The State Company Sächsische Informatik Dienste ("SID") is the central IT service provider for the Saxon state administration. The SID supports the completion of administrative tasks through the use of state-of-the-art information technology and is a competent and collegial IT partner for the Saxon state administration. As part of its responsibilities, SID is responsible for the further development of the Saxon Administrative Network ("SVN"). The KDN Kommunale DatenNetz GmbH ("KDN GmbH") operates and manages the municipal data network ("KDN") for the Saxon municipalities. With the current Saxon Administrative Network 2.0 ("SVN 2.0") and the Municipal Data Network III ("KDN III"), the state administration and the municipalities have a very powerful and flexible communication and IT infrastructure. The contracts for SVN 2.0 and KDN III will end on March 31, 2028. With the SVN Next Generation ("SVN NG") and the Municipal Data Network IV ("KDN IV") to be provided on this platform, the communication and IT infrastructure for the state administration and the municipalities are being newly advertised in eight lots for the period following the end of the mentioned contracts.
- Lot 1: Service Infrastructure: Provision and operation of a secure, efficient, and scalable IT infrastructure for SVN NG, based on virtualization and Kubernetes, as well as housing.
- Lot 2: Service Operation: Provision and operation of central services in the SVN as well as operational or operational support for central e-government components, specialized procedures, and other services.
- Lot 3: Networks: Provision and operation of a core network and network connections of SVN locations, transitions to the Internet, the public telephone network, and other networks.
- Lot 4: Unified Communications: Provision and operation of a unified communications solution for telephony, video, and web conferences as well as other services.
- Lot 5: Mobile Communications: Provision and operation of mobile voice and data communication.
- Lot 6: Site Network Management: Provision and operation of LAN, WLAN, and DECT at SVN locations including on-site fault resolution as well as the provision and operation of a unified WLAN service for employees and guests.
- Lot 7: SVN Service Desk: Provision and operation of the central service desk in SVN NG.
- Lot 8: SVN Coordination: Temporal, technical, and organizational coordination of contractor and client-side services as well as security in SVN NG.

The subject of the procurement procedure opened with this announcement is Lot 2. This is the sixth procurement project within the framework of the SVN NG project. It is intended to successively announce the other lot-based procurement procedures for the realization of SVN NG as follows:
Lot 1 (Service Infrastructure): published on 02.09.2024 under announcement number 525071-2024 (Official Journal of the European Union S 170/2024)
Lot 3 (Networks): published on 16.09.2024 under announcement number 560341-2024 (Official Journal of the European Union S 182/2024)
Lot 4 (Unified Communications): published on 16.10.2024 under announcement number 624863-2024 (Official Journal of the European Union S 202/2024)
Lot 5 (Mobile Communications): 2025
Lot 6 (Site Network Management): 2025
Lot 7 (SVN Service Desk): published on 18.11.2024 under announcement number 700689-2024 (Official Journal of the European Union S 224/2024)
Lot 8 (SVN Coordination): published on 18.11.2024 under announcement number 700141-2024 (Official Journal of the European Union S 224/2024)

The exact content of the required services and the contractual framework will be detailed in the tender documents for the respective lot.

LOT-0000
Procurement Procedure SVN NG, Lot 2 (Service Operation).
The contractor in Lot 2 takes over the application operation and specialized application support for the various services and applications of SVN NG and KDN IV within various security zones. To this end, the contractor of Lot 2 uses the service infrastructure provided by the contractor of Lot 1. This specifically means that the contractor of Lot 2 is not responsible for the operation of the technical infrastructure, but for the operation of the services based on it. These include a variety of services for which the contractor will take on various tasks. The contractor is fully responsible for the comprehensive operation of numerous services. This includes the complete assumption of application responsibility, including support and assistance for the staff of all organizations and institutions of the Free State of Saxony, municipalities including schools, and other institutions. The requested service particularly includes the essential network and identity services as well as central infrastructure services. Specifically, this includes: - Operation of all e-government applications - Central infrastructure services: o Databases: Operation of central database clusters, including Microsoft SQL Server and PostgreSQL for production and test environments. o Logging & Monitoring: Provision of a central platform for all log and metric data of the services from Lot 2 and other services (for example, from other lots), with access options for different clients via dashboards. o Big Data: Platform with the ability to publish large datasets on the Internet. o Hosting: Ability to provide applications either in containers or VMs. - Identity Management: o Identity Broker: Operation of an identity broker supporting Open ID Connect and SAML 2.0 protocols, including support for multi-factor authentication (MFA). o RADIUS and LDAP Proxy: Operation and management of RADIUS and LDAP proxies for authentication, authorization, and directory service requests in networks. o Identity Provider: Provision of directory services for the identity broker. o Identity Synchronization Service: Synchronization of entities and group identities for a consistent basis of authentication and authorization processes for cloud services. - Network Services: o API Gateway: Responsible for the full operation and management of the API gateway, which controls and secures the API communication. o Web Application Firewall (WAF): Operation of the WAF to protect web applications from attacks such as SQL injection and cross-site scripting. o Proxies (Reverse and Forward): Operation and management of reverse and forward proxies for the control and securing of data traffic. o Network-related services such as DNS/DHCP/NTP: Operation and management of DNS, DHCP, and NTP for name resolution, IP address assignment, and time synchronization in the network. o Remote maintenance access: Secure and reliable operation of remote maintenance access for remote access to systems and networks. - E-Mail Gateway: Provision of an email infrastructure with security chain, such as malware scanning and anti-spam, as well as routing for different clients. - Update Service (WSUS): Complete operation of the central upstream service for SVN NG. - SVN Data Exchange Platform: System for storing and managing documents and information for collaboration in SVN NG.