France – Systems consultancy services – Marché cadre PRECY - Prestations Cybersécurité

Detailed description of the different lots: The present contract concerns the provision of cybersecurity services for the benefit of the teams responsible for the security of RTE's information systems, within the Information Systems and Telecommunications Directorate (DSIT). As part of its information system security policy, RTE implements a deep defense, adapted to the business challenges of the various information systems, so that the information system is not a vector of security vulnerabilities that, if exploited, could lead to risks to RTE's electrical system (disclosure of sensitive information, compromise of network control bodies, etc.). In this context, particular attention is paid to the choice of partners involved in the security of RTE's information systems, in order to ensure their expertise, reliability and commitment to protecting the information system. The contract is planned for a duration of eight (8) years, including three (3) firm years and five (5) optional periods of twelve (12) months each. It will be divided into four (4) lots, including:

- Lot A – Expertise and MCO

This lot covers the implementation of recurring activities and expertise essential to the security of the information system. Examples of activities: ticket processing, technical support, on-site interventions, handling of operations. This lot also includes the mobilization of specialized or rare technical expertise, for services such as design, integration or Level 3 support on specific security solutions, pentesting, reverse engineering, the production of CERT analyses, or the implementation of PDIS expertise. The flexibility of the contract will thus make it possible to respond to very specific needs expressed from time to time by the operations or engineering teams.

- Lot B – Engineering Projects and Studies

This lot targets the provision of services within the framework of projects and studies conducted by RTE's DSIT or in support of external teams. Examples of activities: management of cybersecurity-related projects, production of deliverables expected by client projects, technical studies, interventions in the form of lump sums including specific milestones and deliverables.

- Lot C – Governance

This lot concerns the development, updating and formalization of security policies, in close liaison with the RSSI team. Examples of activities: drafting of security reference frameworks, policies and procedures, support for regulatory compliance, monitoring of policy implementation.

- Lot D – Intermediation Platforms

This lot aims to meet specific needs for cybersecurity expertise through the use of independent profiles on punctual or highly specialized missions. The scope of this lot, strictly limited to cybersecurity activities, is deliberately broad in order to allow access to rare or specialized skills, often not strictly defined in advance.

The main challenges of the contract to be respected are:

- Security and resilience of the electrical system;

- Regulatory compliance;

- Flexibility and agility in meeting needs;

- Commitment in terms of social and environmental responsibility (CSR).