Contract notice: Computer audit and testing Tender - 23264025

Object of the contract
Computer audit and testing services
Description: Contract notice: Computer audit and testing services
Authority Type: Other
Contact Nature: Services
Procedure: Open procedure
Document: Contract notice
Regulation: European Union, with participation by GPA countries
Award criteria: The most economic tender
CPV code: 72800000, 72600000, 79411000, 72800000, 72600000, 79411000
CPV Description: Computer audit and testing services.
Computer support and consultancy services.
General management consultancy services.
Central purchasing - realization of IT security audits for municipalities / CPAS under the GDPR
Reference Number: GDPR / C. Purchasing-Audit IT / MDR
See II.2.4.
Main Site: Several locations (see list of potential members)
This market is launched as a central purchasing-meaning of Article 2, 6 (a) of the Public Procurement Act of 17 June 2016 for the performance of IT audits as part of the RGPD / GDPR compliance.
The expected benefits for each subscriber, relate to the performance of a security audit oriented on the management of personal data exploited by it.
More precisely, the audit consists of securitywill be in a set of services of investigations and analyzes to be carried out by the contractor, concerning in particular:
- the way in which the Information System is managed (where are the data saved, what backup policy, what policy access, ...),
- management of PCS and servers (management of updates, anti-virus, ...),
- access to the computer network, protection with respect to intrusions,
- traceability, the ability to detect data breaches,
The expected result will be a document containing:
- security breaches found, with a level of criticism, concerning the systems and procedures that deal with personal data, - a set of recommendations (with priorities, and budget estimates) on the toolst procedures to be put in place to ensure a sufficient level of security in the processing of personal data, in line with the requirements of the GDPR.
If the register of salaries is already realized at the time of the completion of the mission, the The successful tenderer will rely on the latter to analyze the way in which each treatment guarantees the security, the traceability of use, etc.The report submitted at the end of the mission will be used by the basic adherent to formulate its information security policy aimed at guaranteeing, with the help of appropriate technical or organizational measures, an information security policy. security of personal data, including protection against unauthorized or unlawful processing and against loss, destruction andor accidental damage.
The tenderer produces the Single European Market Document, which consists of an actual self-declaration on the honor and which is accepted by the contracting authority as a priori evidence in lieu of documents or certificates issued by public authorities or third parties to confirm that the candidate is:
1 is notin one of the exclusion situations referred to in Articles 67 to 69 of the Law of 17.6.2016;
2 meets the applicable selection criteria established in accordance with Article 71 of the Law of 17.6.2016. (1) a statement of aggregate turnover over the last 3 financial years available on the date of the creation or commencement of activities of the candidate or submissiveas far as information on these sales figures is available.
Tenders can only be submitted electronically on the e-Tendering website https://eten.publicprocurement.be/
Internet address (URL): http://www.bep.be/
Directive: Classical Directive (2014/24/EU)