Bulgaria – IT services: consulting, software development, Internet and support – „Развитие и въвеждане на институционална архитектура на Агенция „Митници“ по отношение Националната среда за митническо обслужване на едно гише – обмен на сертификати, във връзка с преминаване към версия 6 на EU CSW-CERTEX, и на декларативните системи (МИСВ, МАСИ) върху Cloud архитектура“

The subject and scope of the public procurement contract includes the performance of the following activities:

Main Activity 1: "Development of the institutional architecture of the Customs Agency in relation to the national customs service environment for one stop shop – certificate exchange, in connection with the transition to version 6 of EU CSW-CERTEX, and of the declarative systems (MISV, MASI) on Cloud architecture", in accordance with the ADM (Architecture Development Method) methodology; Main Activity 2: "Implementation of the institutional architecture of the Customs Agency in relation to the national customs service environment for one stop shop – certificate exchange, in connection with the transition to version 6 of EU CSW-CERTEX, and of the declarative systems (MISV, MASI) on Cloud architecture". This activity includes the performance of the following activities: - Upgrading, if necessary, the declarative systems reflecting the union functional requirements arising from the Customs Service One Stop Shop (CSW) project, in connection with the transition to version 6 of EU CSW-CERTEX; - Upgrading, if necessary, the existing integration of the declarative systems with EU CSW-CERTEX (exchange of messages via EU CSW-CERTEX of the Directorate-General "Taxation and Customs Union" (DG TAXUD); - Upgrading, if necessary, the existing integration of the declarative systems with the national application for interconnection with national competent authorities. Main Activity 3: "Training of 20 Customs Agency staff (16 users and 4 administrators) to work with the implemented functionalities under the activities".

The subject of the contract is classified at the level of "Confidential", in accordance with Article 28, paragraph 2, item 3 of the Law on the Protection of Classified Information (LPCL), and in connection with item 14, Section II of Appendix No. 1 to Article 25 of the LPCL, its execution is related to access to classified information. In the process of performing the activities included in the subject of the contract, at the end of the main activity "Implementation of the institutional architecture of the Customs Agency in relation to the national customs service environment for one stop shop – certificate exchange, in connection with the transition to version 6 of EU CSW-CERTEX, and of the declarative systems (MISV, MASI) on Cloud architecture", the contractor will prepare and submit a document "System Security Design" as part of the project reporting documentation. In the document, the contractor will describe the security measures envisaged in the software, which ensure security, the tests carried out during the development and the actions taken to eliminate entire classes of vulnerabilities and other elements. It will explain the chosen solutions in a clear and understandable language to prevent the risks of malicious cyber intrusions. The disclosure of these details in their entirety will give an idea of the organizational, technical and programmatic protection of the information systems of the Customs Agency and will pose a risk to ensuring adequate protection of information in information systems in terms of confidentiality, integrity and availability, which would threaten the economic and defense interests of the country. Access to this information constitutes access to classified information at the level of "Confidential".

Based on the above, the contract should be implemented in accordance with Article 20, paragraph 1, item 4, letter "d" of the Public Procurement Act (PPA), through a restricted procedure in accordance with Article 161 of the PPA, in connection with Section Four "Special rules for the award of public contracts in the areas of defense and security", Article 148, paragraph 1, item 3 of the PPA, Article 96, paragraph 1 of the LPCL, Article 167 of the Regulation on the Application of the LPCL (RALPCI) and the Ordinance on General Requirements for Ensuring Industrial Security (ORGIS). The software, which is the subject of the contract, does not constitute or contain classified information. The contract itself does not contain classified information and is unclassified.