Danmarks Nationalbank (the contracting authority) is the central bank of Denmark, and is a self-governing, independent institution established by law. The contracting authority is responsible for ensuring the Danish payments infrastructure, which is the network of systems that makes it possible for consumers, corporations and financial actors to exchange payments and securities transactions. In addition approximately 450 employees depends on a functioning internal it-systems to perform their daily work.

This contract notice intends to establish a Consultancy Framework Agreement with a number of suppliers, to cover a wide range of expertise areas. The contracting authority intends to establish a close cooperation with the selected suppliers, to ensure rapid and smooth performance of services at a high expert level.

The framework for project and program management is the Customer’s project management model, developed on the basis of experience with PRINCE2, and with inspiration from IPMA and Half Double. The success criteria are: Predictability for time and finances, high delivery quality, satisfaction with the co-operation, achievement of benefits. External project managers must fulfil the same role as for the Customer's internal project managers, which includes fulfilling the same requirements of method knowledge and management conduct. The project portfolio covers a range of many different types of products, such as business development, rationalisation, compliance, security and improvements, and maintenance of IT platforms and infrastructure.

Testing is performed in order to determine the quality of the service that is tested. For the test to be accurate, without its execution requiring a disproportionate input of resources, there is a need for planning, follow-up and management of a full test cycle, which also includes follow-up on deliveries and suitability for purpose, including assessment of the service/system's usability and stability, based on test results. Furthermore, insight into and experience from methods related to testing are required, including the more technical aspects of testing, such as, but not limited to, test automation, performance and load testing.

The Customer wishes to have systems/functionalities that are user-friendly and robust towards errors. Besides enabling testing, the resulting system/functionality must also support stable and effective operation. The Supplier shall thus assist with e.g.:

• Drawing up requirements of the system/functionality to be developed

• System development/programming

• Integration, configuration and commissioning

• Testing and documentation of development

• Service management (in relation to this service and in the context of the other service management).

In step with the development of new technology a need may arise for the adaptation or maintenance of existing systems.

A relevant technology would be, but not limited to, Microsoft.

The services shall be delivered including the capability to deliver input and perform the task at SME level, deliver project management, drive initiatives and be able to handle tasks at both advisory and execution level within services related to IT-security architecture, processes and compliance, security tests, forensics and threat intelligence, technical security and implementation of security products, e.g. as follows:

• Design and implementation of solutions to prevent unauthorised system and data access, as well as hacker attacks

• Creation of processes for monitoring and escalation of IT security breaches

• Assistance with documentation and creation of the IT security policy, security manuals, etc. and assistance with compliance with personal data protection legislation, etc.

• Performance of security tests, and prevention and rectification of incidents

• Identification of potential IT security threats

• Creation of action plans to resolve security threats

• Advisory services concerning technical security

• Assistance and advisory services concerning security products and their implementation

IT architecture services must give the Customer a full overview of the Customer’s overall IT support, and set out guidelines to be followed by new acquisitions and additions to the IT infrastructure/systems, in order to retain flexibility, and so that complexity is kept under control, e.g. as follows:

• Preparation of an overview of the Customer's overall IT support

• Preparation of guidelines for the choice of applications, platforms, etc. and the structuring of data and integrations

• Design and principles for IT architecture

IT governance concerns structures and processes to manage the development/procurement and management of the components which support the Customer's activities. The Supplier shall thus be able to assist with sourcing strategy, including advisory services on supplier strategy, cost optimisation and planning, advisory services and assistance with the execution of calls for tender and the establishment of procurement processes, and finaly avisory services concerning the implementation of contract management, including standardisation/rationalisation and negotiation strategies.

Finally the Supplier shall be able to assist with advisory services concerning enterprise service management.

The services shall be delivered including the capability to deliver input and perform the task at SME level, deliver project management, drive initiatives and be able to handle tasks at both advisory and execution level within services related to business intelligence, analytics, big data, machine learning and robotics, e.g. as follows:

• Data collection, often automated across various data sources

• Data integration and quality

• Processing, selection, grouping and statistical processing of data

• Presentation and reporting of data

• Data projection based on analyses and forecasts

• Service management (in relation to this service and in the context of the other service management).

The services shall be delivered including the capability to deliver input and perform the task at SME level, deliver project management, drive initiatives and be able to handle tasks at both advisory and execution level within services related to financial management, e.g. as follows:

• Clean-up and reconciliations in relation to financial management

• Process optimization

• ERP-assistance

• Document management and book keeping

• VAT management

• Financial and Business Controlling

• Financial reporting

• Professional sparring / support / training

The services shall be delivered including the capability to deliver input and perform the task at SME level, deliver project management, drive initiatives and be able to handle tasks at both advisory and execution level within services related to security awareness, e.g. as follows:

• Assistance with Security Guidelines

• Assistance with compliance tasks

• Assistance with Security Crisis management

• Assistance with IT Security Awareness and training

• Assistance with documentation and creation of security manuals, etc

• Assistance with compliance and guidance regarding relevant Security ISO Standards focusing on Cloud Security