Security architecture

Datatilsynet

The Data Protection Authority, henceforth referred to as the Awarding Authority, wishes to replace the existing two zone security architecture with a more secure, flexible system for the employees. The system shall also be easier to operate.
The paramount objectives which shall be obtained through the procurement have been defined as follows:
- Facilitate an increased degree of mobility among the Awarding Authority's employees.
- Offer the employees a uniformed and secure effective area/desktop, relatively independent on end points and locations.
- Safeguard the Awarding Authority's requirement for data security by using up-to-date security systems.
- Simplify operation, maintenance and security of end points and applications.
The contract includes the following:
- Implementation of systems which shall offer the employees a uniformed and secure effective area/desktop relatively independent of end points (stationary PCs, laptops, tablet PCs and mobile telephones) and locations, e.g by using Virtual Desktop Infrastructure (VDI), terminal servers, etc.
- Centralised operation, maintenance and protection of end points and applications
- Installation/upgrading and adaptation of joint services such as AD, DNS, WSUS, SCCM and print to new architecture. This also includes upgrading Exchange to the most resent version.
- Implement security systems in order to prevent information leakage, e.g. by using Date Leakage Prevention (DLP). This will i.a. means that it is necessary for the tenderer to cooperate with the Awarding Authority's provider of the case processing system Public 360, Software Innovation.
- Establish security systems that prevent intruders access to sensitive information by e.g. malware attacks on the Awarding Authority's end points (e.g. through boundary protection of applications with access to sensitive information).
- Documentation and training.
- Maintenance agreement.
- Operation agreement, in case the Awarding Authority chose an external system.
The Awarding Authority has not yet decided which operation model shall be used, and the tenderers are asked to submit tenders for both an external as well as an internal operated system
NOTE: To register your interest in this notice and obtain any additional information please visit the Doffin Web Site at http://www.doffin.no/Search/Search_Switch.aspx?ID=279635

Frist
Fristen for mottak av tilbud var 2013-02-22. Anskaffelsen ble publisert 2013-01-21.

Hvem?

• • Datatilsynet

Hva?

• • Datatjenester: rådgivning, programvareutvikling, internett og systemstøtte