities for 4 to 5 years.
• Security Operations Center (SOC) Services: Provision of security oversight, including the implementation and connection to a SOC service with support for at least 5 years. This encompasses active monitoring, evaluation of cyber security events, installation of necessary hardware and software elements for ICT infrastructure and services, and connection to a remote monitoring center. The solution includes LM, SIEM, Endpoint Detection and Response (EDR), PIM/PAM on the client side, and Security Ticketing and a Security Dashboard provided by the supplier.
• High Availability NIS Infrastructure: Delivery and configuration of hardware and software components for Network Information System (NIS) high availability, including virtualization platform servers, disk arrays, SAN switches, and virtualization software, with manufacturer support for at least 5 years. This also includes the migration of existing virtual machines.
• Comprehensive Data Backup System: Implementation of a complete data backup solution, covering both hardware (backup servers, external disk shelves) and software components, with installation, configuration, and manufacturer support for at least 5 years.
• Hardware Security Module (HSM): Delivery, implementation, and commissioning of an HSM service, including software, licenses, subscription, manufacturer support for at least 5 years, and a specified number of qualified electronic signatures (QES).
• LAN, WLAN Access Control, Segmentation, and Security Elements: This extensive component includes:
• Anomaly Detection System (ADS): Delivery and setup of collectors, hardware probes, and anomaly detection software.
• Electronic Security System (EZS) for Server Rooms: Installation and configuration of central units, various detectors (PIR, conventional, audio, leak, humidity, temperature), access control components (readers, keypads), communication modules, and associated control and monitoring software, including operator training.
• WiFi Controllers: Supply and configuration of central control systems for WiFi networks.
• LAN and WLAN Segmentation, Authorization, and Authentication: Delivery and configuration of AAA servers for identity management and network segmentation.
• Two-Factor Authentication (2FA) for VPN: Implementation of 2FA software for VPN access.
• Uninterruptible Power Supply (UPS): Delivery, installation, and configuration of UPS units with battery modules and associated software.
• LDN Network System and Optical Infrastructure: Provision, installation, and configuration of various active network elements for the LDN network system and the necessary optical infrastructure for NIS.

Related Services and Deliverables also encompass:

• Project management of the entire solution delivery.
• Analysis, design, installation, and configuration of technical measures based on security audit recommendations.
• Migration of selected systems to the new infrastructure and configuration changes to existing information systems.
• Functional verification of all delivered technologies and systems.
• Comprehensive documentation including administrator, as-built, system, and security documentation with asset and risk assessment.
• Training and familiarization for administrators on the delivered systems and their operation.
• Integration into the customer's operational environment (e.g., supervision, backup).
• Vulnerability testing, penetration tests, and adjustments to security technology configurations.
• Provision of a HelpDesk for defect reporting.