MARKET DIALOGUE
The subjects of the market dialogue are the expert services in cybersecurity and data protection being prepared as well as the assessment services by security evaluation institutions for the needs of the Finnish Transport and Communications Agency (Väylävirasto).
BACKGROUND AND OBJECTIVES
The Finnish Transport and Communications Agency is tendering the following two expert service procurements:
Expert services in cybersecurity and data protection
This procurement aims to acquire experts to support the assurance and development of the agency's information and cybersecurity, data protection, and information management. The agency is engaged in several administrative and technical projects and initiatives, wherein operational development and the renewal of existing systems or the ordering of new information systems are ongoing. A common theme in all these projects and initiatives is the implementation of cybersecurity and the fulfilment of public sector cybersecurity requirements in a manner suitable for the organization.
The procurement focuses on information and cybersecurity consulting and auditing services. Work largely occurs in a multi-vendor environment but also as internal consulting within individual projects or initiatives. Cybersecurity audits are also conducted regularly in the vendor environment. Additionally, the impact of cybersecurity directives directed towards the public sector on the agency's projects and operations will be assessed. Besides office environments, the procurement also covers infrastructures managed by Väylä, i.e., state-owned road, rail, and waterway systems. Each transportation mode has its own developmental needs in cybersecurity that may significantly differ from each other.
The goal of the procurement is to obtain a partner for the agency with whom the development of the organization’s information and cybersecurity across various transportation modes can be implemented.
Assessment services by security evaluation institutions
This procurement aims to acquire assessment institution services to support the agency’s information and cybersecurity, data protection, and information management assurance. Under this contract, assessment institutions will provide assessment services in the role of an evaluation institution approved by the Finnish Transport and Communications Agency.
Assessment institutions must comply with applicable legislation, official regulations, recommendations, guidelines, and other obligations directed by authorities when providing assessment services. Special attention must be paid to the guidance given to evaluation institutions regarding cybersecurity assessment institutions 210/2016 O by the Finnish Transport and Communications Agency. The contracting authority will separately assess the need for market dialogue regarding the assessment services of security evaluation institutions during the dialogue.
The procurement procedures for both competitions will utilize the following dynamic procurement systems (DPS) of Hansel Ltd: Cybersecurity and Data Protection Expert Services 2025, Assessment Services by Security Evaluation Institutions 2021–2028.
The dynamic procurement systems of Hansel Ltd are open to all, and any companies meeting the eligibility criteria may join. Interested companies are thus invited to join the dynamic procurement systems.
TENTATIVE TIMETABLE
The contracting authority's target timetable for conducting the market dialogue and procurement is:
-----
ADDITIONAL INFORMATION ABOUT THE ANNOUNCEMENT
This announcement is a prior notice. This notice does not request offers.
The prior notice is linked to an invitation to a market dialogue, where all interested suppliers will have the opportunity to engage in technical dialogue regarding the procurement with the Finnish Transport and Communications Agency. The purpose of the technical dialogue is to conduct discussions at a general level about the subject of the procurement and its definition. The technical dialogue does not bind the agency to carry out the procurement. The technical dialogue also does not commit the supplier to participate in a potential bidding competition.
The technical dialogue will be organized through feedback on draft versions of the tender request materials and answers to questions related to the subject of the procurement. The preliminary date for submission of draft versions of the tender request materials and questions is 12.12.2025. The contracting authority reserves about two weeks for suppliers to provide feedback.
Registration instructions:
Suppliers must express their interest in participating in the market dialogue by 10.12.2025 at 12:00 by sending an email to paul.kinnunen@vayla.fi, pirita.tuikka@vayla.fi, and aino.mannikko@vayla.fi with the subject line: "Procurement of Cybersecurity - Market Dialogue". The supplier is requested to indicate in the email the email addresses where market dialogue materials should be sent.
Suppliers should provide the following information in their message:
The contracting authority reserves the right to invite suppliers to private discussions or to continue technical dialogue in another manner to be announced separately, which will be communicated as needed later.
The descriptions presented in this prior notice and the estimated publication date of the procurement announcement, as well as any materials for the ongoing dialogue provided later, are preliminary and indicative information regarding the procurement.
No compensation will be paid to participating companies for responses or participation.