Poland – Computer equipment and supplies – Increasing the cyber resilience and business continuity of Przedsiębiorstwo Komunalne Sp. z o.o. in Siemiatycze. Part II - Competence area and IT technical area.

Opportunity description

1. The subject of the contract is financed from the funds of the National Recovery and Resilience Plan Programme, Priority: C3 Cybersecurity. Measure: C3.1.1. Cybersecurity – CyberPL. 2. The project aims to strengthen cyber resilience through infrastructure modernisation and the development of team competencies. The following activities will be carried out under the project: 1) Modernisation of network infrastructure: Implementation of IT/OT network segmentation and microsegmentation, which will enable the isolation of critical systems and minimise potential damage in the event of an attack. A network traffic monitoring system (IDS/IPS) will also be implemented. It will enable the collection of system logs and digital evidence necessary for incident analysis. 2) Implementation of secure remote access: Introduction of a centralised and secure remote access system that will enable the control and auditing of connections to OT/IT networks. 3) Ensuring business continuity: A system for creating and managing backups, including for control systems, will be implemented, ensuring a rapid return to operational status in the event of an incident. 3. The project complies with the priorities of the KPO and Resilience Enhancement, and in particular with the Digital Transformation objective. Investment in modern cybersecurity technologies is a key element in striving to create secure critical infrastructure that ensures the continuity of public service provision. 4. The implementation of Part II of the project (Competence area and IT technical area) consists of carrying out the following tasks: 1) Task 1. Cybersecurity training - specialised training for management staff and IT specialists concerning the security measures applied (planned to be applied) under the IT/OT/ICS Grant Project. 2) Task 2. Vulnerability assessment software. 3) Task 3. Ransomware protection software. 4) Task 4. EDR (Endpoint Detection and Response) software. 5) Task 5. NDR device and software with HoneyPot and situational monitor (Network Detection & Response). 6) Task 6. Implementation of security devices/software/solution. This also applies to open source IT/ICS/IIoT solutions. 7) Task 7. UTM system for the IT HA network Subject of the contract. 8) Task 8. Configuration and hardening services for IT systems/devices. 9) Task 9. Physical workstation serving as a jump station (session broker) + two 27-inch monitors - 1 set. 10) Task 10. Network segmentation service. 11) Task 11. Backup server (NAS). 12) Task 12. Managed L2 switch, 48p GE PoE + 4× SFP+ (2 units). 13) Task 13. Managed L2 switch, 48p GE PoE + 4× SFP+ (1 unit). 14) Task 14. WiFi Access Point supporting the 802.1x standard and WPA3-Enterprise. 15) Task 15. ITSM (Information Technology Service Management) software. 16) Task 16. MDM (Mobile Device Management) software Subject of the contract. 17) Task 17. Data leakage prevention software (DLP - Data Leak Prevention). 18) Task 18. MDR (Managed Detection and Response) IT/OT/ICS/IIoT service. 19) Task 19. Identity and access management software. 20) Task 20. MFA software or device (two-/multi-factor authentication). 21) Task 21. U2F hardware keys. 22) Task 22. OT/ICS/IIoT ICT asset inventory service. 23) Task 23. Supply of hardware probes/sensors for monitoring the OT network (dedicated devices for analysing industrial protocols). 24) Task 24. Supply of hardware probes/sensors for monitoring the OT network (dedicated devices for analysing industrial protocols). 25) Task 25. IDS (Intrusion Detection System) software/licences dedicated to OT networks. Software: integrated Security System-Industrial Central Management for OT, Anomaly Detection, Threat Detection, Data Traceability Control, Anti DDOS, APT (Advanced Persistent Threat), SIEM, SOAR, Active Dashboards, Central FW MGMT, Alarm Risk MGMT. 26) Task 26. UTM (Unified Threat Management) DIN35 or desktop hardware platform - IPS/IDS Security System, IT/OTAnomaly Detection, Threat Detection, Data Traceability Control, SDN, Anti DDOS, Anti APT (Advanced Persistent Threat), AI MGMT, ZBFW. 27) Task 27. Private APN service. 28) Task 28. IT ICT asset inventory service. 29) Task 29. Design of a security solution with the selection of devices, software, and IT/OT/ICS/IoT implementation and operation services. 30) Task 30. Implementation of security devices/software/solution. This also applies to open source IT/OT/ICS/IIo solutions. 31) Task 31. Security testing of IT/OT/ICS/IIoT network infrastructure. 32) Task 32. Configuration and hardening services for OT/ICS/IIoT systems/devices. 5. The description of the subject of the contract, together with the specification of the minimum requirements, is presented in Annex No. 2 to the SWZ – Detailed Description of the Subject of the Contract (SOPZ). 1. The subject of the contract is financed from the funds of the National Recovery and Resilience Plan Programme, Priority: C3 Cybersecurity. Measure: C3.1.1. Cybersecurity – CyberPL. 2. The project aims to strengthen cyber resilience through infrastructure modernisation and the development of team competencies. The following activities will be carried out under the project: 1) Modernisation of network infrastructure: Implementation of IT/OT network segmentation and microsegmentation, which will enable the isolation of critical systems and minimise potential damage in the event of an attack. A network traffic monitoring system (IDS/IPS) will also be implemented. It will enable the collection of system logs and digital evidence necessary for incident analysis. 2) Implementation of secure remote access: Introduction of a centralised and secure remote access system that will enable the control and auditing of connections to OT/IT networks. 3) Ensuring business continuity: A system for creating and managing backups, including for control systems, will be implemented, ensuring a rapid return to operational status in the event of an incident. 3. The project complies with the priorities of the KPO and Resilience Enhancement, and in particular with the Digital Transformation objective. Investment in modern cybersecurity technologies is a key element in striving to create secure critical infrastructure that ensures the continuity of public service provision. 4. The implementation of Part II of the project (Competence area and IT technical area) consists of carrying out the following tasks: 1) Task 1. Cybersecurity training - specialised training for management staff and IT specialists concerning the security measures applied (planned to be applied) under the IT/OT/ICS Grant Project. 2) Task 2. Vulnerability assessment software. 3) Task 3. Ransomware protection software. 4) Task 4. EDR (Endpoint Detection and Response) software. 5) Task 5. NDR device and software with HoneyPot and situational monitor (Network Detection & Response). 6) Task 6. Implementation of security devices/software/solution. This also applies to open source IT/ICS/IIoT solutions. 7) Task 7. UTM system for the IT HA network Subject of the contract. 8) Task 8. Configuration and hardening services for IT systems/devices. 9) Task 9. Physical workstation serving as a jump station (session broker) + two 27-inch monitors - 1 set. 10) Task 10. Network segmentation service. 11) Task 11. Backup server (NAS). 12) Task 12. Managed L2 switch, 48p GE PoE + 4× SFP+ (2 units). 13) Task 13. Managed L2 switch, 48p GE PoE + 4× SFP+ (1 unit). 14) Task 14. WiFi Access Point supporting the 802.1x standard and WPA3-Enterprise. 15) Task 15. ITSM (Information Technology Service Management) software. 16) Task 16. MDM (Mobile Device Management) software Subject of the contract. 17) Task 17. Data leakage prevention software (DLP - Data Leak Prevention). 18) Task 18. MDR (Managed Detection and Response) IT/OT/ICS/IIoT service. 19) Task 19. Identity and access management software. 20) Task 20. MFA software or device (two-/multi-factor authentication). 21) Task 21. U2F hardware keys. 22) Task 22. IT ICT asset inventory service. 23) Task 23. Supply of hardware probes/sensors for monitoring the OT network (dedicated devices for analysing industrial protocols). 24) Task 24. Supply of hardware probes/sensors for monitoring the OT network (dedicated devices for analysing industrial protocols). 25) Task 25. IDS (Intrusion Detection System) software/licences dedicated to OT networks. Software: integrated Security System-Industrial Central Management for OT, Anomaly Detection, Threat Detection, Data Traceability Control, Anti DDOS, APT (Advanced Persistent Threat), SIEM, SOAR, Active Dashboards, Central FW MGMT, Alarm Risk MGMT. 26) Task 26. UTM (Unified Threat Management) DIN35 or desktop hardware platform - IPS/IDS Security System, IT/OTAnomaly Detection, Threat Detection, Data Traceability Control, SDN, Anti DDOS, Anti APT (Advanced Persistent Threat), AI MGMT, ZBFW. 27) Task 27. Private APN service. 28) Task 28. OT/ICS/IIoT ICT asset inventory service. 29) Task 29. Design of a security solution with the selection of devices, software, and IT/OT/ICS/IoT implementation and operation services. 30) Task 30. Implementation of security devices/software/solution. This also applies to open source IT/OT/ICS/IIo solutions. 31) Task 31. Security testing of IT/OT/ICS/IIoT network infrastructure. 32) Task 32. Configuration and hardening services for OT/ICS/IIoT systems/devices. 5. The description of the subject of the contract, together with the specification of the minimum requirements, is presented in Annex No. 2 to the SWZ – Detailed Description of the Subject of the Contract (SOPZ). Procedure: open. Review the original TED notice for the complete requirement, lots, amendments and attachments.