Belgium – Computer-related services – Meerjarige contract voor diensten inzake cybersecurity

The contract is made up of two lots which will be awarded to different suppliers. Lot 1 “Security Governance” Comment: The following services should be considered for this lot: - Consultancy services regarding strategy and policy drafting; - Consultancy services in the context of new projects; - Cybersecurity context, global trends and technological watch. For the activities of Lot 1 (security governance), ASTRID expects a consultant (or a team of consultants, depending on the skills available within the provider organisation) to provide services for a maximum of 110 days per year, spread over the entire year. The activities will be carried out on the basis of an agreed work plan, resulting from the need to develop new security frameworks/policies, review existing policies or deal with specific security-related issues. Lot 2 “Security Audits, Advanced Threat Readiness, Cyber Training and Awareness” Comment: The following services should be considered for this lot: - Security audit: ethical hacking - penetration tests; - Security audit of applications; - Forensics analysis: gathering evidence after an attack; - Staff training and awareness, including the organisation of phishing campaigns. The procedure takes place in successive phases in order to progressively reduce the number of tenders to be negotiated. The contracting authority reserves the right to award the contract on the basis of the initial tenders without conducting negotiations.