<?xml version="1.0" encoding="UTF-8" standalone="no"?><ContractNotice xmlns="urn:oasis:names:specification:ubl:schema:xsd:ContractNotice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" xmlns:efac="http://data.europa.eu/p27/eforms-ubl-extension-aggregate-components/1" xmlns:efbc="http://data.europa.eu/p27/eforms-ubl-extension-basic-components/1" xmlns:efext="http://data.europa.eu/p27/eforms-ubl-extensions/1" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2"><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efac:NoticeSubType><cbc:SubTypeCode listName="notice-subtype">16</cbc:SubTypeCode></efac:NoticeSubType><efac:Organizations><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0000</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">Landkreis Harz - Fachdienst zentrale Vergabestelle</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:CityName>Halberstadt</cbc:CityName><cbc:PostalZone>38820</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts-lvl3">DEE09</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>000-1</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Telephone>0394159704253</cbc:Telephone><cbc:ElectronicMail>vergabestelle@kreis-hz.de</cbc:ElectronicMail></cac:Contact></efac:Company></efac:Organization><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">Landesverwaltungsamt Sachsen- Anhalt</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:CityName>Halle (Saale)</cbc:CityName><cbc:PostalZone>06112</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts-lvl3">DEE02</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>000-2</cbc:CompanyID></cac:PartyLegalEntity></efac:Company></efac:Organization><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0002</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">Datenservice Öffentlicher Einkauf (in Verantwortung des Beschaffungsamts des BMI)</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:CityName>Bonn</cbc:CityName><cbc:PostalZone>53119</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DEA22</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID schemeID="002">0204:994-DOEVD-83</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Telephone>+49228996100</cbc:Telephone><cbc:ElectronicMail>noreply.esender_hub@bescha.bund.de</cbc:ElectronicMail></cac:Contact></efac:Company></efac:Organization></efac:Organizations><efac:Publication><efbc:NoticePublicationID schemeName="ojs-notice-id">00133510-2026</efbc:NoticePublicationID><efbc:GazetteID schemeName="ojs-id">39/2026</efbc:GazetteID><efbc:PublicationDate>2026-02-25+01:00</efbc:PublicationDate></efac:Publication></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:UBLVersionID>2.3</cbc:UBLVersionID><cbc:CustomizationID>eforms-sdk-1.13</cbc:CustomizationID><cbc:ProfileID>eforms-sdk-1.13</cbc:ProfileID><cbc:ID schemeName="notice-id">0b68be3f-62cc-456d-838e-1dc2bcaa3d15</cbc:ID><cbc:ContractFolderID>b03ac07d-72db-49b8-9f73-a8b1e0a6c498</cbc:ContractFolderID><cbc:IssueDate>2026-02-24+01:00</cbc:IssueDate><cbc:IssueTime>14:05:53+01:00</cbc:IssueTime><cbc:VersionID>02</cbc:VersionID><cbc:RequestedPublicationDate>2026-02-25+01:00</cbc:RequestedPublicationDate><cbc:RegulatoryDomain>32014L0024</cbc:RegulatoryDomain><cbc:NoticeTypeCode listName="competition">cn-standard</cbc:NoticeTypeCode><cbc:NoticeLanguageCode listName="eu-official-language">DEU</cbc:NoticeLanguageCode><cac:ContractingParty><cac:ContractingPartyType><cbc:PartyTypeCode listName="buyer-legal-type">la</cbc:PartyTypeCode></cac:ContractingPartyType><cac:ContractingActivity><cbc:ActivityTypeCode listName="authority-activity">gen-pub</cbc:ActivityTypeCode></cac:ContractingActivity><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0000</cbc:ID></cac:PartyIdentification><cac:ServiceProviderParty><cbc:ServiceTypeCode listName="organisation-role">ted-esen</cbc:ServiceTypeCode><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0002</cbc:ID></cac:PartyIdentification></cac:Party></cac:ServiceProviderParty></cac:Party></cac:ContractingParty><cac:TenderingTerms><cac:ProcurementLegislationDocumentReference><cbc:ID>vgv</cbc:ID></cac:ProcurementLegislationDocumentReference><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-mis-partic-confl</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Ausschluss mittels Interessenskonflikterklärung</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-crim-part</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">§ 129 des Strafgesetzbuchs (StGB)</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-crim-terror</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">§129 des Strafgesetzbuchs (StGB) oder § 129b StGB (Kriminelle und terroristische Vereinigungen im Ausland)</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-crim-fraud</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">§ 263 StGB (Betrug), soweit sich die Straftat
gegen den Haushalt der Europäischen
Union oder gegen Haushalte richtet, die von der Europäischen Union oder in
ihrem Auftrag verwaltet werden
§ 264 StGB (Subventionsbetrug), soweit sich die Straftat gegen den Haushalt der
Europäischen Union oder gegen Haushalte richtet, die von der Europäischen
Union oder in ihrem Auftrag verwaltet werden.</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-sitn-liq-admin</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Mit Insolvenz vergleichbares Verfahren zu
wettbewerbsbeschränkenden Absprachen führt ebenso zum Ausschluss.</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-pmt-bre-ssc</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Das Unternehmen darf keine Verfehlungen gemäß § 123 GWB haben. Ggf. Nachweis durch Eigenerklärung.</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-pmt-bre-tax</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Das Unternehmen darf keine Verfehlungen gemäß § 123 GWB haben. Ggf. Nachweis
durch Eigenerklärung.</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-mis-misrepresent</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Das Unternehmen darf keine Verfehlungen gemäß § 124 GWB haben. Ggf. Nachweis
durch Eigenerklärung.</cbc:Description></cac:SpecificTendererRequirement><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-ground">exg-mis-misconduct</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Das Unternehmen darf keine Verfehlungen gemäß § 124 GWB haben. Ggf. Nachweis durch Eigenerklärung.</cbc:Description></cac:SpecificTendererRequirement></cac:TendererQualificationRequest><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-grounds-source">epo-notice</cbc:TendererRequirementTypeCode></cac:SpecificTendererRequirement></cac:TendererQualificationRequest></cac:TenderingTerms><cac:TenderingProcess><cbc:ProcedureCode listName="procurement-procedure-type">open</cbc:ProcedureCode><cac:ProcessJustification><cbc:ProcessReasonCode listName="accelerated-procedure">false</cbc:ProcessReasonCode></cac:ProcessJustification></cac:TenderingProcess><cac:ProcurementProject><cbc:ID schemeName="InternalID">EU LÖ 025/26</cbc:ID><cbc:Name languageID="DEU">Durchführung eines IT- Sicherheits- und Penetrationstests</cbc:Name><cbc:Description languageID="DEU">Penetrationstest im Rahmen des ÖGD-Projekts</cbc:Description><cbc:ProcurementTypeCode listName="contract-nature">services</cbc:ProcurementTypeCode><cac:MainCommodityClassification><cbc:ItemClassificationCode listName="cpv">72800000</cbc:ItemClassificationCode></cac:MainCommodityClassification><cac:AdditionalCommodityClassification><cbc:ItemClassificationCode listName="cpv">72000000</cbc:ItemClassificationCode></cac:AdditionalCommodityClassification><cac:RealizedLocation><cbc:Description languageID="DEU">Landkreis Harz- Gesundheitsamt</cbc:Description><cac:Address><cbc:CountrySubentityCode listName="nuts-lvl3">DEE09</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:Address></cac:RealizedLocation></cac:ProcurementProject><cac:ProcurementProjectLot><cbc:ID schemeName="Lot">LOT-0000</cbc:ID><cac:TenderingTerms><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efac:SelectionCriteria><cbc:TendererRequirementTypeCode listName="selection-criterion">slc-stand-to-gen</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Eigenerklärung zur Eignung</cbc:Description></efac:SelectionCriteria><efac:SelectionCriteria><cbc:TendererRequirementTypeCode listName="selection-criterion">slc-stand-other</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Eigenerklärung zur Eignung</cbc:Description></efac:SelectionCriteria><efac:StrategicProcurement><efbc:ApplicableLegalBasis listName="cvd-scope">false</efbc:ApplicableLegalBasis></efac:StrategicProcurement></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:VariantConstraintCode listName="permission">not-allowed</cbc:VariantConstraintCode><cbc:FundingProgramCode listName="eu-funded">eu-funds</cbc:FundingProgramCode><cbc:RequiredCurriculaCode listName="requirement-stage">t-requ</cbc:RequiredCurriculaCode><cbc:MultipleTendersCode listName="permission">not-allowed</cbc:MultipleTendersCode><cac:CallForTendersDocumentReference><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efac:OfficialLanguages><cac:Language><cbc:ID>DEU</cbc:ID></cac:Language></efac:OfficialLanguages></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:ID>840514-1</cbc:ID><cbc:DocumentType>non-restricted-document</cbc:DocumentType><cac:Attachment><cac:ExternalReference><cbc:URI>https://www.evergabe-online.de/tenderdocuments.html?id=840514</cbc:URI></cac:ExternalReference></cac:Attachment></cac:CallForTendersDocumentReference><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="selection-criteria-source">epo-notice</cbc:TendererRequirementTypeCode></cac:SpecificTendererRequirement></cac:TendererQualificationRequest><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="reserved-procurement">none</cbc:TendererRequirementTypeCode></cac:SpecificTendererRequirement></cac:TendererQualificationRequest><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="missing-info-submission">late-some</cbc:TendererRequirementTypeCode><cbc:Description languageID="DEU">Fehlende Preisangaben werden nicht nachgefordert.</cbc:Description></cac:SpecificTendererRequirement></cac:TendererQualificationRequest><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="conditions">performance</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="ecatalog-submission">not-allowed</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="einvoicing">required</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="reserved-execution">no</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:AwardingTerms><cac:AwardingCriterion><cbc:Description languageID="DEU">Preis = 100%</cbc:Description><cbc:CalculationExpression languageID="DEU">Alleiniges Zuschlagskriterium = Preis</cbc:CalculationExpression></cac:AwardingCriterion></cac:AwardingTerms><cac:TenderRecipientParty><cbc:EndpointID>https://www.evergabe-online.de/tenderdetails.html?id=840514</cbc:EndpointID><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0000</cbc:ID></cac:PartyIdentification></cac:TenderRecipientParty><cac:TenderEvaluationParty><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0000</cbc:ID></cac:PartyIdentification></cac:TenderEvaluationParty><cac:TenderValidityPeriod><cbc:DurationMeasure unitCode="WEEK">6</cbc:DurationMeasure></cac:TenderValidityPeriod><cac:AppealTerms><cac:PresentationPeriod><cbc:Description languageID="DEU">Genaue Angaben zu den Fristen für
die Einlegung von Rechtsbehelfen:
Innerhalb von 15 Kalendertagen nach Eingang der Mitteilung des
Auftraggebers, einer Rüge nicht abhelfen zu wollen, kann ein
Nachprüfverfahren bei der Vergabekammer beantragt werden (§ 160 Abs. 3
Nr. 4 GWB). Die Fristen des § 160 Abs. 3 Punkt 1-4 gem. GWB IV sind zu
beachten. Danach ist ein Nachprüfverfahren unzulässig, soweit: 1) der
Antragsteller den geltend gemachten Verstoß gegen Vergabevorschriften vor
Einreichen des Nachprüfungsantragen erkannt und gegenüber dem
Auftraggeber nicht innerhalb einer Frist von 10 Kalendertagen gerügt hat; der
Ablauf der Frist nach § 134 Abs. 2 bleibt unberührt; 2) Verstöße gegen
Vergabevorschriften, die aufgrund der Bekanntmachung erkennbar sind, nicht
spätestens bis zum Ablauf der in der Bekanntmachung benannten Frist zur
Bewerbung oder zur Angebotsabgabe gegenüber dem Auftraggeber gerügt
werden; 3) Verstöße gegen Vergabevorschriften, die erst in den
Vergabeunterlagen erkennbar sind, nicht spätestens bis zum Ablauf der Frist
zur Bewerbung oder zur Angebotsabgabe gegenüber dem Auftraggeber gerügt
werden; 4) mehr als 15 Kalendertage nach Eingang der Mitteilung des
Auftraggebers, einer Rüge nicht abhelfen zu wollen, vergangen sind.</cbc:Description></cac:PresentationPeriod><cac:AppealReceiverParty><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification></cac:AppealReceiverParty></cac:AppealTerms><cac:Language><cbc:ID>DEU</cbc:ID></cac:Language><cac:PostAwardProcess><cbc:ElectronicOrderUsageIndicator>true</cbc:ElectronicOrderUsageIndicator><cbc:ElectronicPaymentUsageIndicator>true</cbc:ElectronicPaymentUsageIndicator></cac:PostAwardProcess></cac:TenderingTerms><cac:TenderingProcess><cbc:SubmissionMethodCode listName="esubmission">required</cbc:SubmissionMethodCode><cbc:GovernmentAgreementConstraintIndicator>true</cbc:GovernmentAgreementConstraintIndicator><cac:TenderSubmissionDeadlinePeriod><cbc:EndDate>2026-03-30+02:00</cbc:EndDate><cbc:EndTime>09:30:00+02:00</cbc:EndTime></cac:TenderSubmissionDeadlinePeriod><cac:AuctionTerms><cbc:AuctionConstraintIndicator>false</cbc:AuctionConstraintIndicator></cac:AuctionTerms><cac:FrameworkAgreement><cac:SubsequentProcessTenderRequirement><cbc:Name>buyer-categories</cbc:Name></cac:SubsequentProcessTenderRequirement></cac:FrameworkAgreement><cac:ContractingSystem><cbc:ContractingSystemTypeCode listName="dps-usage">none</cbc:ContractingSystemTypeCode></cac:ContractingSystem><cac:ContractingSystem><cbc:ContractingSystemTypeCode listName="framework-agreement">none</cbc:ContractingSystemTypeCode></cac:ContractingSystem></cac:TenderingProcess><cac:ProcurementProject><cbc:ID schemeName="InternalID">EU LÖ 025/26</cbc:ID><cbc:Name languageID="DEU">Durchführung eines IT- Sicherheits- und Penetrationstests</cbc:Name><cbc:Description languageID="DEU">Zur Identifikation, Analyse und Minimierung von Sicherheitsrisiken soll ein Penetrationstest in Form eines „Grey box“- Tests durchgeführt werden.
Die ausgeschriebene Leistung beinhaltet die folgenden Arbeitspakete:
1. Penetrationstest
2. Schwachstellenscan
3. Social-Engineering-Tests</cbc:Description><cbc:ProcurementTypeCode listName="contract-nature">services</cbc:ProcurementTypeCode><cbc:SMESuitableIndicator>false</cbc:SMESuitableIndicator><cac:ProcurementAdditionalType><cbc:ProcurementTypeCode listName="strategic-procurement">none</cbc:ProcurementTypeCode></cac:ProcurementAdditionalType><cac:MainCommodityClassification><cbc:ItemClassificationCode listName="cpv">72800000</cbc:ItemClassificationCode></cac:MainCommodityClassification><cac:AdditionalCommodityClassification><cbc:ItemClassificationCode listName="cpv">72000000</cbc:ItemClassificationCode></cac:AdditionalCommodityClassification><cac:RealizedLocation><cbc:Description languageID="DEU">Landkreis Harz - Gesundheitsamt</cbc:Description><cac:Address><cbc:CountrySubentityCode listName="nuts-lvl3">DEE09</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:Address></cac:RealizedLocation><cac:PlannedPeriod><cbc:StartDate>2026-05-11+02:00</cbc:StartDate><cbc:EndDate>2026-07-31+02:00</cbc:EndDate></cac:PlannedPeriod></cac:ProcurementProject></cac:ProcurementProjectLot></ContractNotice>