View CfT Workspace

CfT: Multi-Supplier Framework for the Provision of Network Penetration Testing Services

Name of Contracting Authority:
National Transport Authority_1149
Title:
Multi-Supplier Framework for the Provision of Network Penetration Testing Services
CfT CA Unique ID:
Evaluation Mechanism:
Most Economically Advantageous Tender (MEAT)
Description:
The objective of this competition is to establish a framework of suitably qualified Participants that will be available to tender for the provision of network penetration testing services for the Authority upon request. At its discretion, following this Framework competition, the Authority may enter into Contracts with a maximum of five Participants. The Authority requires the provision of (external/internal) network penetration testing services for the security of the network infrastructure, cloud and premise networks, which will enable the Authority to prioritise, mitigate and remedy potential vulnerabilities and/or weakness detected. The systems under management, and or, in development include: Corporate systems in the Equinix Data Centre; The Back Office system relating to the Leap Card, which are in the Eir Data Centre; Leap App NFC System (Top-up using Phone) based in the Amazon (AWS) Cloud; The back office system supporting the Commercial Bus Operators, which is based in the Amazon Cloud; National Journey Planner in the AWS cloud; Real Time Passenger Information System in the AWS cloud; The Regional Bikes back office system, which is in the Vodafone data center; The Regional Bikes Website, which is based in the AWS cloud; The Mobile Ticketing System [Microsoft Azure (“Azure”)]; The Tax Saver system (Azure); The Business Intelligence and Data Analytics platform (Azure); Transport modelling Systems hybrid cloud (AWS); Next Generation Ticketing (future system); Call Centre Consolidation (future system); Next Generation AVL (future system); Corporate Web Sites in the AWS cloud; and Bit Bucket / JIRA. The above list of systems is indicative of systems the Authority will have the responsibility to maintain. The list does not purport to be comprehensive. Most of the data centres in the list are operated by third party consultants, not Authority staff. Periodically, the Authority will develop and acquire new systems, which may require testing, while also consolidating and relocating existing systems to reduce the number of data centres and cloud environments.
Procurement Type:
Services
CPC Category:
Directive:
2014/24/EU (Classic)
Procedure:
Open
CfT Involves:
The establishment of a framework agreement
Framework agreement Timeframe:
18/03/2028 00:00
CPV Codes:
72820000-Computer testing services
72600000-Computer support and consultancy services
72611000-Technical computer support services
72800000-Computer audit and testing services
72700000-Computer network services
Award per Item:
No
Inclusion of e-Auctions :
No
NUTS codes:
Estimated value (EUR):
1,540,000
Cumulative value of contracts:
375,750
Awarded (CAN) value:
912,820
Above or Below threshold:
Above
Time-limit for receipt of tenders or requests to participate:
08/11/2023 12:00
Deadline for dispatching invitations:
End of clarification period:
27/10/2023 12:00
Tenders Opening Date:
08/11/2023 12:30
Allow suppliers to make an online Expression Of Interest:
Yes
Contract awarded in Lots:
No
Contract duration in months or years, including any options and renewals:
4 years
Validity of Tender in days or months:
180 days
EU funding:
No
Multiple tenders will be accepted:
Yes
Date of Publication/Invitation:
29/09/2023 16:51
TED links for published notices:
https://ted.europa.eu/udl?uri=TED:NOTICE:205778-202...
Language of publication:
EN
Number of openers:
Two