IS Security Monitoring Operations Center (SOC) Rental

National Bank of the Republic of North Macedonia

Detailed description is provided in the bid documentation

Рок

Рокот за прием на понудите беше 2024-06-28. Набавката беше објавена на 2024-05-28.

Кој?

• National Bank of the Republic of North Macedonia

Што?

• Услуги за управување со компјутерски објекти › Услуги за управување со објекти за развој на компјутерски системи

Каде?

• Северна Македонија › Скопски

Историја на набавките

Датум	Документ
2024-05-28	Оглас за договор
2024-06-07	Оглас за договор

Оглас за договор (2024-05-28)
Предмет
Опсег на набавката
Наслов: IS Security Monitoring Operations Center (SOC) Rental
Референтен број: 08808/2024 040/2024
Краток опис: Detailed description is provided in the bid documentation
Вид на договорот: Услуги
Производи/услуги: Услуги за управување со објекти за развој на компјутерски системи 📦
Информации за деловите
Овој договор е поделен на делови ✅
Најголем број делови што може да се доделат на еден понудувач: 2
Понудите може да се поднесат за најголем број делови: 2

1️⃣
Внатрешен идентификатор: 08808/2024 040/2024-1
Наслов: Part 1. Security Operation Center (SOC)
Главна локација или место на извршување: Detailed description is provided in the bid documentation
Земја: Северна Македонија 🇲🇰
Место на извршување: Скопски 🏙️
Времетраење: 60 месеци
Наслов
Идентификациски број на делот: LOT-0001

2️⃣
Внатрешен идентификатор: 08808/2024 040/2024-2
Наслов: Part 2. Professional IT trainings intended for the National Bank employees who will use SOC
Поштенска адреса: Address: Kuzman Josifovski Pitu 1 City and Postal Code: Skopje 1000
Град: Skopje
Наслов
Идентификациски број на делот: LOT-0002
Опсег на набавката
Дополнителни производи/услуги: Услуги за управување со објекти за развој на компјутерски системи 📦

Постапка
Вид на постапката
Отворена постапка ✅
Правна основа: Директива 2014/24/ЕУ
Административни информации
Рок за прием на понуди или барања за учество: 2024-06-28 10:00:00 📅
Јазици на кои може да се поднесат понуди или барања за учество: македонски 🗣️
Минимален временски рок во кој понудувачот мора да ја одржи понудата: 120 дена

Правни, економски, финансиски и технички информации
Техничка и професионална способност
Список и краток опис на критериумите за избор:

The economic operator should have an established system for personal data protection, i.e. documentation adopted by the economic operator (documented policies, codes of practice, guidelines, procedures and work instructions), required to implement technical and organizational measures in order to ensure guarantee that personal data processing is carried out in accordance with the requirements provided for in the regulations for personal data protection, as well as for ensuring the protection of the rights of the personal data subjects; The documentation should contain provisions/information that will guarantee the integrity, availability and confidentiality of personal data, namely: *whether and how the data is encrypted according to their sensitivity; • whether there are procedures in place that guarantee that no one will have unauthorized access to the data; • whether and how data transmission is encrypted; • guarantees regarding traceability (logs, information audit trail); • management of access rights; • risk management; • password policy; • the minimum standards for authentication of the authorized persons; • the conditions for restoring data and/or their destruction after the expiration or termination of the contract; • measures for physical security of premises and devices for personal data processing; • rules for management and notification of the National Bank in case of incidents, that is, in case of violation of the security of personal data; • management of incidents that caused a violation of the security of personal data with appropriate and timely reporting to the National Bank, in accordance with legislation and • other technical and organizational measures for the security of personal data processing. - the economic operator is required to provide a team consisting of at least 6 experts who will be involved in the implementation of the contract. - At least four of the experts from the team involved in the process of providing SOC services should hold at least one of the following certificates: Comptia Security+, Certified SOC Analyst (CSA), GIAC Certified Incident Handler Certification (GCIH), Certified Ethical Hacker (CEH) or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid one of the following certificates: Certified Information Systems Security Professional (CISSP), Certified Information Systems Security Manager (CISSM) or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid one of the following certificates: Certified Digital Forensics Examiner(CDFE), Computer Hacking Forensic Investigator (CHFI), GIAC Certified Forensic Analyst (GCFA), or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid Microsoft Certified Windows Server Hybrid Administrator certificate or equivalent. At least one of the experts from the team involved in the process of providing SOC services should have possess a valid certificate for Cisco Certified Network Professional or equivalent Certificates must be valid at the time of submission of the bid, and if they expire during the validity of the contract, they must be renewed or a valid certificate equivalent to the previously accepted certificate must be submitted - the economic operator is required to possess forensic equipment/software from a commercial manufacturer

Список и краток опис на критериумите за избор

The economic operator should have an established system for personal data protection, i.e. documentation adopted by the economic operator (documented policies, codes of practice, guidelines, procedures and work instructions), required to implement technical and organizational measures in order to ensure guarantee that personal data processing is carried out in accordance with the requirements provided for in the regulations for personal data protection, as well as for ensuring the protection of the rights of the personal data subjects; The documentation should contain provisions/information that will guarantee the integrity, availability and confidentiality of personal data, namely: *whether and how the data is encrypted according to their sensitivity; • whether there are procedures in place that guarantee that no one will have unauthorized access to the data; • whether and how data transmission is encrypted; • guarantees regarding traceability (logs, information audit trail); • management of access rights; • risk management; • password policy; • the minimum standards for authentication of the authorized persons; • the conditions for restoring data and/or their destruction after the expiration or termination of the contract; • measures for physical security of premises and devices for personal data processing; • rules for management and notification of the National Bank in case of incidents, that is, in case of violation of the security of personal data; • management of incidents that caused a violation of the security of personal data with appropriate and timely reporting to the National Bank, in accordance with legislation and • other technical and organizational measures for the security of personal data processing.
- the economic operator is required to provide a team consisting of at least 6 experts who will be involved in the implementation of the contract. - At least four of the experts from the team involved in the process of providing SOC services should hold at least one of the following certificates: Comptia Security+, Certified SOC Analyst (CSA), GIAC Certified Incident Handler Certification (GCIH), Certified Ethical Hacker (CEH) or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid one of the following certificates: Certified Information Systems Security Professional (CISSP), Certified Information Systems Security Manager (CISSM) or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid one of the following certificates: Certified Digital Forensics Examiner(CDFE), Computer Hacking Forensic Investigator (CHFI), GIAC Certified Forensic Analyst (GCFA), or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid Microsoft Certified Windows Server Hybrid Administrator certificate or equivalent. At least one of the experts from the team involved in the process of providing SOC services should have possess a valid certificate for Cisco Certified Network Professional or equivalent Certificates must be valid at the time of submission of the bid, and if they expire during the validity of the contract, they must be renewed or a valid certificate equivalent to the previously accepted certificate must be submitted
- the economic operator is required to possess forensic equipment/software from a commercial manufacturer

Услови за учество
Основа за исклучување:

Виновен за тешко професионално недолично однесување

Деловните активности се суспендирани

Детски труд и други форми на трговија со луѓе

+ уште 9

Измама

Имотот е под управа на ликвидатор

Корупција

Несолвентност

Перење пари или финансирање тероризам

Плаќање даноци

Плаќање придонеси за социјално осигурување

Стечај

Терористички дела или дела поврзани со терористички активности

Договорен орган
Име и адреси
Име: National Bank of the Republic of North Macedonia
Национален регистарски број: ORG-0001
Оддел: www.nbrm.mk
Поштенска адреса: Address: Kuzman Josifovski Pitu 1 City and Postal Code: Skopje 1000
Поштенско место: Skopje
Регион: Скопски 🏙️
Земја: Северна Македонија 🇲🇰
Е-пошта: info@nbrm.mk 📧
Телефон: +389 2 3018 522 📞
URL: www.nbrm.mk 🌏
Крајна точка за размена на информации (URL): www.nbrm.mk 🌏
Вид на договорниот орган
Тело уредено со јавно право
Главна дејност
Економски и финансиски прашања
Комуникација
URL на документи: https://www.e-nabavki.gov.mk/PublicAccess/home.aspx#/dossie/84927775-a580-4ec8-822c-0ed6f773b8ef/1 🌏
URL за учество: https://www.e-nabavki.gov.mk/ 🌏
Електронско поднесување: Задолжително

Дополнителни информации
Тело за преглед
Име: State Appeals Commission for Public Procurement
Национален регистарски број: www.nbrm.mk
Оддел: www.nbrm.mk
Поштенска адреса: Address: Kuzman Josifovski Pitu 1 City and Postal Code: Skopje 1000
Поштенско место: Skopje
Регион: Скопски 🏙️
Земја: Северна Македонија 🇲🇰
Е-пошта: info@nbrm.mk 📧
Телефон: +389 2 3018 522 📞
URL: www.nbrm.mk 🌏
Крајна точка за размена на информации (URL): www.nbrm.mk 🌏
Постапка за преглед
Точни информации за рокот(овите) за постапки за преглед: Detailed description is provided in the bid documentation
Извор: OJS 2024/S 103-316553 (2024-05-28)

Оглас за договор (2024-06-07)
Постапка
Административни информации
Рок за прием на понуди или барања за учество: 2024-07-01 10:00:00 📅

Промени
Други дополнителни информации
Главна причина за промена: Информациите се ажурирани
Информации за измените
Идентификатор на верзија на изменетото известување: 316553-2024
Извор: OJS 2024/S 111-339878 (2024-06-07)

Нови набавки во поврзани категории 🆕

ИТ услуги: советување, развој на софтвер, Интернет и поддршка (1 нови набавки)

Компјутерски услуги

Услуги за управување со компјутери

Услуги за управување со компјутерски објекти