European Center for Medium-Range Weather Forecasts (ECMWF) is issuing an Invitation to Tender (ITT) for provision of IT Security review and consultancy services. The contract term will be for a minimum period of two (2) years with an option of yearly extensions to a further two (2) years. The objective of the subsequent contract is to assess and review the security posture of the IT infrastructures, including the creation of a remediation plan to resolve the discovered vulnerabilities, and to secure best value for money for the consultancy services to support the remediation plan, and for future ECMWF information security activities.
European Center for Medium-Range Weather Forecasts (ECMWF) is issuing an Invitation to Tender (ITT) for provision of IT Security review and consultancy services. The contract term will be for a minimum period of two (2) years with an option of yearly extensions to a further two (2) years. The objective of the subsequent contract is to assess and review the security posture of the IT infrastructures, including the creation of a remediation plan to resolve the discovered vulnerabilities, and to secure best value for money for the consultancy services to support the remediation plan, and for future ECMWF information security activities.
The services expected under the contract will be both in the form specific deliverables for Work Packages 1-4, and optional consultancy services for WP5 that may be commissioned by ECMWF during the contract based on the resources and rates agreed.
Work Packages (WP):
WP1 – Vulnerability assessments
WP2 – Penetration testing services
WP3 – Security architecture review
WP4 – ISO 27001 Gap Analysis
WP5 – Consultancy services
The selection, procurement and deployment of security controls, safeguards, or services as well as configuration change, patch installation or software updates identified and suggested in the remediation plan are outside the scope of this ITT.
The ITT documents will be available on ECMWF's eProcurement Portal. See additional info under Section VI-3.