Provision of consultancy services for ICT Security and Business Continuity Management Services

Item Description:

Eurojust is an EU agency for judicial cooperation in criminal matters. We are committed to transparency and informing European citizens of its activities via various communication channels.

Objective of this tender

Eurojust operates in an environment where ICT security is one of the key components of its operations. Due to the nature of Eurojust business the information processed by Eurojust is primarily stored and handled within the ICT systems deployed at Eurojust. The information is also transmitted over different means of communication between the computing environments of Eurojust and its business partners, including EU Member States prosecution authorities, EU institutions and bodies and third countries’ authorities.

Eurojust processes a variety of different types of sensitive information including operational information about on-going case work between different European Member States, administrative information, financial information, personal data, etc. In addition Eurojust also processes EU Classified Information.

Eurojust must comply with several legal frameworks when processing information, including:

• Council Decision 2002/187/JHA of 28 February 2002 setting up Eurojust1
• Eurojust Data Protection Rules 2005/C 68/01 as approved by the Council on 24 February 2005
• Council Decision 2013/488/EU of 23 September 2013 on the security rules for protecting EU classified information

Based on these legal frameworks, Eurojust has adopted several internal rules and policies on how to process information in a secure and compliant manner.

Following the legal requirements and the business need of Eurojust, there is a need to ensure a high level of confidentiality, integrity and availability of the information processed by Eurojust and the ICT systems and equipment used in this processing. This need is met by the combined effort of the Information Management Unit that implements and maintains ICT systems based on security requirements defined by the ICT Security Sector.

Scope (brief description of the services)

The scope of this contract is to provide consultancy services in the areas of ICT Security and Business Continuity Management related to sensitive and classified information.

Download all available documents in: [ZIP]