Central System Architecture and Cybersecurity for Railway IT System

Provision of central system architecture and cybersecurity for the railway IT system: includes a central and local processing and storage architecture with multiple virtualization clusters (Oracle Virtualization, Hyper-V, RedHat OpenShift), separate production, development, and testing environments, and multi-tenant virtualization platforms. The storage platform comprises high-performance storage (all-flash, min. 4 controllers, NVMe, high transfer rate, block-only) for production and classic storage (low transfer rate, low disk speed, high capacity, block and file) for historical data, DMZ, and repository. Enterprise-class servers and network equipment for integration into the central datacenter are provided. The local component includes two servers per regional IT agency and one NAS storage device; an identical NAS device for the central datacenter is also included. The solution must be scalable. A complex monitoring and cybersecurity solution covers communication infrastructure monitoring (network visibility, traffic monitoring in core and datacenter router zones), internal network protection via detection and response solutions with local sandbox, privileged user access management, database access monitoring, vulnerability management, access control to the TSM-ERTMS network, and SIEM. A train tracking solution includes workstations for CNCFR personnel, an integrated system for video source acquisition, display, and management, and a videoconferencing solution. The contract duration is 84 months, including a 60-month warranty period. The estimated value is 110,552,200.00 Lei excluding VAT, split into 99,552,200.00 Lei excluding VAT for IT products (hardware and software) and 11,000,000.00 Lei excluding VAT for installation, commissioning, integration, and testing services.

Tender documents

Additional details