Czechia – Servers – Modernizace ICT pro zvýšení úrovně kybernetické bezpečnosti Nemocnice Dačice, a.s. II.

Part 1) - Procurement of server technologies

The subject of this part of the public procurement is the comprehensive supply, professional implementation and subsequent commissioning of a coherent technological solution for the expansion and supplementation of the existing data centre infrastructure, both in terms of physical and technological aspects. Specifically, this involves the installation and integration of physical infrastructure elements, a modern air conditioning system, a backup power supply, a camera system for monitoring and security purposes, fire safety systems, and the construction of an optical connection with a dedicated backup server room, which will ensure high availability and continuity of operation.

Part 2) – Procurement of network technologies

The subject of this part of the public procurement is the supply, implementation and commissioning of a coherent solution for increasing the security of access to the LAN network and modernising the core and access network infrastructure. This includes the replacement of active elements in both the access and core layers, the deployment of a network access control (NAC) system with support for IEEE 802.1X and the supply of central switch management in the form of on-premise or cloud management. Within the access layer, new switches (2 core switches and 7 access switches) will be deployed, which will ensure the secure connection of end devices using IEEE 802.1X-based authentication and authorisation. This part forms the basic communication and authentication layer of the infrastructure and is designed to interface directly with the security, monitoring and logging systems specified in the technical specification - Part 3, with which it must be fully interoperable at the level of access control, security events, logging and automatic response.

Part 3) – Delivery and implementation of security and monitoring software

The subject of this part of the public procurement is the supply, implementation and commissioning of powerful servers to increase the availability of systems, strengthen the computational performance of operations by supplying two powerful rack servers and an enterprise all-flash disk array. The aim is to expand the computational and storage capacity of the hospital infrastructure with a focus on high performance, redundancy, scalability, advanced management and security functions, including support for virtualisation, high availability and data services. Furthermore, the supply, implementation and commissioning of a coherent solution for securing the organisation's perimeter, managing security policies and detecting cyber threats. This includes the deployment of a high-availability firewall cluster, a central system for managing security events and the training of responsible personnel. Lastly, the supply and installation of a system for centralised log collection and the supply and installation of hardware and software equipment that forms a coherent solution for long-term and detailed monitoring and evaluation of network traffic using data flows (NetFlow, IPFIX, sFlow, etc.). The solution specified in this part is designed as a superior security, analytical and control layer, which builds on the network and authentication infrastructure defined in the technical specification - Part 2 and uses it as the primary source of network data, identities, events and telemetry.