Evaluation Assignment — Cyber Attacks at Stortinget (the Norwegian Parliament)

Stortinget

In their open threat assessments, the security authorities have pointed out that advanced threat actors, including foreign intelligence, use large resources to break into Norwegian computer networks in order to gain access to information and to influence Norwegian decision-making processes.
Digital attacks are ongoing, and security measures are continuously developed based on risk and vulnerability analysis. Regardless, in one year, the Norwegian Parliament has been exposed to two cyber attacks where hackers managed to obtain data from our systems. In the first instance, PST's investigation concluded on 8 December 2020 that foreign intelligence was behind the attack. The last attack is still under investigation, and the Norwegian Parliament does not know who is responsible for the attack. The attack is considered to be very advanced.
With an increasingly complex and demanding digital threats and with the experiences from the events mentioned, the Norwegian Parliament's administration wants to carry out an external evaluation.

Frist

Fristen for mottak av tilbud var 2021-06-04. Anskaffelsen ble publisert 2021-05-03.

Leverandører

Følgende leverandører er nevnt i tildelingsbeslutninger eller andre anskaffelsesdokumenter:

Hvem? Hva? Hvor?
Anskaffelseshistorikk
Dato Dokument
2021-05-03 Kunngjøring av konkurranse
2021-08-09 Kunngjøring om tildeling av kontrakt
Kunngjøring av konkurranse (2021-05-03)
Gjenstand
Anskaffelsens omfang
Tittel: Investigation and security services
Referansenummer: 2021/2221
Kort beskrivelse:
In their open threat assessments, the security authorities have pointed out that advanced threat actors, including foreign intelligence, use large resources to break into Norwegian computer networks in order to gain access to information and to influence Norwegian decision-making processes. Digital attacks are ongoing, and security measures are continuously developed based on risk and vulnerability analysis. Regardless, in one year, the Norwegian Parliament has been exposed to two cyber attacks where hackers managed to obtain data from our systems. In the first instance, PST's investigation concluded on 8 December 2020 that foreign intelligence was behind the attack. The last attack is still under investigation, and the Norwegian Parliament does not know who is responsible for the attack. The attack is considered to be very advanced. With an increasingly complex and demanding digital threats and with the experiences from the events mentioned, the Norwegian Parliament's administration wants to carry out an external evaluation.
Vis mer
Metadata for kunngjøring
Originalspråk: engelsk 🗣️
Dokumenttype: Kunngjøring av konkurranse
Kontraktens art: Tjenester
Forskrift: Det europeiske økonomiske samarbeidsområdet (EØS), med deltakelse av GPA-land
Felles innkjøpsordliste (CPV)
Kode: Etterforsknings- og sikkerhetstjenester 📦
Tilleggs-CPV: Forskning 📦
Utførelsessted
NUTS-region: Oslo og Viken 🏙️

Prosedyre
Prosedyretype: Åpen anbudskonkurranse
Tilbudstype: Innlevering for alle delkontrakter
Tildelingskriterier
Det mest økonomisk fordelaktige tilbudet

Oppdragsgiver
Identitet
Land: Norge 🇳🇴
Type tildelende myndighet: Annet
Navn på tildelende myndighet: Stortinget
Postadresse: Karl Johans gate 22
Postnummer: 0026
Poststed: Oslo
Kontakt
Internettadresse: https://permalink.mercell.com/154763539.aspx 🌏
E-post: innkjop.postmottak@stortinget.no 📧
Telefon: +47 23313050 📞
URL for dokumenter: https://permalink.mercell.com/154763539.aspx 🌏
URL for deltakelse: https://permalink.mercell.com/154763539.aspx 🌏

Referanse
Datoer
Sendt dato: 2021-05-03 📅
Innleveringsfrist: 2021-06-04 📅
Publiseringsdato: 2021-05-07 📅
Identifikatorer
Kunngjøringsnummer: 2021/S 089-231764
OJ-S-utgave: 89

Gjenstand
Anskaffelsens omfang
Kort beskrivelse:
In their open threat assessments, the security authorities have pointed out that advanced threat actors, including foreign intelligence, use large resources to break into Norwegian computer networks in order to gain access to information and to influence Norwegian decision-making processes.
Vis mer
Digital attacks are ongoing, and security measures are continuously developed based on risk and vulnerability analysis. Regardless, in one year, the Norwegian Parliament has been exposed to two cyber attacks where hackers managed to obtain data from our systems. In the first instance, PST's investigation concluded on 8 December 2020 that foreign intelligence was behind the attack. The last attack is still under investigation, and the Norwegian Parliament does not know who is responsible for the attack. The attack is considered to be very advanced.
Vis mer
With an increasingly complex and demanding digital threats and with the experiences from the events mentioned, the Norwegian Parliament's administration wants to carry out an external evaluation.
Estimert totalverdi: 1 500 000 NOK 💰
Kort beskrivelse:
In the review of the cyber attacks, the evaluation will assess the aspects of the handling of the cyber attacks that are relevant to how the Norwegian Parliament should in the future work with preventative, consequence and damage-reducing measures.
The evaluation will primarily focus on awareness of digital security and contingency, but so that both technical, human and organisational perspectives are covered. It is also preferable to outline learning points/improvement areas for the Norwegian Parliament administration to use.
Vis mer
The methodological approach of the evaluation will build on known principles for implementation of evaluations that have the purpose of learning.
It is an absolute requirement that personnel in the evaluation team must have or be able to achieve security clearance ‘confidential’ in accordance with the Security Act, by the date of contract signing.
The delivery deadline, i.e. The date the evaluation team must deliver the report to the Norwegian Parliament is 1 November 2021 at the latest.
NB: the Norwegian Parliament for all practical purposes is closed in weeks 29, 30 and 31 and tenderer cannot plan activity requiring assistance from the Norwegian Parliament resources during these weeks.
Estimert verdi eksklusive mva: 1 500 000 NOK 💰
Varighet: 3 måneder
Utførelsessted
Hovedsted eller utførelsessted: Oslo.

Prosedyre
Rettslig grunnlag: 32014L0024
Tidspunkt for mottak av tilbud: 12:00
Språk som tilbud eller forespørsler om deltakelse kan sendes inn på: norsk 🗣️
Tilbudets gyldighetsperiode: 2021-06-30 📅
Dato for åpning av tilbud: 2021-06-04 📅
Tidspunkt for åpning av tilbud: 12:00

Oppdragsgiver
Identitet
Nasjonalt registreringsnummer: 971524960
Annen type oppdragsgiver: Stortinget (the Norwegian Parliament)
Kontakt
Kontaktpunkt: Seksjon for innkjøp, økonomi og styring
Adresse til kjøperprofilen: http://www.stortinget.no/ 🌏
URL for dokumenter: https://permalink.mercell.com/154763539.aspx 🌏

Utfyllende informasjon
Klageinstans
Navn: Oslo Tingrett
Poststed: Oslo
Land: Norge 🇳🇴
Kilde: OJS 2021/S 089-231764 (2021-05-03)
Kunngjøring om tildeling av kontrakt (2021-08-09)
Gjenstand
Anskaffelsens omfang
Totalverdi for anskaffelsen: 1 500 000 NOK 💰
Metadata for kunngjøring
Dokumenttype: Kunngjøring om tildeling av kontrakt
Felles innkjøpsordliste (CPV)
Tilleggs-CPV: Vurdering og gjennomgang av systemkvalitetssikring 📦

Prosedyre
Tilbudstype: Ikke aktuelt

Referanse
Datoer
Sendt dato: 2021-08-09 📅
Publiseringsdato: 2021-08-13 📅
Identifikatorer
Kunngjøringsnummer: 2021/S 156-414988
Refererer til kunngjøring: 2021/S 089-231764
OJ-S-utgave: 156

Gjenstand
Utførelsessted
Hovedsted eller utførelsessted: Oslo

Prosedyre
Tildelingskriterier
Kvalitetskriterium (navn): The team of consultants and implementation of assignment
Kvalitetskriterium (vekting): 70
Pris (vekting): 30

Tildeling av kontrakt
Dato for kontraktinngåelse: 2021-07-08 📅
Navn: KPMG AS (Hovedenhet)
Postadresse: Sørkedalsveien 6
Poststed: Oslo
Postnummer: 0369
Land: Norge 🇳🇴
Telefon: +47 40639458 📞
E-post: anbud@kpmg.no 📧
Land: Oslo 🏙️
Totalverdi for anskaffelsen: 1 500 000 NOK 💰
Informasjon om tilbud
Antall mottatte tilbud: 8

Oppdragsgiver
Identitet
Annen type oppdragsgiver: Stortinget [the Norwegian Parliament]
Kilde: OJS 2021/S 156-414988 (2021-08-09)