As part of its information security strategy, Sibelga continuously invests in its resilience capabilities in the field of cybersecurity and the protection of its information systems. In order to optimize costs while benefiting from added value, Sibelga decided not to invest in the internal development of a Security Operation Center.

Sibelga therefore wishes to work with a partner to benefit from the services of a modern SOC (Security Operation Center) cloud-based (hybrid if necessary) based on MDR (Managed Detection and Response) services.

The Contracting Authority wishes to benefit from a complete management of security events from the information system, namely:

• proactive detection of security incidents and their responses by security experts in both the IT and OT environments (based on industrial protocols),

• Optimize the collection, detection and analysis of security events.

To do this, Sibelga wishes to benefit from the services of a Modern MDR (if necessary Hybrid set up (Cloud + on prem)) operating 24 hours a day, 7 days a week, composed of:

o d’une solution EDR (Endpoint detection and response),

o an NDR (Network detection and Response) solution based on IP/TCP/UDP protocols,

o a NIDS (Network Intrusion Detection System) solution based on industrial protocols,

o d’une solution SOAR (Security Orchestration, Automation and Response)

o des services CSIRT (Cyber Security Incident Response Team),

o Threat Intelligence services,

o Threat Hunting services,

or....

With as a mandatory option, the possibility of extending the services to an XDR (Extended Detection & Response) by incorporating the logs of other critical components in the different environments, both for the infrastructure in the IT (Information Technology) and OT (Operation Technology) environment.

Therefore, a cascading Framework Agreement will be concluded with the first 2 Bidders ranked according to the award criteria. Only the Bidder ranked first according to the award criteria will be considered as an "active" Bidder. The other Bidder (ranked second) will be considered as the "reserve" Bidder. His contract can only be activated in case of default of the active Bidder.

In this context, the Contracting Authority reserves the right to appeal to the Reserve Contractor who has submitted the 2nd most economically advantageous tender on the basis of the award criteria of the Framework Agreement (cascade principle).

Consequently, the defaulting Contractor, in accordance with the ex officio measures provided for in the Royal Decree of 14/01/2013 establishing the general rules for the execution of public contracts, will have his contract, for the said Framework Agreement, terminated for the remainder of the duration of the Framework Agreement.

As part of its information security strategy, Sibelga continuously invests in its resilience capabilities in the field of cybersecurity and the protection of its information systems. In order to optimize costs while benefiting from added value, Sibelga decided not to invest in the internal development of a Security Operation Center.

Sibelga therefore wishes to work with a partner to benefit from the services of a modern SOC (Security Operation Center) cloud-based (hybrid if necessary) based on MDR (Managed Detection and Response) services.

The Contracting Authority wishes to benefit from a complete management of security events from the information system, namely:

• proactive detection of security incidents and their responses by security experts in both the IT and OT environments (based on industrial protocols),

• Optimize the collection, detection and analysis of security events.

To do this, Sibelga wishes to benefit from the services of a Modern MDR (if necessary Hybrid set up (Cloud + on prem)) operating 24 hours a day, 7 days a week, composed of:

o d’une solution EDR (Endpoint detection and response),

o an NDR (Network detection and Response) solution based on IP/TCP/UDP protocols,

o a NIDS (Network Intrusion Detection System) solution based on industrial protocols,

o d’une solution SOAR (Security Orchestration, Automation and Response)

o des services CSIRT (Cyber Security Incident Response Team),

o Threat Intelligence services,

o Threat Hunting services,

or....

With as a mandatory option, the possibility of extending the services to an XDR (Extended Detection & Response) by incorporating the logs of other critical components in the different environments, both for the infrastructure in the IT (Information Technology) and OT (Operation Technology) environment.

Therefore, a cascading Framework Agreement will be concluded with the first 2 Bidders ranked according to the award criteria. Only the Bidder ranked first according to the award criteria will be considered as an "active" Bidder. The other Bidder (ranked second) will be considered as the "reserve" Bidder. His contract can only be activated in case of default of the active Bidder.

In this context, the Contracting Authority reserves the right to appeal to the Reserve Contractor who has submitted the 2nd most economically advantageous tender on the basis of the award criteria of the Framework Agreement (cascade principle).

Consequently, the defaulting Contractor, in accordance with the ex officio measures provided for in the Royal Decree of 14/01/2013 establishing the general rules for the execution of public contracts, will have his contract, for the said Framework Agreement, terminated for the remainder of the duration of the Framework Agreement.