Central System Architecture and Cybersecurity for Railway IT System

Delivery and implementation of a central system architecture and cybersecurity solution for the railway IT system: includes a central and local processing and storage architecture with multiple virtualization clusters (Oracle Virtualization, Hyper-V, RedHat OpenShift), separate production, development, testing, and training environments, and a storage platform with high-performance storage (all-flash, at least 4 controllers, NVMe, high transfer rate, block-only) for production and classic storage (low transfer rate, low disk speed, high capacity, block and file) for historical data, DMZ, and repository. Enterprise-class servers with general architecture and network equipment for integration into the central datacenter will be provided. The local component consists of two servers per regional IT agency and one NAS storage device; an identical NAS device will be installed in the central datacenter for operational information, service documentation, and intermediate data. The cybersecurity solution includes communication infrastructure monitoring (network visibility, traffic monitoring in core and datacenter router zones), internal network protection through detection and response solutions with a local sandbox, enhanced security for essential services through privileged access management, database access monitoring, vulnerability management, access control to the TSM-ERTMS network, and SIEM. A train tracking solution comprises workstations for CNCFR staff, an integrated system for video source acquisition, display, and management, and a videoconferencing solution. The contract duration is 84 months, including a 60-month warranty period. The estimated value is 110,552,200.00 RON excluding VAT, split into 99,552,200.00 RON excluding VAT for IT products (hardware and software) and 11,000,000.00 RON excluding VAT for installation, commissioning, integration, and testing services.

CONTRACTING AUTHORITY

CLASSIFICATION

ADDITIONAL DETAILS