Framework agreement Quality audits and support services in the area of corporate security

Messe Berlin GmbH, hereinafter also referred to as Messe Berlin and client (AG), is tendering the following service: Framework agreement Quality audits and support services in the area of corporate security

The subject of this award is the execution of quality, process, and compliance audits in connection with the use of security and order services, the development and documentation of security-relevant processes, and the creation and implementation of security concepts for the physical security of Messe Berlin. The aim is to ensure the effectiveness, regulatory compliance, and continuous development of the security organization. The services include the review of existing security measures and processes, the creation of governance documents, and the development of risk-based security concepts to ensure an appropriate level of protection for people, assets, and operational processes. This includes, in particular: 1. Execution of quality, process, and compliance audits Audit content: Compliance with the security concept: Review of the actual deployment of the security service provider in accordance with the specified security and zone concept. Qualification of personnel: Ensuring that the security service provider exclusively uses registered and Messe-approved security and order service staff with the required qualifications. Efficiency and effectiveness: Assessment of the efficiency and effectiveness of the security service provider. Compliance requirements: Verification of compliance with defined processes, guidelines, and contractual requirements in connection with service provision. 2. Development of processes and creation of governance documents Service content: Analysis, development, and optimization of security-relevant processes using BPMN 2.0 standard notation. Documentation of target processes, including roles, responsibilities, interfaces, and approval workflows. Creation and updating of governance documents, guidelines, and procedural instructions in the area of physical security. Development of regulations for controlling access and entry authorizations as well as other security-relevant authorization processes. Ensuring traceable, audit-proof, and organization-wide consistent process documentation. 3. Creation and implementation of security concepts Service content: Execution of structured and reproducible risk assessments to identify, analyze, and evaluate threats to people, assets, and operational processes. Creation, updating, and ongoing development of site-, object-, or event-related security concepts. Derivation of suitable organizational, personnel, and technical protective measures based on identified risks. Evaluation of existing security measures regarding their effectiveness and identification of potential improvements. Support in the implementation of recommended measures as well as documentation of results and recommendations for action. Given the anticipated increases or decreases in requirements and potential future functional expansions, the services must be adapted or aligned with current and potential new circumstances. Further requirements may be added or removed during the contract term.