Procurement Summary
Country: Finland
Summary: Information Security Testing Services
Deadline: 19 Aug 2026
Posting Date: 10 Jul 2026
Other Information
Notice Type: Tender
TOT Ref.No.: 144872653
Document Ref. No.: 476317-2026
Competition: ICB
Financier: Self Financed
Purchaser Ownership: Public
Tender Value: EUR 800000
CPV Classification
72800000 - Computer audit and testing services
72000000 - IT services: consulting, software development, Internet and support
72220000 - Systems and technical consultancy services
72222100 - Information systems or technology strategic review services
Purchaser's Detail
Name: Login to see tender_details
Address: Login to see tender_details
Email: Login to see tender_details
Login to see detailsTender Details
Information security testing services HUS Group (hereinafter also the customer or procurement entity) requests offers for information security testing services in accordance with the conditions of this request for tenders and its appendices. As a rule, information security testing uses a quantitative format information security model. The testing follows the necessary and generally accepted frameworks and standards such as CC (Common Criteria for Information Technology Security Evaluation), OWASP (Open Web Application Security Project) including OWASP ASVS and OWASP LLM, WASC (Web Application Security Consortium), NIST and, where applicable, ISO IEC 27001 and ISO IEC 27002 and EAL (Evaluation Assurance Level) specifications. Testing can include the definition of information security requirement level, information security architecture and centralized going through controls at the process and information system level. Based on the testing, clear and prioritized change proposals are prepared to correct the discovered information security deficiencies. In addition to information systems, information security testing targets interfaces, integrations, cloud environments (IaaS, PaaS, SaaS), identity and access management solutions (IAM), mobile applications and, if necessary, information system components related to medical devices. The content of information security testing can be, for example: - commissioning inspections, information security assessments and quantum readiness assessments - frequent vulnerability scans and vulnerability management - penetration testing (including web, mobile, infrastructure and APIs...
Document Type: Contract Notice Reference Number: HUS 045-2026 Contract Type: services Estimated Value: 800000 - EUR Authority Type: ra Doc Title: Tietoturvatestauspalvelut Dispatch Date: 2026-07-08 Publish Date: 2026-07-10 Submission Date: 2026-08-19
Documents
Tender Notice