Advice and support services in the area of information security, data protection and IT emergency management in the amount of 200 person days with the option to call up another 200 person days.

The State Office for Finance (LfF) is a central state authority of the Free State of Bavaria. The authority sees itself as a service provider for the Bavarian State Administration. In particular, she is responsible for determining, arranging and settling the remuneration for civil servants, employees and pension recipients of the Free State of Bavaria, the handling of a substantial part of the state cash transactions and the litigation for the Free State of Bavaria, especially before the civil courts . The State Office is also an important IT service provider for all departments. The specialist procedures for the areas of activity mentioned are e.g. T. developed in-house, but software is also used that has been bought in from external companies and that has been adapted if necessary. The LfF is introducing an ISMS based on the IT-Grundschutz of the BSI - using the standard security as a procedure - in order to operate this permanently. The LfF's areas of activity also include business processes whose data and information are classified as having increased protection requirements with regard to confidentiality, integrity and availability. In addition, an IT emergency management system standardized according to BSI is established. In addition to a general IT emergency concept, separate emergency manuals have to be drawn up for particularly critical business processes that are still to be defined, possibly also taking existing documentation into account. In the area of data protection, data protection impact assessments (DSFA) are to be carried out and all documentation work required in this context. In this context, the LfF awards advice and support services in the area of information security, data protection and IT emergency management in the amount of 200 person days with the option to call up another 200 person days. The task relationship is distributed in advance. 75% in the area of information security, 15% in the area of data protection and the like. 10% on IT emergency management. Postponements of tasks are possible. An on-site presence is required for the fulfillment of the order and may also be necessary. The on-site presence mainly takes place at the DSt. In Regensburg, e.g. T. also at the DSt. in Munich u. in a few cases to the other DSt. of the LfF. On average, the scope of service provision is 3 days a week in the areas of information security and the like. IT emergency management. Data protection services may have to be performed in parallel with up to 3 days per week. Information security services are to be provided continuously in the other areas as required by the client. The duration of the service is expected to be approximately 2.5 years (including the option) from the award of the contract.