Belgium – Computer-related services – Identity and Access Management IAM

In the context of the continuous strengthening of its cybersecurity strategy, the SNCB is launching a services contract relating to Identity & Access Management (IAM). This contract aims to ensure integrated, reliable and scalable management of identities, accesses and privileges within the organisation, while ensuring regulatory compliance and protection of its digital ecosystem. The initiative covers six essential sub-domains, pillars of a modern and coherent IAM architecture: • Identity Management Service, ensuring governance and administration of identities as well as role management; • Directory Service, acting as a centralised repository for accounts, groups, devices and identification information; • Access Management Service, responsible for authentication, authorisation and real-time access control to resources, including SSO mechanisms; • Privileged Access Management Service, ensuring the monitoring and securing of privileged access to critical resources; • Certificate Management Service, covering the complete lifecycle management of X.509 certificates for PKI services; • Secret Management Service, dedicated to the protection, storage, rotation and audit of sensitive secrets such as passwords, tokens or private keys; - Through this contract, the SNCB wishes to rely on a partner capable of guaranteeing a high level of service quality, based on operational rigour, reliability and reactivity. The objective is to build a collaboration where technical expertise is accompanied by a continuous improvement approach, allowing the IAM services to be permanently adapted to technological, regulatory and organisational developments. - This contract is also part of a multi-vendor ecosystem, where smooth integration, effective coordination and interoperability of services are essential. The SNCB therefore expects its partners to have a proven ability to operate in a collaborative model and to contribute to a harmonised, robust and sustainable IAM architecture. - The framework agreement will have a fixed duration of eight (8) years. - This Selection Guide contains a brief general description of the nature and scope of the mission as well as the services and supplies provided. The information provided in this section gives only an overview of the key elements of the mission. They are given as an indication and are subject to change during the Award Phase. They are intended to serve as a guideline for the submission of the Participation Request.