The subject of the contract is the acquisition of non-patented technical knowledge or licenses and assistance in the implementation of the national assessment and certification scheme in accordance with Common Criteria under the Project entitled "National scheme for the assessment and certification of security and privacy of IT products and systems with Common Criteria" (acronym KSO3C). The scope of the contract includes the transfer of non-patented technical knowledge and support services in the implementation of the assessment and certification scheme.
The subject of the order is:
1) transfer of non-patented technical knowledge in the following areas:
a. functioning of the Assessment and Certification Scheme:
i. definitions, roles and functions,
ii. certification, licensing, as well as laboratory supervision and monitoring policies,
iii. operational procedures,
b. the functioning of the certification body:
i. definitions, roles and functions,
ii. textbooks,
iii. operational procedures,
iv. IT system for document and process management in the certification body (license),
c. the functioning of the laboratory:
i. definitions, roles, functions,
ii. manual of quality of safety assessment processes,
iii. description of IT security evaluation processes,
iv. detailed methods, techniques and tools for assessing security for various types of IT products,
v. an IT system for managing documentation and processes in the laboratory (licenses),
2) support services in the implementation of the Assessment and Certification Scheme, including:
a. training on all delivered products, taking into account the nature of the tasks envisaged for the Employers, i.e.:
i. certification body (CB),
ii. IL-PIB laboratory,
iii. EMAG laboratory,
b. supervision over the adaptation of all products delivered to the Employers, i.e.
i. certification body,
ii. IL-PIB laboratory,
iii. EMAG laboratory,
c. providing training materials to practice all elements of the evaluation and certification process:
Certification - processes, procedures and activities of the certification body,
ii. evaluation - processes, procedures and activities of the IL-PIB laboratory,
iii. evaluation - processes, procedures and activities of the EMAG laboratory,
d. constant support and monitoring of the scheme's operation in the operational phase, including the successful completion of two supervised certification processes of the KSO3C Project in the field of activities:
i. certification body,
ii. IL-PIB laboratory,
iii. EMAG laboratory,
e. providing detailed training plans to improve skills and provide the necessary experience for Employers, depending on the role they will perform in the KSO3C Project, i.e.
i. certification body,
ii. IL-PIB laboratory,
iii. EMAG laboratory,
f. providing short-term (i.e. lasting less than 1 month) and long-term (i.e. lasting at least 1 month, but not more than 6 months) training sessions using own or reference resources for Employers:
i. certification body,
ii. IL-PIB laboratory,
iii. EMAG laboratory.
2. The subject of the order is divided between individual Purchasers as follows:
1) unpatented technical knowledge, including products and license, within the scope of para. 1 point 1 lit. a and b and the provision of services specified in point 2 lit. af point i. will be transferred and executed by the Contractor solely to NASK;
2) unpatented technical knowledge, including products and licenses, referred to in para. 1 point 1 lit. c will be transferred in equal parts to IL-PIB and EMAG;
3) rendering of services specified in par. 1 point 2 lit. af point ii. will be made by the Contractor solely for the benefit of IL-PIB;
4) Provision of services referred to in par. 1 point 2 lit. af point iii. will be made by the Contractor solely for the benefit of EMAG.
The subject of the contract will be implemented in four stages, in accordance with the Schedule, which will be agreed by the Employers conducting the procedure and the Contractor.
A detailed description of the subject of the contract is attached as Annex 2 to the ToR.