Poland – Computer equipment and supplies – Dostawa i wdrożenie sprzętu i oprogramowania w ramach projektu Cyberbezpieczny Samorząd

The subject of the contract is the supply and implementation of equipment and software as part of the Cyberbezpieczny Samorząd project, including: 1) supply and implementation of a new backup server with system software 2) supply of emergency power supplies for the server room 3) supply and implementation of a redundant NAS device cluster 4) review, analysis and update of the security policy on UTM Fortigate devices owned by the Contracting Authority 5) supply and implementation of Access Point devices 6) supply and implementation of manageable network devices 7) supply and implementation of a NAC system 8) supply and implementation of SIEM software. A detailed description of the subject of the contract is contained in the annex to the SWZ. 2. The Contractor, by submitting an offer, grants the Contracting Authority a 2-year warranty for the subject of the contract, on the terms specified in the Draft Contract Terms, with the reservation that for the backup server, NAS servers, access points AP with controllers and LAN switches type 1, type 2 and type 3, the Contractor may offer a longer warranty period, which will be evaluated within the framework of the offer evaluation criteria. 3. The Contractor, by submitting an offer, may offer a SIEM system with or without an administrative console, as mentioned in point 8 of the Description of the Subject of the Contract, which will be evaluated within the framework of the offer evaluation criteria. 4. The Contracting Authority does not allow the possibility of submitting partial offers. The Contracting Authority has not divided the procedure into parts due to: 1) the need to maintain the integrity of the security system; The subject of the contract includes the supply and implementation of components that do not constitute independent devices from each other, but create a single, coherent and complementary security ecosystem (in accordance with the assumptions of the implemented "Cyberbezpieczny Samorząd" project). Detection and response systems (SIEM) and access control (NAC) must closely cooperate with the network infrastructure (UTM, AP, LAN). In turn, data security (backup server, NAS clusters) depends directly on the stability of the power supply (UPS) and protection against attacks from the internal and external network. Separating these elements would make it impossible to achieve full technological synergy. 2) the risk of dispersing the Contractor's responsibility. Dividing the procedure into parts would likely result in a situation where individual tasks would be carried out by different Contractors. In the event of a failure, vulnerability or compatibility problems at the interface of the systems (e.g. lack of proper transmission of network logs from LAN/UTM devices to the SIEM system), there is a critical risk of so-called "dispersal of responsibility". Contractors could blame each other for the incorrect operation of the system, which would paralyse the fault removal process, extend the response time and expose the Contracting Authority to direct cybersecurity incidents. Choosing one Contractor guarantees a single point of contact (Single Point of Contact – SPOC) and full responsibility for the final implementation effect. 3) the risk of lack of compatibility and interoperability. The implementation of systems of the NAC and SIEM class requires deep integration with LAN switches and Wi-Fi access points. Assigning these tasks to different Contractors carries a high technological risk – a NAC system from one manufacturer may not fully cooperate with network devices supplied by another Contractor as part of a separate part. One Contractor is obligated to select hardware and software in such a way that all elements work together without conflict. 5. If the Contracting Authority in the description of the subject of the contract indicates trademarks, patents or origin, sources or a special process that characterises the products or services supplied by a specific Contractor, equivalent solutions to those described may be offered, provided that they maintain the same minimum technical, quality and functional parameters, etc. 6. The Contractor who refers to equivalent solutions is obliged to prove that the solution offered by it meets the requirements specified by the Contracting Authority. In such a case, the Contractor attaches to the offer a list of equivalent solutions along with its description or standards. 7. In the event that the description of the subject of the contract contains references to standards, technical assessments, technical specifications and technical reference systems, as mentioned in art. 101 para. 1 point 2) and para. 3 of the Public Procurement Law, the Contracting Authority allows equivalent solutions to those described. 8. Main position according to the Common Vocabulary of Public Procurements: 30200000-1 – computer devices 48730000-4 – security software packages 30233000-1 – data processing and reading devices 31154000-0 – uninterruptible power supplies 32420000-3 – network devices 48219100-7 – gateway software packages 72611000-6 – technical support services.