Framework agreement regarding services related to technical security testing
Danmarks Nationalbank (DN) is the central bank of Denmark, which is an independent self-governing institution established by law. DN wishes to enter into a non-exclusive framework agreement with a supplier regarding technical security testing.
DN's needed services regarding technical security testing are the following:
Section A:
— A monthly vulnerability scan of the external perimeter (Internet facing hosts and web-applications)
— A yearly security assessment/test of Internet facing hosts and web-applications
— A yearly Content Security Test (Test of Malware protection setup), including assessment of the following:
- Control configuration
- Network design
- Test cases to validate the desired control configuration and network design
— Periodical tests of the most critical internal business systems to ensure a continuous high level of security
Section B:
Ad-Hoc consultancy services that DN can order if needed. Services could include:
— Source code reviews
— Risk analyses and threat modelling
— Document reviews/analyses
— Security Requirement definitions
— Hardening recommendations
— Secure software development training
— Incident response services
— Strategic security development
— Supplementary services as described in section A.
— License for technical tools to be used by DN to perform technical security tests in-house
All services must include quality assurance, project management and reporting.
The framework agreement will include requirements to ensure that the supplier shall be present at the premises of the bank in Denmark, Havnegade 5, 1093 Copenhagen K, within maximum 1 hour, due to the possible need of assistance in critical situations, which cannot be amended solely through the internet.
Deadline
Fristen for modtagelse af bud var på 2014-09-30.
Indkøbet blev offentliggjort på 2014-08-25.
Leverandører
Følgende leverandører er nævnt i tildelingsbeslutninger eller andre indkøbsdokumenter:
Hvem?
Hvad?
Hvor?
Indkøbshistorik
| Dato |
Dokument |
| 2014-08-25
|
Udbudsbekendtgørelse
|
| 2015-02-05
|
Bekendtgørelse om indgåede kontrakter
|