Procurement of a solution for audit trail, analysis and data masking

Politiets fellestjenester

The procurement
The objective of the contract is to make the police able to fulfill the Police Register Act's requirements regarding traceability and audit when using information.
The contract shall give the police the possibility to implement efficient and accurate inspections of audit-logs through use of an ICT tool, and thus contribute to increase the quality of the police's handling of information and safeguard the registered person's rights.
The contract shall be in accordance with relevant legislations, including the Police Register Act, Personal Data Act and the Working Environment Act.
A non-exhaustive description of the delivery and prerequisites for the delivery are given in Annex 2.
Options:
The contracting authority shall have an option for a data-masking tool to be used in a heterogeneous database environment for general data masking when testing, development and maintenance tasks are performed. This shall include the possibility of masking data across database schemas and masking data «on-the-fly». This in order to facilitate test-data for testing of all applications and services that handle personal information and other information worthy of being screened, as well as ensuring that such information is always sent in an anonymous form to the development and maintenance teams, without delaying error messages from being sent.
The contracting authority shall have an option for SIEM-functionality in order to be able to set up alarms based on events or a set of events, as well as reporting as standard reports and automatic warnings, via for example e-mail, for reactive and proactive security monitoring. The system must be able to be set up in accordance with the police implementation of ISO 27001.
The system proposal shall also describe the options.
The contract value is estimated to be between 5 and 30 000 000 NOK in investment, and between 1 and 6 000 000 NOK in annual maintenance. These amounts are not binding for the contracting authority. The options are estimated to have a value of between 5 and 60 000 000 NOK in investment. The figures are excluding VAT. The contracting authority does not have any historical figures and the estimate is therefore very uncertain.
The Contracting Authority uses Mercell Sourcing Service. To express your interest and gain access to any documents, please click on the link below or copy and paste the link into your browser. [[http://permalink.mercell.com/44661964.aspx]]. Then follow the instructions on the website.

Frist

Fristen for mottak av tilbud var 2014-06-04. Anskaffelsen ble publisert 2014-05-02.

Hvem? Hva? Hvor?
Anskaffelseshistorikk
Dato Dokument
2014-05-02 Kunngjøring av konkurranse
Kunngjøring av konkurranse (2014-05-02)
Gjenstand
Anskaffelsens omfang
Tittel: Custom software development services
Metadata for kunngjøring
Originalspråk: engelsk 🗣️
Dokumenttype: Kunngjøring av konkurranse
Kontraktens art: Varer
Forskrift: Det europeiske økonomiske samarbeidsområdet (EØS), med deltakelse av GPA-land
Felles innkjøpsordliste (CPV)
Kode: Utvikling av kundespesifisert programvare 📦

Prosedyre
Prosedyretype: Konkurransepreget dialog
Tilbudstype: Innlevering for alle delkontrakter
Tildelingskriterier
Det mest økonomisk fordelaktige tilbudet

Oppdragsgiver
Identitet
Land: Norge 🇳🇴
Type tildelende myndighet: Nasjonalt eller føderalt byrå/kontor
Navn på tildelende myndighet: Politiets fellestjenester
Postadresse: Postboks 8031 Dep
Postnummer: 0030
Poststed: Oslo
Kontakt
E-post: rolf.groth@politiet.no 📧

Referanse
Datoer
Sendt dato: 2014-05-02 📅
Innleveringsfrist: 2014-06-04 📅
Publiseringsdato: 2014-05-06 📅
Identifikatorer
Kunngjøringsnummer: 2014/S 087-153138
OJ-S-utgave: 87

Gjenstand
Anskaffelsens omfang
Kort beskrivelse:
The procurement
The objective of the contract is to make the police able to fulfill the Police Register Act's requirements regarding traceability and audit when using information.
The contract shall give the police the possibility to implement efficient and accurate inspections of audit-logs through use of an ICT tool, and thus contribute to increase the quality of the police's handling of information and safeguard the registered person's rights.
Vis mer
The contract shall be in accordance with relevant legislations, including the Police Register Act, Personal Data Act and the Working Environment Act.
A non-exhaustive description of the delivery and prerequisites for the delivery are given in Annex 2.
Options:
The contracting authority shall have an option for
a data-masking tool to be used in a heterogeneous database environment for general data masking when testing, development and maintenance tasks are performed. This shall include the possibility of masking data across database schemas and masking data «on-the-fly». This in order to facilitate test-data for testing of all applications and services that handle personal information and other information worthy of being screened, as well as ensuring that such information is always sent in an anonymous form to the development and maintenance teams, without delaying error messages from being sent.
SIEM-functionality in order to be able to set up alarms based on events or a set of events, as well as reporting as standard reports and automatic warnings, via for example e-mail, for reactive and proactive security monitoring. The system must be able to be set up in accordance with the police implementation of ISO 27001.
The system proposal shall also describe the options.
The contract value is estimated to be between 5 and 30 000 000 NOK in investment, and between 1 and 6 000 000 NOK in annual maintenance. These amounts are not binding for the contracting authority. The options are estimated to have a value of between 5 and 60 000 000 NOK in investment. The figures are excluding VAT. The contracting authority does not have any historical figures and the estimate is therefore very uncertain.
Vis mer
The Contracting Authority uses Mercell Sourcing Service. To express your interest and gain access to any documents, please click on the link below or copy and paste the link into your browser. [[http://permalink.mercell.com/44661964.aspx]]. Then follow the instructions on the website.
Vis mer
Referansenummer: 201400138
Utførelsessted
Hovedsted eller utførelsessted: Oslo, Norway.

Juridisk, økonomisk, finansiell og teknisk informasjon
Vilkår for deltakelse
Egnethet til å utøve yrkesvirksomheten:
K 01 Requirement: Tenderers shall document that all obligations relating to the payment of taxes and duties are fulfilled. Documented by: Tax certificate (Tax certificate for tax issued by the treasurer/municipal cashiers (form RF-1244)) which is not more than 6 months old, calculated from the tender deadline. Foreign suppliers must provide certificates from authorities equivalent to the Norwegian ones.
Vis mer
K 02 Requirement: Tenderers shall document that all obligations relating to the payment of taxes and duties are fulfilled. Documented by: VAT certificate (Certificate for paid VAT issued by the tax collector (form RF-1244)) which is not more than 6 months old, calculated from the tender deadline. Foreign suppliers must provide certificates from authorities equivalent to the Norwegian ones.
Vis mer
K 03 Tenderers shall document that all the legal requirements in Norway within health, the environment and safety (HSE) are fulfilled or will be fulfilled upon award of contract. HSE declaration (The declaration can be collected at the web address http://www.lovdata.no/for/sf/fa/xa-20060407-0402.html#map033).
Vis mer
K 04 Tenderers shall document that the enterprise is legally established. Norwegian companies: Company registration certificate. Foreign companies: Proof that the company is registered in a professional register as described in the law in the country where the tenderer is established. The certificate should not be older than 12 months.
Vis mer
Økonomisk og finansiell stilling:
K 05 The supplier must have the financial capacity to carry out the assignment/contract. This means a credit rating that is not lower than A (Dun & Bradstreet) or equivalent. If a supplier will use sub suppliers with a binding statement, they shall also enclose a credit rating. Documented by: A credit evaluation/rating from a credit assessment institution, not older than 6 months. Both the supplier and sub supplier shall enclose such documentation.
Vis mer
Teknisk og faglig kapasitet:
K 06 Suppliers shall have established connections to any sub suppliers/cooperation partners/agents and shall be able to sue their offered capacity during the contract period. Documented by: Suppliers shall enclose a binding statement (self-declaration) from any sub suppliers/cooperation partners/agents The binding statement (self-declaration) shall at a minimum include; "X (sub supplier/cooperation partner/agent) confirms that Y (the supplier) can use the our offered capacities to the degreee that is necessary to fulfil the contract with the Police's ICT services/Directorate of Police”. Date and signature of the X. The supplier shall document which part of the contract the sub supplier/cooperation partner is responsible for.
Vis mer
K 07 The supplier and any sub suppliers must be ISO 27001 certified or equivalent, or have an equivalent control system for information security. Documented by: A copy of an issued certificate, any written account and documentation of the company's control system for information security.
Vis mer

Prosedyre
Forventet antall kandidater: 5
Dato for utsendelse av invitasjoner: 2014-11-10 📅

Oppdragsgiver
Kontakt
Kontaktpunkt: Rolf M. Groth

Referanse
Identifikatorer
Referansenummer tildelt av oppdragsgiver: 201400138
Kilde: OJS 2014/S 087-153138 (2014-05-02)