About the Contracting Authority (ies):

The Waste-to-Energy Agency (EGE) is an entity in Oslo Municipality under the Town Council Department for Environment and Transport. The agency is responsible for the final treatment of residue waste from households and runs the municipality's energy recovery plants at Klemetsrud and Haraldrud, as well as biogas plant at Romerike in Nes municipality (RBA).

EGE is the largest process industry company in Oslo. The entity is defined as heavy process industry within thermal energy production and has comprehensive electro and electromechanical complexity. The plants consist of 5 oven lines and 2 sorting lines.

EGE has the capacity to recycle 410 000 tonnes of waste per annum. The treatment capacity, in addition to the households' requirements are sold to other municipalities and businesses at market price. The plants produce approx. 840 GWh renewable district heating and approx. 160 GWh electricity.

There are approx. 200 employees divided between the 2 recycling plants and the biogas plant. The department is certified in accordance with NS-EN ISO 9001 and 14001.

22.6.2015 EGE was demerged and the Klemetsrud plant was divided as a separate legal entity. KEA AS operates the incineration plant at Klemetsrud whilst EGE operates the incineration plant at Haraldrud, 2 optical sorting plants at Klemetsrud and Haraldrud, as well as Romerike Biogas plant at Nes.

Objective:

The Waste-to-Energy Agency and KEA AS shall increase the focus on information security. Improvement measures shall be implemented. These measures shall encourage the understanding in relation to information security and measures that satisfy the Emergency Regulations Class 1, for this area. In practise this means ISO 27001.

EGE/KEA AS requests a project manager that can support and manage the agency's future works in relation to information security.

The project manager shall map and coordinate the information security measures that promote the understanding of information security at all plants involved. Map, draft, develop and operate all processes that ensure efficient use of resources and competence.

The consultant shall also ensure that all involved parties are conscious about how each individual contributes to a responsible information security.

This is a summary of the assignment, a detailed description is given in Annex. 1.