17https://www.tscnet.eu/ORG-0001TSCNET Services GmbHWeihenstephaner Strasse 9Muenchen81673DE212DEU14499+49 8945554101procurement@tscnet.euORG-0002Vergabekammer SuedbayernMaximilianstrassee 39Muenchen80534DE212DEU6503d0fc-ae28-41be-9d3d-5b9e45d02fde+49 8921762411vergabekammer.suedbayern@reg-ob.bayern.deORG-0003Datenservice Öffentlicher Einkauf (in Verantwortung des Beschaffungsamts des BMI)Bonn53119DEA22DEU0204:994-DOEVD-83+49228996100noreply.esender_hub@bescha.bund.de00421759-2025122/20252025-06-30+02:002.3eforms-sdk-1.12e62d0d58-1cb0-410a-a70c-df4d9d1f9be2e62d0d58-1cb0-410a-a70c-df4d9d1f9be22025-06-27+02:0014:43:00+02:00012025-06-30+02:0032014L0025cn-standardDEUhttps://www.deutsche-evergabe.deelectricityORG-0001ted-esenORG-0003sektvoepo-noticeexg-crim-corrptexg-crim-fraudexg-crim-laundexg-crim-traffickexg-crim-partexg-crim-terrorexg-mis-bre-env-lawexg-mis-bre-lab-lawexg-mis-bre-soc-lawexg-mis-distortionexg-mis-misconductexg-mis-misrepresentexg-mis-partic-conflexg-mis-prep-conflexg-mis-sanctionexg-natl-bre-nat-lawexg-pmt-bre-sscexg-pmt-bre-taxexg-sitn-as-suspexg-sitn-insolvencyexg-sitn-liq-adminexg-sitn-otherneg-w-callfalsen.def.Managed Security Service Provider (MSSP)TSCNET Services GmbH located in Munich, Germany, is an ISO 27001:2022 certified organization providing services 24 hours a day, 7 days a week, 365 days a year, to customers operating critical infrastructure connected to the Central and Eastern European power grid. As part of TSCNET's risk mitigation strategy and it's adherence to legal, regulatory and contractual obligations, TSCNET wishes to contract a specialist third-party to ensure round the clock security monitoring, alert analysis and incident handling for up to 500 IT assets (based on the equivalent amount of IP addresses) distributed across hosted, mobile, on-premise and cloud instances. The third-party needs to be a Managed Security Services Provider (MSSP) with not only best of breed expertise, but excellent service delivery and multiple years' experience in the European energy sector.services72222300DE212DEULOT-0001slc-suit-reg-tradeCurrent entry in the professional or commercial register of the country of origin or presentation of a corresponding certificate.falseslc-abil-ref-servicesReferences to services comparable to the advertised service. The following information must be provided for each reference: • Client • Date of contract award • Order and final invoice value • Representation of project size and volume • Main service contents • Start and end of services • Number of applicant's employees working on the project • Naming of the responsible persons on the applicant’s side and on the reference client’s side • Providing the contact details of the reference client The applicant must use the form "TSCNET_Reference list_MSSP.docx".falseslc-abil-mgmt-qualConfirmation by the applicant through self-declaration that the applicant is able a) to carry out the contract execution in English, including all documents and correspondence; b) to provide project managers who speak fluent English (at least B2 or equivalent) in sufficient numbers to process the order; c) on-site work managers who speak fluent English (at least B2 or equivalent); d) to monitor and manage up to 500 IT assets across various environments (cloud, on-premise, mobile, hosted). falseslc-abil-qual-instTo meet the requirements of this Section III.1.4 in the EU notice, bidders must demonstrate ISO/IEC 27001:2022 certification, experience with 24/7 managed security services for critical infrastructure, and compliance with GDPR, NIS2, and the EU AI Act. They must also ensure data residency within the EU/EFTA, provide English-speaking personnel, and operate SIEM, SOAR, EDR, and CTI systems. Additional expectations include qualified staff with relevant certifications, acceptance of audit rights, and adherence to defined service levels. These criteria are detailed in the contract documents.falseslc-abil-staff-yrly-avg-mpInformation on the average number of employees employed in the last three completed financial years, broken down by trades/fields of activity, and certifications (e.g., CISSP, CISM, CEH, GIAC) of key personnel responsible for service delivery.falseslc-stand-otherSubmission of a current credit report.falseslc-stand-otherProof of commercial liability insurance (insured event: damage event), including product liability, covering the contractor's statutory liability for personal injury and/or property damage and environmental damage to third parties with an insured sum of at least EUR 1,5 million per insured event and twice per insurance year. falseslc-stand-otherThe tenderer must demonstrate financial capacity, inter alia, by showing that his average annual turnover for the last three completed financial years is at least twice the contract value of the subject matter of this contract notice.falseslc-abil-staff-qualThe contractor must provide documentation of qualifications and certifications for key personnel, including project managers and security specialists.falseslc-stand-otherThis questionnaire is part of the integrity check and must be completed by tenderers who are to provide services for TSCNET as part of a self-disclosure procedure. The applicant must use the form "External_BP_Screening_Questionnaire.docx".falseslc-stand-otherConfirmation by the applicant to accept the TSCNET Principles of Conduct, see document "TSCNET_Principles_of_Conduct.pdf".falsefalsenot-allowedno-eu-fundsnot-requfalsenot-allowedfalseENGe62d0d58-1cb0-410a-a70c-df4d9d1f9be2non-restricted-documenthttp://www.deutsche-evergabe.de/dashboards/dashboard_off/e62d0d58-1cb0-410a-a70c-df4d9d1f9be2Invoices are due for payment within 30 days of receipt.truein den Vergabeunterlagen aufgeführtlate-allBitte beachten: Um einen eventuellen Ausschluss des Angebotes zu vermeiden, legen Sie bitte die geforderten Nachweise und Erklärungen dem Angebot unbedingt vollständig bei.epo-noticeperformanceBedingungen für die Ausführung des Auftrags und ggfs. Verweis auf die einschlägige Rechts- oder Verwaltungsvorschrift siehe Vergabeunterlagennorequirednot-allowedfalseDer Preis ist nicht das einzige Zuschlagskriterium; alle Kriterien sind in den Vergabeunterlagen aufgeführtORG-0001http://www.deutsche-evergabe.de/dashboards/dashboard_off/e62d0d58-1cb0-410a-a70c-df4d9d1f9be2ORG-0001(1) Any violations of procurement regulations must be reported by the applicant/bidder within 10 days of becoming aware of them, in accordance with Section 160 (3) No. 1 GWB. (2) Violations of procurement regulations that are apparent from the announcement must be reported to the contracting authority in accordance with Section 160 (3) No. 2 GWB no later than the deadline for submitting applications or bids specified in the announcement. (3) Violations of procurement regulations that are only apparent in the procurement documents must be reported to the contracting authority in accordance with Section 160 (3) No. 3 GWB no later than the expiry of the deadline for submitting applications or bids. (4) An application for review of the award must be submitted to the Public Procurement Tribunal within 15 calendar days of the contracting authority's notification that it does not intend to remedy a complaint, in accordance with Section 160 (3) No. 4 GWB.ORG-0002ENGtruefalserequiredtruefalse2025-08-18+02:002025-07-30+02:0012:00:00+02:00falsenonenone0001Managed Security Service Provider (MSSP)Nature and quantity of services: Continuous (24/7/365) cybersecurity monitoring, alert analysis, and incident response for up to 500 IT assets. Indication of needs and requirements: The MSSP must have proven experience in the European energy sector and deliver high-quality, reliable service. Tenders are not requested for purchase, lease, rental, hire purchase, or any combination thereof, as this is a service contract.servicesfalsenone72222300DE212DEU2025-12-01+01:002029-11-30+01:002Maximum 2 times for 1 year each.