Germany – IT services: consulting, software development, Internet and support – Evergreenmanagement, Compliance-Analyse und Sicherheitsüberprüfung der bestehenden M365 Plattform

With the present tender, the Berufsgenossenschaft Verkehrswirtschaft Post-Logistik Telekommunikation aims to conclude a framework agreement for the procurement of services related to M365. Selected Berufsgenossenschaften provide IT services jointly or procure services specifically through one entity and subsequently invoice the service internally. This model will also be applied to the present tender. BG Verkehr, as the contracting partner, will manage the contract for a total of three parties. The following Berufsgenossenschaften will be audited under the contract to be concluded with BG Verkehr: - BG Verkehr - BG ETEM - BGHW The aforementioned Berufsgenossenschaften are authorized to call on the framework agreement being tendered. The aim is, on the one hand, to continuously, structurally evaluate relevant changes in Microsoft 365 and to clearly classify their impact on configuration, security, compliance/data protection, operation and user acceptance in the context of the special role of accident insurance carriers. It must be taken into account that further SaaS services from Microsoft 365 may be introduced in the future and that an evergreen approach with forward-looking evaluation, prioritization and concrete recommendations for action per contract is therefore necessary. Furthermore, it must be taken into account that new functions or changes to already introduced functions may be subject to co-determination by the works council. Corresponding evaluations and recommendations for action must also be provided for this. On the other hand, a conformity check of the tenants with regard to data protection and compliance is to be carried out at larger intervals (annually). An approximation or alignment of the tenants to a common standard over the term of the contracts is desirable but cannot be guaranteed to the contractor to simplify his tasks. For the Berufsgenossenschaften as carriers of the statutory accident insurance, in addition to the DSGVO, further regulatory requirements apply, which result, for example, from the tenth book of the Social Code (SGB X). Ensuring a permanent adequate level of protection is an essential goal, in addition to internal data, sensitive personal data of insured persons is processed. Further details can be found in the tender documents.