Bulgaria – IT services: consulting, software development, Internet and support – „Развитие и въвеждане на Институционална/Корпоративна архитектура на Агенция „Митници“ по отношение на Система за управление на разрешенията върху Cloud архитектура“

The subject of the contract is: „Development and Implementation of Institutional/Corporate Architecture of the Customs Agency in relation to the Permissions Management System on Cloud Architecture“. The subject and scope of the public procurement includes the performance of the following activities: Main Activity 1: „Development of the Institutional/Corporate Architecture of the Customs Agency in relation to the Permissions Management System on Cloud Architecture“; Main Activity 2: „Implementation of the Institutional/Corporate Architecture of the Customs Agency in relation to the Permissions Management System on Cloud Architecture“, through: Comprehensive development of the Permissions Management System with the implementation of business processes and functional and non-functional requirements in relation to the module, as well as the development and implementation of functionalities in the module, identified as a result of emerging business needs; Integration of the Permissions Management System with external Customs Agency systems and with internal Customs Agency systems/modules/services, SUID; The implementation of the Permissions Management System should not work with applets and should work with full functionality with at least two of the supported modern browsers. Main Activity 3: „Training of 30 Customs Agency staff (25 users and 5 administrators) to work with the implemented functionalities under the activity“. The subject of the contract is classified at the level of „Confidential“, in accordance with Article 28, Paragraph 2, Item 3 of the Law on the Protection of Classified Information (LPCL) and in connection with Item 14, Section II of Appendix No. 1 to Article 25 of the LPCL, its execution is related to access to classified information. In the process of performing the activities included in the subject of the contract, at the end of the main activity „Implementation of Institutional/Corporate Architecture of the Customs Agency in relation to the Permissions Management System on Cloud Architecture“, the contractor will prepare and submit a document „System Security Design“. In the document, the contractor will describe the measures envisaged in the software that ensure security, the tests carried out during development and the actions taken to eliminate entire classes of vulnerabilities and other elements. It will clarify the chosen solutions in a clear and understandable language to prevent the risks of malicious cyber intrusions. Disclosure of these details will provide an overview of the organizational-technical and programmatic protection of the Customs Agency's information systems and will pose a risk to ensuring adequate protection of information in information systems in terms of confidentiality, integrity and availability, which would threaten the economic and defense interests of the country. Access to this information constitutes access to classified information at the level of „Confidential“. Based on the above, the contract should be implemented in accordance with Article 20, Paragraph 1, Item 4, Subparagraph „d“ of the Public Procurement Act (PPA) through a restricted procedure in accordance with Article 161 of the PPA, in connection with Section Four „Special Rules for Public Procurement in the Areas of Defense and Security“, Article 148, Paragraph 1, Item 3 of the PPA, Article 96, Paragraph 1 of the LPCL, Article 167 of the Rules for the Application of the LPCL (RAPCL) and the Ordinance on General Requirements for Ensuring Industrial Security (OGRIS). The software, which is the subject of the contract, does not constitute or contain classified information. The contract itself does not contain classified information and is unclassified.