Procurement of Microsoft licenses for servers and personal computers

The subject of the procurement includes the supply of Microsoft licenses and the provision of services for managing license compliance and security assessment of the Microsoft environment. In addition to supplying licenses, the Bidder must provide related consulting, analysis, and assessment services of the Contracting Authority's information system to ensure proper licensing, optimize license usage, and enhance the security and transparency of the Microsoft infrastructure. The service includes advising the Contracting Authority to eliminate risks of incorrect licensing of software and software services, continuous information as needed, at least once a year, and education on licensing rules and changes in manufacturer license terms, as well as conducting an annual software and software services license inventory in the Contracting Authority's information system. The license inventory includes scanning, recording, analysis, and optimization of software and license usage, and preparation of reports on the licensing status. In addition to the license inventory, a service for systematic detection of all devices, services, and systems in the Contracting Authority's network environment must be carried out to collect detailed information about assets. The goal is to obtain a complete and accurate picture of the infrastructure, including undocumented devices, systems outside of supervision, shadow IT, and outdated components. The Bidder will then analyze the results, validate the data, and highlight irregularities, risks, and potential security problems associated with the discovered assets. As part of the same service, the Bidder is obliged to conduct a detailed analysis of the Contracting Authority's existing Active Directory environment to detect security vulnerabilities, misconfigurations, and outdated settings. The check includes domain controllers, user and service accounts, GPO settings, protocols, delegations, certification services, and inter-domain relationships. The analysis must include the identification of weak passwords, shadow admin accounts, vulnerable SPNs, outdated objects, insecure scripts, vulnerable protocols (SMBv1, LM/NTLMv1, LLMNR), Kerberos vulnerabilities, and incorrect delegations and DACL/ACE settings. Additionally, PKI system configurations, certificate templates, RODC settings, auditing policies, DNS security, and services installed on domain controllers must be checked. Based on the collected data, an analysis of possible attack paths and risk assessment must be prepared. The final result of the performed service must include a structured report with findings, prioritized recommendations for resolving identified problems, and a presentation of the results. The service must additionally include scanning the IT environment to detect security vulnerabilities and checking whether previously identified problems have been successfully resolved. The Bidder must analyze the scanning results, remove false positive findings, prioritize risks, and provide clear recommendations for remediation.