Supply of software subscription for automated security testing, including implementation and support services for 36 months and training for the Ordering Party's administrators

I. The subject of the order is the supply of a platform for automated security testing, including implementation and support services for a period of 36 months. II. The Contractor is obliged in particular to: 1. supply a software subscription for the delivered solution for a period of 36 months, 2. implement the delivered software preceded by a pre-implementation analysis conducted by the Contractor, which will result in the development of technical implementation documentation. 3. provide technical support services in the amount of 8 service hours per month for a period of 36 months (i.e., a total of 288 service hours) under the terms specified in the Description of the Subject of the Order and in § 5 of the Agreement, 4. ensure the Ordering Party access to technical support offered by the entity that created the application software under the terms specified by that entity. III. As part of the service of providing the automated security verification Platform, the Ordering Party requires three training sessions (once a year at a time proposed by the Ordering Party), a minimum 2-day on-site training (up to 350 km from the ordering party's registered office) for a group of up to 7 people, covering*: • Obtaining knowledge necessary to conduct penetration tests • Acquiring skills in using the tools provided by the Contractor • Introduction to the automated security verification Platform • Discussion of platform configuration and management. • Discussion of the platform's capabilities and types of tests that can be performed. • Detailed discussion of reporting. • Workshops. • Issuance of a Certificate of participation and skill acquisition after the training, indicating the training topic. *the total cost of organizing the training is borne by the Contractor IV. The Contractor will provide Technical Support Services for a period of 36 months from the date of signing the acceptance protocol referred to in § 3 of the IPU without reservations (or until the 288 service hours are used, if they are used before the end of this period), on working days between 7:30 AM and 3:30 PM, in Polish and covering: 1) ongoing support during system operation, 2) quarterly review of the implemented environment, 3) knowledge transfer when solving problems, 4) providing consultations regarding the system, 5) environment updates to new versions, 6) assistance in analyzing security events generated by the system – Reports 7) assistance in handling service requests and assistance in managing them on behalf of the Ordering Party. 5. A detailed description of the subject of the order is attached as Annex No. 1 to the SWZ – Description of the Subject of the Order. 6. Detailed information regarding the performance of the contract is included in the Essential Contractual Provisions, which constitute Annex No. 3 to the SWZ. 7. The Contractor whose offer is deemed the most advantageous will be required to provide a performance bond in the amount and form specified in Chapter XVI of the SWZ before signing the contract. V. COMPLIANCE WITH THE EU CYBERSECURITY ACT. The Ordering Party requires that the subject of the order, including all ICT products, ICT services, and ICT processes (defined in the context of the EU Cybersecurity Act in paragraph 2 of Chapter II of the SWZ) used to fulfill the order, both as main elements, components, elements of the service delivery environment, or accompanying solutions, do not include: a) ICT products, ICT services, or ICT processes listed in the recommendations referred to in art. 33 para. 4 of the Act of July 5, 2018, on the national cybersecurity system (i.e., Journal of Laws of 2026, item 20, as amended), stating their negative impact on the fundamental state security interest b) an ICT product whose type has been determined in a decision recognizing a hardware or software supplier as a high-risk supplier, referred to in art. 67b para. 15 of the Act of July 5, 2018, on the national cybersecurity system...