The contractor's task is as follows: the MVM Paks Nuclear Power Plant Zrt. will conduct a cyber security assessment, vulnerability examination, risk analysis, and expert activities related to technological process control and management systems, as well as engineering activities associated with the system (implementation of a complete process control and management system, operation).

Types of tasks:

1. Support for operational defense events and incident management tasks.

Support for the operation of the event and incident management process as follows:

a) Detection of security incidents.
b) Development of countermeasures for defense incidents (events and incidents).
c) Management of the resolution of defense incidents.
d) Evidence collection and evaluation.
e) Operational support in the cybersecurity specialty service SOC workspace.
f) Recovery, reinforcement. This activity includes the development of reinforcement plans for technological digital systems classified into safety classes 3 and 4 by the Nuclear Safety Division (ABOS).

2. Support for control tasks.
a) General professional management tasks.
b) Defense preparation.
c) Professional licensing.
d) Evaluation of defense performance.
e) Consulting and consultation.

The support for control tasks is realized in two forms:
• Preparation of documents, plans, analyses, performance of technical background tasks, for which the contracted hourly amount is available in the contract.
• Continuous, on-site support in the operational area of MVM PA Zrt.

Software tools and technologies used at the client, which the tenderer must be familiar with:
• Microsoft operating systems.
• VMware virtualization software.
• Schneider Electric Wonderware System Platform framework.
• CISCO networking devices.

LOT-0001
Professional Support for the Operational Management of Cyber Defense 2026-2029.
Tasks involved in the supported defense are as follows:

Supported activities:
• Support for control tasks:
o General professional management tasks
o Defense preparation
o Professional licensing
o Evaluation of defense performance
o Providing consulting and consultation
• Support for event and incident management:
o Providing consulting and consultation
o Development of defense countermeasures
o Evidence collection, evaluation
o Recovery, reinforcement
o Compilation of threat and vulnerability catalogs
o Risk management
The technological programmable systems can be classified into support groups based on their primary task and the level of protection:

1. Cyber Defense Authority Zone IT systems:
• Programmable systems (“Type A” support)
• Professional target systems (“Type B” support)
The contractor providing support must ensure both “A” and “B” type services.
The “A” service group includes those Technological Digital Systems (TDRs) whose primary task is related to the planning of nuclear processes, evaluating the data collected about them, or supporting decision-making related to technological processes. Programmable systems that are not directly related to technology but provide expert-level information sharing, expert support in the planning of technological processes, or fulfilling significant tasks in supporting the Client's internal professional processes, whose protection is based on the defense services of the Expert Network.
The “B” service group includes professional target systems, whose operation or the confidentiality, integrity, and availability of the data they manage is indirectly associated with the technological processes or the IT systems serving them (diagnostic, measuring, and analytical systems, etc.).

The requirements for operational event and incident management differ for various service groups:

Tasks for supporting operational defense incidents and event management (Response Table)

Working days during office hours:
Urgent:
A: Telephone assistance: within 2 hours of receiving the report. On-site assistance: on the same day based on coordination with the reporter.
B: -
Normal:
A: Telephone assistance: within 3 hours of receiving the report. On-site assistance: on the next working day.
B: -

Outside office hours (work, non-working, and holiday days):
Urgent:
A: On-site assistance: on the next working day following the notification (email sent).
B: -
Normal:
A: On-site assistance: on the 2nd working day following the notification (email sent).
B: -

The list of IT systems belonging to the “A” service group:

System name
1. Technology IT Network (TSZH)
2. BSZG - Block computer system
3. PDA- Verona Area monitoring data collection and processing system
4. SER - Radiation protection monitoring system
5. TER2 - Performance monitoring system
6. ANEREM - Transfer Neutron Monitoring and Reactivity Monitor
7. Local Control System (HIR2)
8. EIK IR - Power Plant Control Center information system
9. TM – Turbine monitoring and diagnostic system
10. SBK - Severe Accident treatment data collection and measurement system
11. RVR - Reactor protection system
12. SZBVR - Regulation and Security Protection System
13. RTSZ – Reactor Performance Regulator
14. Diesel control system
15. Generator auxiliary DS table
16. Transfer machine diagnostic system
17. Radioactive waste management systems
18. TKP – Volume compensator system
19. PVE IR - Backup Water Preparation Control System
20. Fire alarm supervision system
21. Control supervision and connection system (IFK)
22. Unified Digital Radio System (EDR)
23. Chemical Sampling and Measurement System (VMR)
24. Cyber-defense Specialty Service Support System (KVSZSZ Support System)
Reactophysical computation supporting systems:

25. PAZAR - Reactor diagnostic system
26. SIMULATOR - Full-scale block simulator
27. SIMULATOR – Block computer
28. SIMULATOR – VERONA
29. SIMULATOR - Electrical network simulator
30. The mirror server and defense system of the Expert Network
31. Turbine Performance Regulator (TTSZ)
32. Regulation loops
33. Liquid Wastewater Processing Technology (FHFT)
34. Climate monitoring system
35. Block Earthquake indicator and Monitoring system
The list of IT systems belonging to the “B” service group
System name: Examination and diagnostic systems, applications
Short description of the system: Systems and applications of the organizations used for examination and diagnostic purposes.
The detailed description of the contractor obligations and scope contained in the contract is included in the technical specification attached to the participation invitation.
The Client plans to enter into a framework contract with the following planned amounts of 471,000,000 HUF + VAT and undertakes to draw 70% of the framework amount.

1. Tasks for supporting operational defense incidents and event management:
• In 2026: for 11 months of quantity*
• In 2027: for 12 months of quantity*
• In 2028: for 12 months of quantity*
• In 2029: for 12 months of quantity*
* with prescribed availability. The response requirements are contained in the Response Table (see above and in point 4.1 of the technical description).

2. Tasks for supporting control tasks
The name of the support task,
The name of the service Planned quantities
2026 2027 2028 2029
Consulting and consultation, Support for defense performance assessment, Support for defense preparation, Support for professional licensing, Support for regulatory tasks, Support for general professional management tasks: 624 hours 624 hours 624 hours 624 hours
On-site provision of professional resources (2 persons): 440 working days 480 working days 480 working days 480 working days
The work schedule for completing the tasks is included in point 2 (Procedure)