Provision of Support Services in Relation to the EU Cybersecurity Certification Framework

Item Description:

The European Union Agency for Cybersecurity (ENISA) referred to below as the contracting authority, is planning to award the contract(s) resulting from the above procurement procedure. The procurement documents consist of the contract notice, the invitation letter, the draft contract(s) and tender specifications with their respective annexes. All documents are available in the enclosed ZIP File.

The purpose of this Call for Tenders is to provide support for ENISA’s work on developing material, scenarios and incidents to be used to support ENISA’s activities such as exercises, challenges, trainings and other related activities. The purpose of the material produced can vary depending on the activity it is meant for, for example they can be meant for skills testing, procedure testing, gap analysis, education and training, awareness etc.

By means of this Call for Tenders ENISA seeks to contract the services of a number of competent service providers, which can provide support in the field material development of cybersecurity exercises, challenges, trainings, and other related activities. The successful bidders should be able to demonstrate significant experience and skills in in this field, with emphasis on the aspects dealt with in the annual ENISA Work Programme

ENISA supports the European cybersecurity framework and it has commenced drafting cybersecurity certification schemes in a number of areas.

The tendered services shall cover various aspects that may be required to support ENISA’s activities in the area of drafting cybersecurity certification schemes. Examples include:

• Addressing internal market as well as international aspects concerning market, organisational, technical and legal aspects.
• Analysis of market sectors likely to benefit from cybersecurity certification including e.g.
  • Market requirements to certification schemes from user, service and technology provider’s perspective.
  • Key factors for ensuring market acceptance and non-discriminatory market access.
  • Existing national schemes, their market position and potential areas for improvement.
  • Potential synergies with CSA-conformant certification schemes for other market sectors.
• Market studies on the take up of cybersecurity certification schemes.
• Research and documentation of market aspects of certification.
• Support for the preparation and implementation of sector-specific risk assessments.
• Support for information exchange or alignments with standardization bodies and standards.
• Support for the definition and documentation of the various aspects of certification schemes.
• Support for the evaluation of certification scheme implementation.

Support for the stakeholder-discussion of risk assessments and candidate certification schemes by e.g. surveying requirements, views and opinions of stakeholders including representatives of the public authorities and industry alike

Download all available documents in: [ZIP]