<?xml version="1.0" encoding="UTF-8" standalone="no"?><ContractNotice xmlns="urn:oasis:names:specification:ubl:schema:xsd:ContractNotice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" xmlns:efac="http://data.europa.eu/p27/eforms-ubl-extension-aggregate-components/1" xmlns:efbc="http://data.europa.eu/p27/eforms-ubl-extension-basic-components/1" xmlns:efext="http://data.europa.eu/p27/eforms-ubl-extensions/1" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2" xmlns:ns7="urn:oasis:names:specification:ubl:schema:xsd:ContractAwardNotice-2" xmlns:ns9="urn:oasis:names:specification:ubl:schema:xsd:PriorInformationNotice-2"><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efbc:TransmissionDate>2026-07-06+02:00</efbc:TransmissionDate><efbc:TransmissionTime>00:00:00+02:00</efbc:TransmissionTime><efac:NoticeSubType><cbc:SubTypeCode listName="notice-subtype">16</cbc:SubTypeCode></efac:NoticeSubType><efac:Organizations><efac:Organization><efac:Company><cbc:WebsiteURI>http://www.nbb.be</cbc:WebsiteURI><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="FRA">Banque nationale de Belgique</cbc:Name></cac:PartyName><cac:PartyName><cbc:Name languageID="NLD">Nationale Bank van België</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:StreetName>Boulevard de Berlaimont 14</cbc:StreetName><cbc:CityName>Bruxelles</cbc:CityName><cbc:PostalZone>1000</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">BE100</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">BEL</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>0203201340_148</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Telephone>+32 22215090</cbc:Telephone><cbc:ElectronicMail>caa@nbb.be</cbc:ElectronicMail></cac:Contact></efac:Company></efac:Organization><efac:Organization><efac:Company><cbc:WebsiteURI>https://bosa.belgium.be</cbc:WebsiteURI><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0002</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="FRA">SPF Stratégie et Appui</cbc:Name></cac:PartyName><cac:PartyName><cbc:Name languageID="NLD">FOD Beleid en Ondersteuning</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:StreetName>Boulevard Simon Bolivar 30 Bte1</cbc:StreetName><cbc:CityName>Bruxelles</cbc:CityName><cbc:PostalZone>1000</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">BE100</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">BEL</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>BE001</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Telephone>+32 2 740 80 00</cbc:Telephone><cbc:ElectronicMail>revise@publicprocurement.be</cbc:ElectronicMail></cac:Contact></efac:Company></efac:Organization><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0003</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="NLD">Raad van State</cbc:Name></cac:PartyName><cac:PartyName><cbc:Name languageID="FRA">Conseil d’Etat</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:CityName>Brussel</cbc:CityName><cbc:PostalZone>1040</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">BE100</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">BEL</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>BE0931814266</cbc:CompanyID></cac:PartyLegalEntity></efac:Company></efac:Organization></efac:Organizations><efac:Publication><efbc:NoticePublicationID schemeName="ojs-notice-id">00470609-2026</efbc:NoticePublicationID><efbc:GazetteID schemeName="ojs-id">129/2026</efbc:GazetteID><efbc:PublicationDate>2026-07-08+02:00</efbc:PublicationDate></efac:Publication></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:UBLVersionID>2.3</cbc:UBLVersionID><cbc:CustomizationID>eforms-sdk-1.13</cbc:CustomizationID><cbc:ID schemeName="notice-id">80cbd103-099c-453b-af30-86844486703a</cbc:ID><cbc:ContractFolderID>423dbde3-3115-4730-8a3c-7a047cbd1e1e</cbc:ContractFolderID><cbc:IssueDate>2026-07-06+02:00</cbc:IssueDate><cbc:IssueTime>00:00:00+02:00</cbc:IssueTime><cbc:VersionID>01</cbc:VersionID><cbc:RequestedPublicationDate>2026-07-07+02:00</cbc:RequestedPublicationDate><cbc:RegulatoryDomain>32014L0024</cbc:RegulatoryDomain><cbc:NoticeTypeCode listName="competition">cn-standard</cbc:NoticeTypeCode><cbc:NoticeLanguageCode listName="language">FRA</cbc:NoticeLanguageCode><cac:AdditionalNoticeLanguage><cbc:ID>NLD</cbc:ID></cac:AdditionalNoticeLanguage><cac:ContractingParty><cbc:BuyerProfileURI>https://www.publicprocurement.be/bda?organisationIds=148&amp;includeOrganisationChildren=true</cbc:BuyerProfileURI><cac:ContractingPartyType><cbc:PartyTypeCode listName="buyer-legal-type">body-pl</cbc:PartyTypeCode></cac:ContractingPartyType><cac:ContractingActivity><cbc:ActivityTypeCode listName="authority-activity">econ-aff</cbc:ActivityTypeCode></cac:ContractingActivity><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification><cac:ServiceProviderParty><cbc:ServiceTypeCode listName="organisation-role">ted-esen</cbc:ServiceTypeCode><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0002</cbc:ID></cac:PartyIdentification></cac:Party></cac:ServiceProviderParty></cac:Party></cac:ContractingParty><cac:TenderingTerms><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="exclusion-grounds-source">epo-procurement-document</cbc:TendererRequirementTypeCode></cac:SpecificTendererRequirement></cac:TendererQualificationRequest></cac:TenderingTerms><cac:TenderingProcess><cbc:ProcedureCode listName="procurement-procedure-type">restricted</cbc:ProcedureCode><cac:ProcessJustification><cbc:ProcessReasonCode listName="accelerated-procedure">false</cbc:ProcessReasonCode></cac:ProcessJustification></cac:TenderingProcess><cac:ProcurementProject><cbc:ID schemeName="InternalID">NBB-2026-3583</cbc:ID><cbc:Name languageID="FRA">Tests d’intrusion dédiés, Red Teaming interne et soutien à la réponse aux incidents de sécurité</cbc:Name><cbc:Name languageID="NLD">Dedicated penetration testing, interne red teaming en ondersteuning bij incidentresponse voor beveiliging</cbc:Name><cbc:Description languageID="NLD">De opdracht betreft het leveren van twee full-time, nominatieve senior experts die exclusief voor de NBB werken. De scope omvat: 1. Uitvoeren van penetratietesten (infrastructuur, applicaties, cloud, Active Directory); 2. Uitvoeren van interne Red Teaming oefeningen (ca. 20% van de tijd) om de weerstand te valideren; 3. Gespecialiseerde technische ondersteuning aan het Security Incident Response Team (SIRT) bij incidenten (malware analyse, forensisch onderzoek, reverse engineering). De experts werken hybride met minimaal 75% aanwezigheid op site. </cbc:Description><cbc:Description languageID="FRA">La mission consiste à fournir deux experts seniors à temps plein, nommément désignés et affectés exclusivement à la BNB. Le périmètre comprend : 1. La réalisation de tests d’intrusion (infrastructure, applications, cloud, Active Directory) ; 2. La réalisation d’exercices de Red Teaming interne (env. 20 % du temps) pour valider la résilience ; 3. Un soutien technique spécialisé à l’équipe de réponse aux incidents de sécurité (SIRT) lors d’incidents (analyse de malwares, investigations forensiques, rétro-ingénierie). Les experts travaillent en mode hybride avec une présence minimale de 75 % sur site. </cbc:Description><cbc:ProcurementTypeCode listName="contract-nature">services</cbc:ProcurementTypeCode><cac:MainCommodityClassification><cbc:ItemClassificationCode listName="cpv">72000000</cbc:ItemClassificationCode></cac:MainCommodityClassification><cac:RealizedLocation><cac:Address><cbc:CountrySubentityCode listName="nuts">BE100</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">BEL</cbc:IdentificationCode></cac:Country></cac:Address></cac:RealizedLocation></cac:ProcurementProject><cac:ProcurementProjectLot><cbc:ID schemeName="Lot">LOT-0001</cbc:ID><cac:TenderingTerms><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efac:StrategicProcurement><efbc:ApplicableLegalBasis listName="cvd-scope">false</efbc:ApplicableLegalBasis></efac:StrategicProcurement></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:FundingProgramCode listName="eu-funded">no-eu-funds</cbc:FundingProgramCode><cac:CallForTendersDocumentReference><cbc:ID>TenderDocumentRef-LOT-0001</cbc:ID><cbc:DocumentType>non-restricted-document</cbc:DocumentType><cac:Attachment><cac:ExternalReference><cbc:URI>https://www.publicprocurement.be/publication-workspaces/0f07d680-949c-4822-945a-4ddbbbb0f198/documents</cbc:URI></cac:ExternalReference></cac:Attachment></cac:CallForTendersDocumentReference><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="selection-criteria-source">epo-procurement-document</cbc:TendererRequirementTypeCode></cac:SpecificTendererRequirement></cac:TendererQualificationRequest><cac:TendererQualificationRequest><cac:SpecificTendererRequirement><cbc:TendererRequirementTypeCode listName="reserved-procurement">none</cbc:TendererRequirementTypeCode></cac:SpecificTendererRequirement></cac:TendererQualificationRequest><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="reserved-execution">no</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="einvoicing">required</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="ecatalog-submission">not-allowed</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:ContractExecutionRequirement><cbc:ExecutionRequirementCode listName="esignature-submission">true</cbc:ExecutionRequirementCode></cac:ContractExecutionRequirement><cac:TenderRecipientParty><cbc:EndpointID>https://www.publicprocurement.be/supplier/enterprises/0/tendering-workspaces/publication-workspace-detail/0f07d680-949c-4822-945a-4ddbbbb0f198/general</cbc:EndpointID></cac:TenderRecipientParty><cac:AppealTerms><cac:PresentationPeriod><cbc:Description languageID="NLD">Overeenkomstig artikels 14, 15, 23 en 24 van de wet van 17 juni 2013 betreffende de motivering, de informatie en de rechtsmiddelen inzake overheidsopdrachten, bepaalde opdrachten voor werken, leveringen en diensten en concessies, kan binnen een termijn van 15 dagen respectievelijk 60 dagen, vanaf de dag volgend op de verzenddatum van de kennisgeving van de selectiebeslissing, een vordering tot schorsing dan wel een vordering tot vernietiging ingediend worden. Een verzoekschrift moet ofwel per post aangetekend verzonden worden naar de griffie van de Raad van State, Wetenschapsstraat 33 te 1040 Brussel, ofwel volgens de elektronische procedure ingediend worden op de website http://www.raadvanstate.be/?page=e-procedure&amp;lang=nl., conform de bepalingen van het KB 19 november 2024 tot bepaling van de rechtspleging van de Raad van State</cbc:Description><cbc:Description languageID="FRA">Conformément aux articles 14, 15, 23 et 24 de la loi du 17 juin 2013 relative à la motivation, à l’information et aux voies de recours en matière de marchés publics, de certains marchés de travaux, de fournitures et de services et de concessions, une demande de suspension ou d'annulation peut être introduite dans un délai de 15 jours et de 60 jours respectivement, à compter du jour suivant la date d'envoi de la notification de la décision de sélection. La demande doit être soit envoyée par courrier recommandé au greffe du Conseil d'État, rue de la Science 33, 1040 Bruxelles, soit introduite par voie électronique sur le site Internet https://www.raadvanstate.be/?page=e-procedure&amp;lang=fr, conformément aux dispositions de l'arrêté royal du 19 novembre 2024 déterminant la procédure du Conseil d'État</cbc:Description></cac:PresentationPeriod><cac:AppealReceiverParty><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0003</cbc:ID></cac:PartyIdentification></cac:AppealReceiverParty></cac:AppealTerms><cac:Language><cbc:ID>FRA</cbc:ID></cac:Language><cac:Language><cbc:ID>NLD</cbc:ID></cac:Language><cac:PostAwardProcess><cbc:ElectronicOrderUsageIndicator>false</cbc:ElectronicOrderUsageIndicator><cbc:ElectronicPaymentUsageIndicator>true</cbc:ElectronicPaymentUsageIndicator></cac:PostAwardProcess></cac:TenderingTerms><cac:TenderingProcess><cbc:SubmissionMethodCode listName="esubmission">required</cbc:SubmissionMethodCode><cbc:GovernmentAgreementConstraintIndicator>true</cbc:GovernmentAgreementConstraintIndicator><cac:ParticipationRequestReceptionPeriod><cbc:EndDate>2026-08-03+02:00</cbc:EndDate><cbc:EndTime>17:00:00+02:00</cbc:EndTime></cac:ParticipationRequestReceptionPeriod><cac:AuctionTerms><cbc:AuctionConstraintIndicator>false</cbc:AuctionConstraintIndicator></cac:AuctionTerms><cac:FrameworkAgreement><cac:SubsequentProcessTenderRequirement><cbc:Name>buyer-categories</cbc:Name></cac:SubsequentProcessTenderRequirement></cac:FrameworkAgreement><cac:ContractingSystem><cbc:ContractingSystemTypeCode listName="framework-agreement">none</cbc:ContractingSystemTypeCode></cac:ContractingSystem><cac:ContractingSystem><cbc:ContractingSystemTypeCode listName="dps-usage">none</cbc:ContractingSystemTypeCode></cac:ContractingSystem></cac:TenderingProcess><cac:ProcurementProject><cbc:ID schemeName="InternalID">1</cbc:ID><cbc:Name languageID="NLD">NBB-2026-3583 - 1</cbc:Name><cbc:Name languageID="FRA">NBB-2026-3583 - 1</cbc:Name><cbc:Description languageID="NLD">Dedicated penetration testing, interne red teaming en ondersteuning bij incidentresponse voor beveiliging</cbc:Description><cbc:Description languageID="FRA">Tests d’intrusion dédiés, Red Teaming interne et soutien à la réponse aux incidents de sécurité</cbc:Description><cbc:ProcurementTypeCode listName="contract-nature">services</cbc:ProcurementTypeCode><cbc:Note languageID="NLD">De selectieleidraad maakt integraal deel uit van deze publicatie.</cbc:Note><cbc:Note languageID="FRA">Le guide de sélection fait partie intégrante de cette publication.</cbc:Note><cac:RequestedTenderTotal><cbc:EstimatedOverallContractAmount currencyID="EUR">4200000</cbc:EstimatedOverallContractAmount></cac:RequestedTenderTotal><cac:MainCommodityClassification><cbc:ItemClassificationCode listName="cpv">72000000</cbc:ItemClassificationCode></cac:MainCommodityClassification><cac:RealizedLocation><cac:Address><cbc:CountrySubentityCode listName="nuts">BE100</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">BEL</cbc:IdentificationCode></cac:Country></cac:Address></cac:RealizedLocation><cac:PlannedPeriod><cbc:StartDate>2027-01-01+01:00</cbc:StartDate><cbc:DurationMeasure unitCode="YEAR">6</cbc:DurationMeasure></cac:PlannedPeriod></cac:ProcurementProject></cac:ProcurementProjectLot></ContractNotice>