ECMWF/ITT/2024/364 Provision of IT Security Review and Consultancy Services

Tender description

European Center for Medium-Range Weather Forecasts (ECMWF) is issuing an Invitation to Tender (ITT) for provision of IT Security review and consultancy services. The contract term will be for a minimum period of two (2) years with an option of yearly extensions to a further two (2) years. The objective of the subsequent contract is to assess and review the security posture of the IT infrastructures, including the creation of a remediation plan to resolve the discovered vulnerabilities, and to secure best value for money for the consultancy services to support the remediation plan, and for future ECMWF information security activities. Lot 1: European Center for Medium-Range Weather Forecasts (ECMWF) is issuing an Invitation to Tender (ITT) for provision of IT Security review and consultancy services. The contract term will be for a minimum period of two (2) years with an option of yearly extensions to a further two (2) years. The objective of the subsequent contract is to assess and review the security posture of the IT infrastructures, including the creation of a remediation plan to resolve the discovered vulnerabilities, and to secure best value for money for the consultancy services to support the remediation plan, and for future ECMWF information security activities. The services expected under the contract will be both in the form specific deliverables for Work Packages 1-4, and optional consultancy services for WP5 that may be commissioned by ECMWF during the contract based on the resources and rates agreed. Work Packages (WP): WP1 – Vulnerability assessments WP2 – Penetration testing services WP3 – Security architecture review WP4 – ISO 27001 Gap Analysis WP5 – Consultancy services The selection, procurement and deployment of security controls, safeguards, or services as well as configuration change, patch installation or software updates identified and suggested in the remediation plan are outside the scope of this ITT. The ITT documents will be available on ECMWF's eProcurement Portal. See additional info under Section VI-3.