VNG Realisatie and Bizob are procuring for the participants listed in Appendix 1 List of participating organizations.
The assignment consists of a portfolio of products and services that enable participating organizations to cover cyber risks and support them in complying with laws and regulations. It has been chosen to divide the portfolio of Cyber Resilience into a composition of lots such that on the one hand, participation in the procurement is also attractive to smaller, specialized, and innovative market parties, and on the other hand, participants can make the best suitable choice from the focus areas so that they can effectively and optimally respond to their own needs through their participation in the procurement. The division of the lots is as follows:
Lot 1 Governance: 5 intended contractors
Lot 2 Awareness: 5 intended contractors
Lot 3 Prevention: 4 intended contractors
Lot 4 Detection: 5 intended contractors
LOT-0001
Lot 1 Governance.
See Appendix 5.
This lot includes products and services that apply organization-wide in terms of information security and privacy protection. They are aimed at ensuring effective and efficient business operations and also at complying with the laws and regulations in the mentioned area and ensuring the continuity of service delivery.
The products and services focus on gaining an in-depth understanding of the specific risks the organization faces, the threats the organization may encounter, and the measures the organization can and must take based on a risk assessment to achieve the above.
The mentioned products and services often involve not only tooling but also organization-wide processes that can be supported with this tooling. Therefore, the products and services in this lot relate both to the provision of tooling, and to the service of performing measurements with this tooling either once or periodically, or providing support in setting up, securing, and (testing) the execution of the associated (management) processes. Furthermore, being able to conduct workshops and training in the field of governance is also part of this lot.
In summary, the requested service in generic terms includes the following:
• Providing tooling for the self or guided execution of the aforementioned process.
• Providing support for the setup (Design and Existence) and execution (Functioning) of the processes associated with the lot 1 service and embedding it in the business operations.
• The ability to procure measurements as a service for determining status in a previously mentioned process (scope, intended goal, and result) either once or periodically (subscription form).
• Providing workshops and training regarding the lot 1 products, services, and processes.
• The ability to acquire external expertise in the form of a BIO(2)/Cbw advisor and/or AVG advisor.
• The ability to acquire external expertise in the form of a cloud hardening specialist.
LOT-0002
Lot 2 Awareness.
See Appendix 5.
This lot includes products and services that apply organization-wide in terms of information security and privacy protection. They are aimed at ensuring effective and efficient business operations and ensuring compliance with the regulations in the mentioned area and that service continuity is maintained.
The products and services focus on gaining an in-depth understanding of the specific risks the organization faces and the measures the organization can and must take based on a risk assessment to achieve the above.
Similar to lot 1, this lot includes not only tooling but also organization-wide processes that can be supported with this tooling. Therefore, the products and services in this lot relate both to the provision of tooling, and to the service of performing measurements with this tooling either once or periodically, or providing support in setting up, securing, and (testing) the execution of the associated (management) processes. Furthermore, workshops and training in the area of governance are also part of this lot.
In summary, the requested service in generic terms includes the following:
• Providing tooling for the self or guided execution of the aforementioned process.
• Providing support for the setup (Design and Existence) and execution (Functioning) of the processes associated with the lot 2 service and embedding it in the business operations.
• The ability to procure measurements as a service for determining status in a previously mentioned process (scope, intended goal, and result) either once or periodically (subscription form).
• Providing workshops and training regarding the lot 2 products, services, and processes.
• The ability to acquire external expertise in the form of a BIO(2)/Cbw advisor and/or AVG advisor.
• The ability to acquire external expertise in the form of a cloud hardening specialist.
LOT-0003
Lot 3 Prevention.
See Appendix 5.
This lot includes products and services that apply organization-wide in terms of information security and privacy protection. Their objective is to ensure effective and efficient business operations and compliance with laws and regulations applicable to this sector, as well as ensuring the continuity of service delivery.
The products and services focus on gaining an in-depth understanding of specific risks faced by the organization and what measures must be taken based on risk assessment to address these effectively.
Again, as in the previous lots, this lot integrates both products and services that can either be tools for direct use or support services for related processes. Workshops and training on governance are also included.
In summary, similar to the previous lots, the requested services include:
• Providing tooling for self or guided execution of processes.
• Support during setup and operation of the relevant processes.
• The ability to conduct recurring measurements as a service.
• Provision of workshops and training on related tools and processes.
• Acquisition of external expertise for compliance and data protection, and cloud hardening.
LOT-0004
Lot 4 Detection.
See Appendix 5.
This lot includes products and services that apply organization-wide in terms of information security and privacy protection. Their role is the same: to ensure effective operations, compliance with regulations, and service continuity.
Understanding risks and implementing measures still stands central, with a focus on tools and their operational integration across the organization.
Summarized, this lot necessitates:
• Providing tooling for self-directed use of related processes.
• Assistance in operational setup and adherence to laws and regulations.
• Periodic status reporting through measurements.
• Workshops and training related to consequential tools.
• The need for external expertise applies similarly in this context.
LOT-0005
Joint procurement VNG_R/Bizob Cyber Resilience.
VNG Realisatie and Bizob are procuring for the participants listed in Appendix 1 List of participating organizations.
The assignment consists of a portfolio of products and services that enable participating organizations to cover cyber risks and support them in complying with applicable laws and regulations. The breakdown of the Cyber Resilience portfolio allows for participation from a diverse range of market actors, thereby facilitating tailored responses to organizational needs. The partitioning is:
Lot 1 Governance: 5 intended contractors
Lot 2 Awareness: 5 intended contractors
Lot 3 Prevention: 4 intended contractors
Lot 4 Detection: 5 intended contractors