Procurement of information security and data protection consultancy services

Direktoratet for forvaltning og økonomistyring (DFØ)

The Norwegian Agency for Public and Financial Management (DFØ) is the contracting authority for this procurement. The procurement is carried out by DFØ's unit, the Norwegian public sector cloud marketplace (MPS), which facilitates the procurement and use of cloud services in the public sector. Strengthening the overall cybersecurity posture of the public sector is a key objective of MPS. MPS actively collaborates with national and international partners, including European and Nordic central purchasing bodies, EU/EEA institutions, and professional environments within cybersecurity and standardisation (including ENISA, EDPB, NIST, and MITRE), as well as relevant national stakeholders such as the Norwegian National Security Authority (NSM), the National Cyber Security Centre (NCSC), and KiNS. The purpose is to ensure up-to-date market insight, knowledge sharing, and the development of robust solutions for the public sector. DFØ invites tenders for the provision of one senior cybersecurity consultant. The assignment includes advising on how the public sector should organise and procure cybersecurity services, including incident action and proactive security work. The consultant shall also assist in defining security requirements for cloud services (IaaS, PaaS, and SaaS), to be included in contracts with various suppliers. Furthermore, the consultant will contribute to translating complex cybersecurity needs into concrete and actionable decision-making material for senior management and decision-makers across the public sector. The assignment also includes advising on relevant products, services, and supplier strategies within cybersecurity, including managed security services. The consultant may utilise supporting resources where necessary but retains full responsibility for the quality, progress, and overall delivery of the services.

Frist

Deadline 2026-06-19

Hvem?

• Direktoratet for forvaltning og økonomistyring (DFØ)

Hva?

Hvor?

• Oslo og Viken › Oslo

Anskaffelseshistorikk

Dato	Dokument
2026-05-21	Kunngjøring av konkurranse

Kunngjøring av konkurranse (2026-05-21)
Gjenstand
Anskaffelsens omfang
Tittel: Procurement of information security and data protection consultancy services
Referansenummer: 26/466
Kort beskrivelse:

Kontrakttype: Tjenester
Produkter/tjenester: Support- og konsulentvirksomhet i forbindelse med edb 📦
Estimert verdi eksklusive mva: 10 000 000 NOK 💰
Beskrivelse
Intern identifikator: 26/466
Tilleggsprodukter/-tjenester:

IT-tjenester 📦

Programmering av software og rådgivning 📦

Hovedsted eller utførelsessted:

The Contracting Authority does not regulate the place and time of work. However, the Contracting Authority may have a need for the consultant to perform some of their work from the Customer's premises at Økern Portal, Lørenfaret 1, 0580 Oslo, and thus may require some physical appearance at the Customer's location. The Customer may also require physical appearance in meetings at other locations e.g. meetings with other public entities, cf. SSA-B clause 1.1.

Postadresse: Lørenfaret 1C
Postnummer: 0585
By: Oslo
Land: Norge 🇳🇴
Utførelsessted: Oslo 🏙️
Varighet: 4 år
Informasjon om elektroniske kataloger
Tilbud må presenteres i form av elektroniske kataloger eller inkludere en elektronisk katalog
Tittel
Identifikasjonsnummer for delkontrakt: LOT-0000

Prosedyre
Prosedyretype
Rettslig grunnlag: Direktiv 2014/24/EU
Administrativ informasjon
Frist for mottak av tilbud eller forespørsler om deltakelse: 2026-06-19 11:00:00 📅
Språk som tilbud eller forespørsler om deltakelse kan sendes inn på: norsk 🗣️
Anbudsvilkår
Avansert eller kvalifisert elektronisk signatur eller segl (som definert i forordning (EU) nr. 910/2014) er påkrevd
Elektronisk katalog: Påkrevd
Elektronisk fakturering: Påkrevd
Elektronisk betaling vil bli brukt ✅

Juridisk, økonomisk, finansiell og teknisk informasjon
Vilkår for deltakelse
Utvalgskriterium: Innmelding i handelsregister
Liste og kort beskrivelse av regler og kriterier:

Tenderers are registered in a company register or a trade register in the member state in which the tenderer is established. As described in annex XI of directive 2014/24/EU; suppliers from certain member states may have to fulfil other requirements in the mentioned annex.

Utvalgskriterium: Generell årlig omsetning
Liste og kort beskrivelse av regler og kriterier:

The tenderer ́s ("total") annual turnover for the number of financial years requested in the tender notice or in the procurement documents is as follows:

If the information about the turnover (combined or specific) is not available for the entire requested period, please state the date the company was established, or the tenderers started their business:

Utvalgskriterium: Finansielt nøkkeltall
Liste og kort beskrivelse av regler og kriterier:

For financial key figures stated in the notice or in the procurement documents, the tenderer declares that the actual value(s) of the requested key figures are as follows:

Utvalgskriterium: Referanser på spesifiserte leveranser
Liste og kort beskrivelse av regler og kriterier:

Only for services: In the reference period, the tenderer has carried out the following important goods deliveries of the requested type, or the following important services of the requested type. The contracting authority can require up to three years experience and allow experience from the previous three years to be taken into consideration.

Utestengelsesgrunn:

Akkord med kreditorer

Avtaler med andre økonomiske aktører som har til formål å vri konkurransen

Barnearbeid og andre former for menneskehandel

+ 20 til

Bedrageri

Brudd på forpliktelser på arbeidsrettens område

Brudd på forpliktelser på miljørettens område

Brudd på forpliktelser på sosialrettens område

Brudd på plikt til å betale skatter

Brudd på plikt til å betale trygdeavgifter

Deltakelse i en kriminell organisasjon

Direkte eller indirekte deltakelse i forberedelsen av denne anskaffelsen

Eiendeler under administrasjon av bobestyrer

Forretningsvirksomheten er suspendert

Grov yrkesfeil

Hvitvasking eller terrorfinansiering

Insolvens

Interessekonflikt på grunn av deltakelse i anskaffelsesprosedyren

Konkurs

Korrupsjon

Terrorhandlinger eller handlinger knyttet til terrorvirksomhet

Tidlig oppsigelse, erstatning eller andre tilsvarende sanksjoner

Tilsvarende situasjon som konkurs, insolvens eller akkord etter nasjonal rett

Uriktige opplysninger, tilbakeholdt informasjon, manglende evne til å fremlegge nødvendige dokumenter, eller å ha skaffet seg fortrolige opplysninger om denne anskaffelsesprosedyren

Beskrivelse av utelukkelsesgrunner:

Is the tenderer himself or a person, who is a member of the tenderer's administration, management or supervisory…

… body or has the competence to represent or control or make decisions in such bodies, in the event a enforceable verdict has been convicted of corruption by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Corruption as defined in Article 3 of the Convention on Combating Corruption, Involving European Communities or European Union Member States (EUT C 195 of 25.6.1997, s. 1), and in Article 2, point 1, in the Council ́s framework decision 2003/568/RIA of 22 July 2003 on combating corruption in the private sector (EUT L 192 of 31.7.2003, p. 54). This rejection reason also includes corruption as defined in national law for the contracting authority or supplier.

… body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted of fraud has been convicted of fraud by a verdict handed down not more than five years ago, or a rejection period determined directly in the judgement that still applies? Fraud included in Article 1 of the Convention on protection of the Financial Interests of the European Communities (EFT C 316 of 27.11.1995, p. 48).

… body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of money laundering or financing terrorism by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Money laundering or financing terrorism As defined in Article 1 of the European Parliament and Council Directive 2005/60/EF of 26 October 2005 on preventive measures against the use of the financial system for money laundering and financing terrorism (EUT L 309 of 25.11.2005, p. 15).

… body or has the competence to represent or control or make decisions in such bodies, at the time a legally convicted verdict of participation in a criminal organisation by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Participation in a criminal organisation as defined in Article 2 of the Council ́s framework decision 2008/841/RIA of 24 October 2008 on control of organised crime (EUT L 300 of 11.11.2008, p. 42)

… body, or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of acts of terrorism or criminal acts connected to terrorist activities by a verdict handed down no more than five years ago, or a rejection period set out directly in the judgement that still applies? Acts of terrorism or criminal acts relating to terrorist activity as defined in Article 1 and 3 of the Council ́s framework decision 2002/475/RIA of 13 June 2002 on combating terrorism (EFT L 164, af 22.6.2002, p. 3). This rejection reason also includes incitement to, participation or attempts to commit such actions as included in Article 4 in the mentioned framework decision.

… body or has the competence to represent or control or make decisions in such bodies, in the event a legal verdict has been convicted of child labour and other forms of human trafficking by a verdict handed down no more than five years ago, or a rejection period determined directly in the judgement that still applies? Child labour and other forms of human trafficking as defined in Article 2 of the European Parliament and council directive 2011/36/EU of 5. 1 April 2011 on the prevention and control of human trafficking and the protection of its victims and for compensation of the Council ́s framework decision 2002/629/RIA (EUT L 101 of 15.4.2011, p. 1).

Is the tenderer aware of breaches of environmental provisions as stated in national law, the relevant notice or procurement documents or Article 18 (2) of Directive 2014/24/EU.

Is the tenderer aware of breaches of provisions on…

… working conditions as stated in national law, the relevant notice or procurement documents or Article 18 (2) of Directive 2014/24/EU.

… social conditions as stated in national law, the relevant notice or procurement documents or Article 18 (2) of Directive 2014/24/EU.

Has the tenderer entered into agreement(s) with other tenderers with the intention of turning the competition?

Has the tenderer committed serious errors in professional practice? If relevant, see the definitions in national law, the relevant notice or procurement documents.

Have the tenderer:a) given grossly incorrect information when notifying the information required to verify that there is no basis for rejection, or of the qualification requirements being met,b) failed to provide such information,c) subject to immediately submitting the supporting documents requested by the Contracting Authority, ord) improperly affecting the Contracting Authority's decision process to acquire confidential information that could give this an unlawful advantage in connection with competition, or negligently has given misleading information that can have a significant influence on decisions on rejection, selection or award?

Are tenderers aware of a conflict of interest as stated in national law, the relevant notice or procurement documents?

Has the tenderer or an entity associated with the supplier advised the contracting authority or in another way been involved in the planning of the competition?

Has the tenderer committed significant breaches of contract in connection with the fulfilment of a previous public contract, a previous contract with a public contracting authority or a previous concession contract, where the breach has led to the cancellation of the contract, compensation or other similar sanctions?

Have tenderers failed to fulfil all their social security obligations in the country where they are established and in their member state, if this is a different country than what he is established in?

Has the tenderer not fulfilled his tax and duty obligations in the country in which he is established, and in the contracting authority's member state, if this is a different country than what he is established in?

Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.

Is the tenderer in a bankruptcy situation? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.

Is the supplier in a situation where he has been forced debt arrangement? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.

Is the tenderer in an insolvency situation? Specify why, under the mentioned circumstances, one is able to carry out the contract, considering the current national provisions and measures for continuing the business activities? It is not necessary to provide this information if rejection of tenderers made mandatory in accordance with the current national law without the possibility for exceptions.

Oppdragsgiver
Navn og adresser
Navn: Direktoratet for forvaltning og økonomistyring (DFØ)
Nasjonalt registreringsnummer: 986252932
Postadresse: Postboks 7154
Postnummer: 0130
Poststed: Oslo
Region: Oslo 🏙️
Land: Norge 🇳🇴
Kontaktpunkt: Inan Begic
E-post: inan.begic@dfo.no 📧
Telefon: +47 40007997 📞
Adresse til kjøperprofilen: https://eu.eu-supply.com/ctm/company/companyinformation/index/336234 🌏
Type oppdragsgiver
Offentligrettslig organ
Hovedaktivitet
Alminnelige offentlige tjenester
Kommunikasjon
URL for dokumenter: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=455735&TID=200416406&B= 🌏
Deltakelses-URL: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=455735&TID=200416406&B= 🌏
Navn: EU-Supply
Elektronisk innsending: Påkrevd

Utfyllende informasjon
Klageinstans
Navn: Oslo tingrett
Nasjonalt registreringsnummer: 926 725 939
Postnummer: 0125
Poststed: Oslo
Region: Oslo 🏙️
Land: Norge 🇳🇴
E-post: oslo.tingrett@domstol.no 📧
Telefon: +47 22035200 📞
Tjeneste hvor informasjon om klageprosedyren kan innhentes
Samme som: Navn og adresser
Klageprosedyre
Presis informasjon om frister for klageprosedyrer: 10 days waiting period
Informasjon om elektroniske arbeidsflyter
Elektronisk fakturering vil bli akseptert
Kilde: OJS 2026/S 099-354479 (2026-05-21)

Nye anskaffelser i relaterte kategorier 🆕

Datatjenester: rådgivning, programvareutvikling, internett og systemstøtte (>20 nye anskaffelser)

Support- og konsulentvirksomhet i forbindelse med edb (10)

Datamaskin supporttjenester