ASSISTANCE TO THE DANISH FINANCIAL SUPERVISORY AUTHORITY IN CONDUCTING CYBER STRESS TESTING

Finanstilsynet

The DFSA initiates a new programme for strengthened operational resilience in the financial sector. In the programme, the consequences of an extensive ICT disruption will be analysed by means of cyber stress testing. This tender is for consultancy services to assist the DFSA in the design and implementation of the initial cyber stress project.
The price for the contract cannot exceed 4.500.000 DKK including VAT, all fees and travels expenses included.
The tendered contract has not been divided into lots, as it is the contracting authority’s assessment that this will give the most beneficial and economically sound contract.

Deadline

Fristen for modtagelse af bud var på 2022-07-19. Indkøbet blev offentliggjort på 2022-06-14.

Leverandører

Følgende leverandører er nævnt i tildelingsbeslutninger eller andre indkøbsdokumenter:

• KPMG P/S

Hvem?

• Finanstilsynet

Hvad?

Hvor?

• Danmark › Hovedstaden

Indkøbshistorik

Dato	Dokument
2022-06-14	Udbudsbekendtgørelse
2022-10-04	Bekendtgørelse om indgåede kontrakter

Udbudsbekendtgørelse (2022-06-14)
Objekt
Omfanget af udbuddet
Titel: It-tjenester: rådgivning, programmeludvikling, internet og support
Kort beskrivelse:

The DFSA initiates a new programme for strengthened operational resilience in the financial sector. In the programme, the consequences of an extensive ICT disruption will be analysed by means of cyber stress testing. This tender is for consultancy services to assist the DFSA in the design and implementation of the initial cyber stress project. The price for the contract cannot exceed 4.500.000 DKK including VAT, all fees and travels expenses included. The tendered contract has not been divided into lots, as it is the contracting authority’s assessment that this will give the most beneficial and economically sound contract.

Bekendtgørelsens metadata
Originalsprog: engelsk 🗣️
Dokumenttype: Udbudsbekendtgørelse
Kontraktens art: Tjenesteydelser
Forordning: Den Europæiske Union, med deltagelse af GPA-lande
Fælles glossar for offentlige kontrakter (CPV)
Kode: It-tjenester: rådgivning, programmeludvikling, internet og support 📦
Yderligere CPV-kode: Bank- og investeringstjenesteydelser 📦
Sted for udførelsen
NUTS-region: Hovedstaden 🏙️

Procedure
Procedureform: Offentligt udbud
Bud-type: Indsendelse gældende for alle delaftaler
Kriterier for tildeling
Det økonomisk mest fordelagtige bud

Ordregivende myndighed
Identitet
Land: Danmark 🇩🇰
Type af ordregivende myndighed: Offentligretligt organ
Navn på ordregivende myndighed: Finanstilsynet
Postadresse: Århusgade 110
Postnummer: 2100
Postby: København Ø
Kontakt
Internetadresse: https://www.ethics.dk/ethics/eo#/9c34dfde-0dd3-4d83-bee5-909a31ad3dbb/homepage 🌏
E-mail: kijo@ftnet.dk 📧
Telefon: +45 33558371 📞
URL til dokumenter: https://www.ethics.dk/ethics/eo#/9c34dfde-0dd3-4d83-bee5-909a31ad3dbb/publicMaterial 🌏
URL til deltagelse: https://www.ethics.dk/ethics/eo#/9c34dfde-0dd3-4d83-bee5-909a31ad3dbb/homepage 🌏

Reference
Datoer
Afsendelsesdato: 2022-06-14 📅
Tilbudsfrist: 2022-07-19 📅
Offentliggørelsesdato: 2022-06-17 📅
Startdato: 2022-10-01 📅
Slutdato: 2023-10-01 📅
Identifikatorer
Bekendtgørelsesnummer: 2022/S 116-326569
EUT-S-nummer: 116
Yderligere oplysninger

With regards for grouds for exclusion section 135, 136 and 137 (1), (2, 7) in the Danish Public Procurement Act applies. All employees, including subcontractors, engaged in the services under this Contract must be able to obtain a security clearance initiated by the Customer after signing the contract, if deemed relevant by the Customer.

Objekt
Omfanget af udbuddet
Kort beskrivelse:

The price for the contract cannot exceed 4.500.000 DKK including VAT, all fees and travels expenses included.

The tendered contract has not been divided into lots, as it is the contracting authority’s assessment that this will give the most beneficial and economically sound contract.

Anslået samlet værdi: 3 600 000 DKK 💰
Kort beskrivelse:

The DFSA launches a new programme for strengthened operational resilience in the financial sector. In the programme, the consequences of an extensive ICT disruption will be analysed by means of cyber stress testing.

The initial project, for which the DFSA is seeking to procure consultancy services, will be an analysis of the consequences of an extensive ICT disruption via cyber stress testing at enterprise level.

The starting point is a scenario where a systemically important ICT service provider (and/or financial institution) experiences an extensive ICT disruption.

The financial institutions, which participate in the test, must map the operational consequences of the disruption step-by-step. E.g. mapping which business processes will be affected, describing the institutions’ business continuity plans in place, including approval processes for important decisions, and the extent to which these plans will enable the institution to continue its processes until normal ICT operations have been restored, and how. Further, the disaster recovery plans, that the service provider or financial institution has in place, must be described and documented, including how fast normal ICT operations can be restored.

Based on the detailed mapping of the operational consequences, the institutions must assess the financial, legal and reputational consequences of the disruption at various stages up until normal operations can be restored and provide supporting evidence.

Finally, depending on the results of the analyses, it will be assessed whether there is a need for additional measures/investments in the individual institutions and/or at sector level.

Anslået værdi uden moms: 3 600 000 DKK 💰
Sted for udførelsen
Hovedsted eller sted for udførelsen: Copenhagen, Denmark

Juridiske, økonomiske, finansielle og tekniske oplysninger
Betingelser for deltagelse
Økonomisk og finansiel stilling:

In relation to documentation of economic and financial standing, the tenderer is required to have the following:

• An annual turnover of at least nine million DKK in the last financial year.

• Positive equity in total over the last three financial years.

The tenderer must present a declaration stating that the information given in the ESPD is correct. The tenderer is not obliged to present the declaration, if the contracting authority can obtain the relevant financial information from a national database.

Teknisk og faglig kompetence:

In relation to documentation of technical and professional ability, the tenderer is required to provide the follow-ing:

A list of references concerning

• Cyber Resilience and Disaster Recovery consultancy and/or advisory services to financial institutions and/or ICT service providers to financial institutions

• Consultancy and/or advisory services on Business…

… Continuity Planning and Implementation in financial institutions

… Impact Analyses (BIA) in financial institutions

The list must consist of maximum three (3) references concerning consultancy and/or advisory services related to each of the three bullets above finished within the last three years stating amount, time period and the public or private recipient, including contact information. The list of deliveries of services must be inserted under Part IV, C of the ESPD and is the final documentation.

No further evidence or documentation regarding technical and professional ability in terms of the list of main deliveries will be requested before The Danish Financial Supervisory Authority awards the contract. However, The Danish Financial Supervisory Authority reserves the right to contact the customer indicated on each delivery in order to verify the reference.

As a minimum requirement the tenderer must document:

• At least one (1) reference which demonstrates tenderer’s experience with consultancy and/or advisory services relating to each of the bullets above (Cyber resilience / DRP, BCP and BIA).

Kontraktens udførelse
Betingelser for opfyldelse af kontrakten:

The contract contains a labor clause that regulates wages (including special benefits), work hours and other working conditions for work performed in Denmark for the purpose of fulfilment of the contract.

Procedure
Retsgrundlag: 32014L0024
Tidspunkt for modtagelse af tilbud: 12:00
Sprog, på hvilke bud eller ansøgninger om deltagelse kan indgives: engelsk 🗣️
Tilbuddets gyldighedsperiode: 4 måneder
Dato for åbning af tilbud: 2022-07-19 📅
Tidspunkt for åbning af tilbud: 12:01
Kriterier for tildeling
Kvalitetskriterium (navn): Quality
Kvalitetskriterium (vægtning): 70
Pris (justeringskoefficient): 30

Ordregivende myndighed
Identitet
Nationalt registreringsnummer: 10598184
Kontakt
Enhed: Kim René Jørgensen
URL til dokumenter: https://www.ethics.dk/ethics/eo#/9c34dfde-0dd3-4d83-bee5-909a31ad3dbb/publicMaterial 🌏

Supplerende oplysninger
Gennemgå organ
Navn: Klagenævnet for Udbud
Postadresse: Toldboden 2
Postby: Viborg
Postnummer: 8800
Land: Danmark 🇩🇰
Telefon: +45 72405600 📞
E-mail: klfu@naevneneshus.dk 📧
Internetadresse: https://naevneneshus.dk/start-din-klage/klagenaevnet-for-udbud/ 🌏
Tjeneste, hvorfra der kan indhentes oplysninger om klageproceduren
Navn: Konkurrence- og Forbrugerstyrelsen
Postadresse: Carl Jacobsens Vej 35
Postby: Valby
Postnummer: 2500
Telefon: +45 41715000 📞
E-mail: kfst@kfst.dk 📧
Internetadresse: www.kfst.dk 🌏
Kilde: OJS 2022/S 116-326569 (2022-06-14)

Bekendtgørelse om indgåede kontrakter (2022-10-04)
Objekt
Omfanget af udbuddet
Den samlede værdi af udbuddet: 3 492 320 DKK 💰
Bekendtgørelsens metadata
Dokumenttype: Bekendtgørelse om indgåede kontrakter

Procedure
Bud-type: Finder ikke anvendelse

Ordregivende myndighed
Identitet
Postadresse: Aarhusgade 110

Reference
Datoer
Afsendelsesdato: 2022-10-04 📅
Offentliggørelsesdato: 2022-10-07 📅
Identifikatorer
Bekendtgørelsesnummer: 2022/S 194-550192
Henviser til bekendtgørelse: 2022/S 116-326569
EUT-S-nummer: 194

Tildeling af kontrakt
Dato for kontraktindgåelse: 2022-09-29 📅
Navn: Kpmg p/s
Postby: København Ø
Land: Danmark 🇩🇰
Hovedstaden 🏙️
Den samlede værdi af udbuddet: 3 492 320 DKK 💰
Oplysninger om udbud
Antal modtagne bud: 6
Kilde: OJS 2022/S 194-550192 (2022-10-04)

Nye indkøb inden for beslægtede kategorier 🆕

It-tjenester: rådgivning, programmeludvikling, internet og support (2 nye indkøb)