Cybersecurity Improvement for IT/OT Water Supply Infrastructure in Bukowsko Municipality
Comprehensive implementation of cybersecurity improvement measures in Bukowsko Municipality, including deliveries, implementations, configuration, commissioning, training, tests, audits, documentation, maintenance, technical support, updates, and other periodic services for the periods required in the OPZ, as well as handover of complete as-built and license documentation. The services cover four areas: Organizational (development, implementation, maintenance, management, and improvement of an Information Security Management System (ISMS) and compliance audit, including ISMS documentation, risk analysis, information classification, procedures for access control, cryptography, vulnerability management, backups, disaster recovery, change management, supplier and incident management; SoA; evidence registers; ISMS/KRI/u.o.KSC audit with report and corrective action plan); Competency (cybersecurity training and awareness-raising activities for employees, management, and IT/OT specialists: basic training for a maximum of 40 employees, training for staff, specialized training for management and IT personnel, training combined with social engineering tests, reports, attendance lists, knowledge tests, training materials, and recommendations); IT Technical (modernization and protection of the IT environment at the server, network, identity, event analytics, and endpoint protection layers: servers, hard drives, RAM, virtualization, disk server, antivirus software, network switches, UPS, SIEM/SOAR with implementation, 2FA/U2F with keys, pre-implementation analysis, server licenses, HA implementation, MDM, analytical system/Network Security Policy Management & Orchestration, 42U RACK cabinet, IT/OT/ICS/IIoT security tests); OT Technical (strengthening the security of the OT environment and the operational continuity of technological infrastructure: EDR software for 35 endpoints/licenses, power generator with all necessary elements for assembly, connection, commissioning, and functional tests, implementation, maintenance, technical support, updates, and other periodic services for the periods required in the OPZ). Compatibility, architectural consistency, and integration with the client's existing environment must be ensured. Offered ICT products, services, and processes must not include elements identified in recommendations under Art. 33 para. 4 of the Act of July 5, 2018, on the national cybersecurity system as having a negative impact on state security, or products/services/processes from providers classified as high-risk under Art. 67b para. 15 of the same Act. The place of performance is the client's headquarters and specified IT/OT infrastructure locations within Bukowsko Municipality, particularly those related to water supply. Equivalent solutions are permissible, provided the bidder demonstrates equivalence in parameters, functionality, compatibility, security, and maintainability. further items as per the tender documents.