Procurement procedure for updating and supplementing the Information Security Management System (ISMS) documentation, training for medical and administrative personnel in the field of cyber hygiene, and final audit in the field of cybersecurity | Tenderlake

Procurement procedure for updating and supplementing the Information Security Management System (ISMS) documentation, training for medical and administrative personnel in the field of cyber hygiene, and final audit in the field of cybersecurity

Contract Value:
-
Notice Type:
Contract Notice
Published Date:
10 March 2026
Closing Date:
09 April 2026
Location(s):
PL621 Elbląski (PL Poland/POLSKA)
Description:
Support is needed for updating ISMS documentation, training hospital staff on cyber hygiene, and conducting a final cybersecurity audit to assess improvements in IT security.

The subject of the contract is:

Task/Stage No. 1:
It includes support in developing, supplementing, and updating the documentation of the information security management system (ISMS) with elements of continuity of operations (CO) in information security, taking into account the organizational context of the Ordering Party, in order to achieve compliance with Polish standards PN-EN ISO/IEC 27001 and PN-EN ISO/IEC 27002, KRI Regulation, and UKSC2. This support specifically pertains to the development, supplementation, updating, or integration of documentation in the area of information security – a detailed description of the subject of the contract can be found in Attachment No. 1.1 to the SWZ, Chapter I.

Task/Stage No. 2:
It includes conducting in-person training for the hospital staff on the topic “CYBER HYGIENE IN PRACTICE” (a total of 886 people) – a detailed description of the subject of the contract can be found in Attachment No. 1.1 to the SWZ, Chapter II.

Task/Stage No. 3:
It includes conducting a final audit of cybersecurity. The purpose of the audit is to verify whether, as a result of implementing tasks under the National Reconstruction and Resilience Plan - Investment D1.1.2 “Accelerating the processes of digital transformation of health care through further development of digital services in health care,” which is part of component D “Effectiveness, availability, and quality of the health protection system” (Call No. KPOD.07.03-IP.10-001/25), there has been an improvement in the level of IT security concerning the level resulting from the initial cybersecurity maturity survey, which is an attachment to the funding agreement – a detailed description of the subject of the contract can be found in Attachment No. 1.1 to the SWZ, Chapter III.


LOT-0001
Procurement procedure for updating and supplementing the Information Security Management System (ISMS) documentation, training for medical and administrative personnel in the field of cyber hygiene, and final audit in the field of cybersecurity.
The subject of the contract is:

Task/Stage No. 1:
It includes support in developing, supplementing, and updating the documentation of the information security management system (ISMS) with elements of continuity of operations (CO) in information security, taking into account the organizational context of the Ordering Party, in order to achieve compliance with Polish standards PN-EN ISO/IEC 27001 and PN-EN ISO/IEC 27002, KRI Regulation, and UKSC2. This support specifically pertains to the development, supplementation, updating, or integration of documentation in the area of information security – a detailed description of the subject of the contract can be found in Attachment No. 1.1 to the SWZ, Chapter I.

Task/Stage No. 2:
It includes conducting in-person training for the hospital staff on the topic “CYBER HYGIENE IN PRACTICE” (a total of 886 people) – a detailed description of the subject of the contract can be found in Attachment No. 1.1 to the SWZ, Chapter II.

Task/Stage No. 3:
It includes conducting a final audit of cybersecurity. The purpose of the audit is to verify whether, as a result of implementing tasks under the National Reconstruction and Resilience Plan - Investment D1.1.2 “Accelerating the processes of digital transformation of health care through further development of digital services in health care,” which is part of component D “Effectiveness, availability, and quality of the health protection system” (Call No. KPOD.07.03-IP.10-001/25), there has been an improvement in the level of IT security concerning the level resulting from the initial cybersecurity maturity survey, which is an attachment to the funding agreement – a detailed description of the subject of the contract can be found in Attachment No. 1.1 to the SWZ, Chapter III.

The Buyer:
Szpital Miejski św. Jana Pawła II w Elblągu
Additional information:
Link:
Download Full Notice as PDF
Link:
View Full Notice
Link:
Additional document: ZP/12/2026
CPV Code(s):
80533100 - Computer training services