Framework agreement for the Purchase of maintenance and consulting services for safeguarding the TTP role in AutoPASS

Statens vegvesen (The Norwegian Public Roads Administration)

The Contracting Authority wants tender offers on the delivery of maintenance and consulting services related to ICT safety for handling of cryptographic keys (chip keys) in the management of electronic toll payment in Norway (AutoPASS).
The role as manager of cryptographic keys in AutoPASS is called the TTP role (The Role of the Trusted Third Party) as the name implies, this is an independent role that safeguards confidence that the cryptographic keys are managed in an appropriate manner.
The objective of the procurement is:
Procure a tenderer who can ensure the safeguarding of the TTP role hereafter. The procurement is divided into 2 parts/work areas. Both of the parts are obligatory when submitting a tender offer. Work area A is for system management and operation and work area B is for professional assistance on safety in the execution of the TTP role.
For work area A, The Norwegian Public Roads Administration will make available an ICT system for key handling (called KMS). The tenderer will be trained in the system and work processes connected to the system, in order to execute the job of managing the system.
Brief information about the system: KMS is written in Java and is an off-line system that only exchanges information with the help of manual processes and USB storage units. KMS shall only be used for fixed work processes approximately one time per month. When not in use, the KMS machine will be turned off and securely locked in a safe.
The tenderer will also be responsible for further development of the software for KMS according to the existing technology. The tenderer will have access to source code and documentation ‘as is’ for the existing KMS. The tenderer must use this as a basis for maintenance and further development.
Work area B is on professional assistance on safety/audit. Primarily in relation to following up equipment suppliers to AutoPASS. It is expected that equipment suppliers to AutoPASS use their own technical system for key handling. The professional assistance should give the Contracting Authority confidence that the equipment suppliers handle cryptographic keys in a sufficiently secure manner.
The scope of the contract is:
1) The agreement period is 2 years calculated from signing of the contract, with the possibility to extend the framework agreement by 1 year + 1 year, so that the total possible length of agreement is 4 years. During the agreement period, call-offs can be draw on agreements, these agreements follow the Government's standard agreements, SSA-B and SSA-V.
Options on work areas:
2) Operation of FTP server.
3) Work area B.
Releasing of options on work areas must be done within the first month after signing of the contract, after that time, the respective work areas will either be part of the framework contract or fall outside of the framework contract.
Number of tenderers:
For this procurement, a contract will be signed with 1 tenderer.
A more detailed description of the procurement is in the Tender documentation Annex V and B ‘Description/Requirement specification’.

Frist
Fristen for mottak av tilbud var 2015-12-07. Anskaffelsen ble publisert 2015-10-27.

Leverandører
Følgende leverandører er nevnt i tildelingsbeslutninger eller andre anskaffelsesdokumenter:

• • Teleplan Consulting AS

Hvem?

• • Statens vegvesen (The Norwegian Public Roads Administration)

Hva?

• • Programmering av software og rådgivning › Systemtjenester og tekniske konsulenttjenester
• • Databehandling › Levering av data
• • Databasevirksomhet › Dataadministrasjon
• • Datamaskinrelaterte driftstjenester › Drift av dataanlegg

Hvor?

• • Norge