Central System Architecture and Cybersecurity for Railway IT System

Provision of a central and local IT architecture for the railway information system: This includes a central and local processing and storage architecture with multiple virtualization clusters (Oracle Virtualization, Hyper-V, RedHat OpenShift), separate production and development/testing environments, and a storage platform featuring high-performance storage (all-flash, at least 4 controllers, NVMe, block-only) for production and classic storage (low transfer rate, high capacity, block and file) for historical data, DMZ, and repository. The local component consists of two servers per regional agency and NAS storage, supplemented by an identical NAS in the central data center for operational information. A complex monitoring and cybersecurity solution is also included, covering communications infrastructure monitoring, internal network protection via detection and response with a local sandbox, privileged user access management, database access monitoring, vulnerability management, TSM-ERTMS network access control, and a SIEM system. Furthermore, a solution for train traffic monitoring is provided, comprising workstations for CNCFR personnel, an integrated system for video acquisition, display, and management, and a videoconferencing solution. The contract duration is 84 months, including a 60-month warranty period. The estimated value is 110,552,200.00 Lei excluding VAT, with 99,552,200.00 Lei for IT products (hardware and software) and 11,000,000.00 Lei for installation, commissioning, integration, and testing services.

Tender documents

Additional details