Services of an external Information Security Officer (ISB)

Contracting authority: Erdölbevorratungsverband Körperschaft des öffentlichen Rechts Note: service.bund.de is only the publication platform for tenders; responsibility for the content and accuracy of individual offers (and thus for the duration of publication, its premature termination, for the specification of publication dates and offer deadlines) lies exclusively with the respective tendering organization. Therefore, please use exclusively the contact details of the tendering institution from the announcement when you: The subject of this procurement procedure is the performance of the duties of an external Information Security Officer (ISB) by the bidder or an employee employed by the bidder and qualified as an ISB, and the provision of the related services listed below: • Recording or checking the IT security requirements applicable under current legal and regulatory provisions, • Development of security concepts and policies based on these (Information Security Policy) and their implementation, • Establishment and further development of an Information Security Management System (ISMS), • Conducting risk assessments and deriving adequate security strategies, • Development of implementation plans for security measures in accordance with applicable legal and regulatory provisions, • Initiation and coordination of security measures within the framework of IT security management, as well as their testing and monitoring, • Support of internal and external IT audits, • Evaluation and preparation of security reports from technically relevant sources, • Regular security reporting to the Executive Board on the status of information security, • Consulting and support for the EBV Executive Board or the management of NWKG and the specialist departments, • Maintenance of the processing register, • Initiation and coordination of awareness and training measures for IT security.