Information security assessment and consulting services (framework agreement)

The subject of the procurement is information security assessment and consulting services. The objective of the procurement is to ensure and develop the information security and management of the clients' IT environments, as well as compliance with legislative requirements. The subject of the procurement is described in detail in Appendix 1 of the request for proposals. Experienced technical and administrative information security experts are required to perform the services covered by the procurement. The minimum requirements for the named experts, as well as the requirements and scoring criteria for demonstrable experience and expertise, are described in detail in Appendix 2 of the request for proposals. The procurement is carried out as a framework agreement, for which three (3) suppliers meeting the eligibility criteria and the minimum requirements of the procurement subject have been selected in accordance with the conditions described in the request for proposals. The operating model of the framework agreement, i.e., supplier selection, is based on the priority order (ranking) of the winners according to the comparison criteria of the competition. The ranking rules are described in Appendix 1.1 of the request for proposals. The framework agreement period is approximately three (3) years. The procurement includes an option to extend the contract period by a maximum of one (1) year. The National Institute for Health and Welfare (THL) was responsible for the competitive tendering of the framework agreement. THL is responsible for the maintenance of the framework agreements and related contractual cooperation with the contracting suppliers. The clients of the framework agreement are THL and the procurement units under THL that have joined the joint procurement, i.e., the framework agreement. The clients with their estimated procurement volumes are presented in Appendix 1.2 of the request for proposals.