Conducting Initial Extended Audits of Used Centralized Information Systems and Preparation of Documentation from Rules

The subject of this public procurement is the "Conducting of Initial Extended Audits of Used Centralized Information Systems and Preparation of Documentation from Rules." The procurement aims to conduct a comprehensive review, assessment, and analysis of the information security of 15 centralized information systems utilized by judicial authorities. This includes performing penetration tests, evaluating code and infrastructure, and preparing a report along with a draft of security rules in accordance with the Regulation on Minimum Requirements for Network and Information Security (NMIIS). The scope of services includes activities such as conducting security analysis and audits, which encompass: analysis of architecture, infrastructure, and source code of the systems; conducting penetration tests according to MITRE ATT&CK and OWASP frameworks; reviewing authentication, access, logs, cryptography, and vulnerabilities; and preparing audit reports for each system. Additionally, the preparation of a draft of internal rules is included. This tender is crucial for enhancing the security posture of the judicial information systems and ensuring compliance with established security regulations.

This is a services contract in the information and communication technology sector, with a focus on Network Infrastructure and Cybersecurity. Located in Bulgaria, Europe, this opportunity is open to firms and consortiums, with an estimated budget of BGN 752,927.

Published through TED - Tenders Electronic Daily (EU), a national government procurement portal. Public procurement tenders follow the country's national bidding regulations and may have specific eligibility and documentation requirements for services in the information and communication technology sector. Service contracts are typically evaluated on both technical quality and price, and may require bidders to demonstrate relevant experience and qualified personnel. This contract has already been awarded. The information is published for transparency and market intelligence purposes.