Tender detail

ICT third-party risk and security management solution

Summary

The tender concerns an ICT third-party risk and security management solution, i.e. a software platform, together with technical support, the manufacturer’s authorisation or certificate, a technical offer, a non-functional requirements table and a detailed cost form. The bidder must also take into account data protection, platform hosting, the ISO 27001 requirement, a power of attorney in case of a joint tender, and confirmation that the tender documents have been reviewed.

Reference number
311783-0000
Buyer
Eesti Energia AS
Country
Estonia (EST)
Procedure
Simplified procurement
CPV
72200000 Software programming and consultancy services
Deadline
2026-07-02
Status
Open
Contract subject
Services
Estimated value
Not published
Source
RHR

Participation requirements

Tender requirements are available in the official tender documents.

Compliance requirements

The bidder is excluded if the persons listed in the notice have been convicted of the specified offences, if the bidder has tax or social security arrears, or if the contract would breach an international or government sanction. The bidder is also excluded if its place of establishment or residence is not in an EU Member State, an EEA contracting state, or a country that has acceded to the WTO Government Procurement Agreement, as required by the tender documents.

Qualification criteria and exclusion grounds

The bidder must be certified to ISO 27001 or SOC 2 Type II, and the scope of certification must cover the offered third-party risk and security management platform. Compliance must be demonstrated with a copy of a valid certificate. If an equivalent solution or standard is offered, the bidder must also prove equivalence.