<?xml version="1.0" encoding="UTF-8" standalone="no"?><ContractAwardNotice xmlns="urn:oasis:names:specification:ubl:schema:xsd:ContractAwardNotice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" xmlns:efac="http://data.europa.eu/p27/eforms-ubl-extension-aggregate-components/1" xmlns:efbc="http://data.europa.eu/p27/eforms-ubl-extension-basic-components/1" xmlns:efext="http://data.europa.eu/p27/eforms-ubl-extensions/1" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2"><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efac:NoticeResult><efac:LotResult><cbc:ID schemeName="result">RES-0001</cbc:ID><cbc:TenderResultCode listName="winner-selection-status">selec-w</cbc:TenderResultCode><efac:LotTender><cbc:ID schemeName="tender">TEN-0001</cbc:ID></efac:LotTender><efac:ReceivedSubmissionsStatistics><efbc:StatisticsCode listName="received-submission-type">t-esubm</efbc:StatisticsCode><efbc:StatisticsNumeric>1</efbc:StatisticsNumeric></efac:ReceivedSubmissionsStatistics><efac:SettledContract><cbc:ID schemeName="contract">CON-0001</cbc:ID></efac:SettledContract><efac:TenderLot><cbc:ID schemeName="Lot">LOT-0000</cbc:ID></efac:TenderLot></efac:LotResult><efac:LotTender><cbc:ID schemeName="tender">TEN-0001</cbc:ID><cbc:RankCode>1</cbc:RankCode><efbc:TenderRankedIndicator>true</efbc:TenderRankedIndicator><efbc:TenderVariantIndicator>false</efbc:TenderVariantIndicator><efac:TenderingParty><cbc:ID schemeName="tendering-party">TPA-0001</cbc:ID></efac:TenderingParty><efac:TenderLot><cbc:ID>LOT-0000</cbc:ID></efac:TenderLot><efac:TenderReference><cbc:ID>NTT Germany AG &amp; Co. KG</cbc:ID></efac:TenderReference></efac:LotTender><efac:SettledContract><cbc:ID schemeName="contract">CON-0001</cbc:ID><cbc:AwardDate>2024-01-19+01:00</cbc:AwardDate><cbc:IssueDate>2024-01-22+01:00</cbc:IssueDate><cbc:Title languageID="DEU">RV Incident Response</cbc:Title><cac:SignatoryParty><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification></cac:SignatoryParty><efac:ContractReference><cbc:ID schemeName="contract">MfN-05-2024 RV Incident Response</cbc:ID></efac:ContractReference><efac:LotTender><cbc:ID schemeName="tender">TEN-0001</cbc:ID></efac:LotTender></efac:SettledContract><efac:TenderingParty><cbc:ID schemeName="tendering-party">TPA-0001</cbc:ID></efac:TenderingParty></efac:NoticeResult><efac:NoticeSubType><cbc:SubTypeCode listName="notice-subtype">29</cbc:SubTypeCode></efac:NoticeSubType><efac:Organizations><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">NTT Germany AG &amp; Co. KG</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:StreetName>Horexstraße 7</cbc:StreetName><cbc:CityName>Bad Homburg</cbc:CityName><cbc:PostalZone>61352</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DE718</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>0331230316</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Telephone>+49 174 1526166</cbc:Telephone><cbc:ElectronicMail>matthias.thomann@global.ntt</cbc:ElectronicMail></cac:Contact></efac:Company><efac:TouchPoint><cbc:WebsiteURI>https://www.berlin.de/sen/wirtschaft/wirtschaftsrecht/vergabekammer/</cbc:WebsiteURI><cac:PartyIdentification><cbc:ID schemeName="touchpoint">TPO-0001</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">Senatsverwaltung für Wirtschaft, Energie und Betriebe Abteilung Wirtschaft</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:StreetName>Martin-Luther-Straße 105</cbc:StreetName><cbc:Department>Vergabekammer des Landes Berlin</cbc:Department><cbc:CityName>Berlin</cbc:CityName><cbc:PostalZone>10825</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DE300</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:Contact><cbc:Name>Vergabekammer des Landes Berlin</cbc:Name><cbc:Telefax>+493090137613</cbc:Telefax><cbc:ElectronicMail>vergabekammer@senweb.berlin.de</cbc:ElectronicMail></cac:Contact></efac:TouchPoint></efac:Organization><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0002</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">Museum für Naturkunde Leibniz-Institut für Evolutions- und Biodiversitätsforschung 
</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:StreetName>Invalidenstraße 43</cbc:StreetName><cbc:Department>SE Einkauf</cbc:Department><cbc:CityName>Berlin</cbc:CityName><cbc:PostalZone>10115</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DE300</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID>11-2000036000-81</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Name>SE Einkauf</cbc:Name><cbc:Telephone>+49308891408257</cbc:Telephone><cbc:ElectronicMail>kerstin.tobis@mfn.berlin</cbc:ElectronicMail></cac:Contact></efac:Company></efac:Organization><efac:Organization><efac:Company><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0003</cbc:ID></cac:PartyIdentification><cac:PartyName><cbc:Name languageID="DEU">Datenservice Öffentlicher Einkauf (in Verantwortung des Beschaffungsamts des BMI)</cbc:Name></cac:PartyName><cac:PostalAddress><cbc:CityName>Bonn</cbc:CityName><cbc:PostalZone>53119</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DEA22</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:PostalAddress><cac:PartyLegalEntity><cbc:CompanyID schemeID="002">0204:994-DOEVD-83</cbc:CompanyID></cac:PartyLegalEntity><cac:Contact><cbc:Telephone>+49228996100</cbc:Telephone><cbc:ElectronicMail>noreply.esender_hub@bescha.bund.de</cbc:ElectronicMail></cac:Contact></efac:Company></efac:Organization></efac:Organizations><efac:Publication><efbc:NoticePublicationID schemeName="ojs-notice-id">00535864-2024</efbc:NoticePublicationID><efbc:GazetteID schemeName="ojs-id">174/2024</efbc:GazetteID><efbc:PublicationDate>2024-09-06+02:00</efbc:PublicationDate></efac:Publication></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:UBLVersionID>2.3</cbc:UBLVersionID><cbc:CustomizationID>eforms-sdk-1.10</cbc:CustomizationID><cbc:ID schemeName="notice-id">b2c1053d-784d-4dbd-aa1d-8dc181fae948</cbc:ID><cbc:ContractFolderID>f203f225-7638-4326-80b5-54c4a17d3292</cbc:ContractFolderID><cbc:IssueDate>2024-09-04+02:00</cbc:IssueDate><cbc:IssueTime>15:19:00+02:00</cbc:IssueTime><cbc:VersionID>01</cbc:VersionID><cbc:RequestedPublicationDate>2024-09-04+02:00</cbc:RequestedPublicationDate><cbc:RegulatoryDomain>32014L0024</cbc:RegulatoryDomain><cbc:NoticeTypeCode listName="result">can-standard</cbc:NoticeTypeCode><cbc:NoticeLanguageCode listName="eu-official-language">DEU</cbc:NoticeLanguageCode><cac:ContractingParty><cac:ContractingPartyType><cbc:PartyTypeCode listName="buyer-legal-type">body-pl-ra</cbc:PartyTypeCode></cac:ContractingPartyType><cac:ContractingActivity><cbc:ActivityTypeCode listName="authority-activity">education</cbc:ActivityTypeCode></cac:ContractingActivity><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0002</cbc:ID></cac:PartyIdentification><cac:ServiceProviderParty><cbc:ServiceTypeCode listName="organisation-role">serv-prov</cbc:ServiceTypeCode><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0001</cbc:ID></cac:PartyIdentification></cac:Party></cac:ServiceProviderParty><cac:ServiceProviderParty><cbc:ServiceTypeCode listName="organisation-role">ted-esen</cbc:ServiceTypeCode><cac:Party><cac:PartyIdentification><cbc:ID schemeName="organization">ORG-0003</cbc:ID></cac:PartyIdentification></cac:Party></cac:ServiceProviderParty></cac:Party></cac:ContractingParty><cac:TenderingTerms><cac:ProcurementLegislationDocumentReference><cbc:ID>vgv</cbc:ID><cbc:DocumentDescription languageID="DEU">Richtlinie 2014/24/EU
§ 14 Abs. 4 Nr. 3 VgV - Cyberangriff mit begonnender Verschlüsselung wesentlicher Teile der IT-Infrastruktur</cbc:DocumentDescription></cac:ProcurementLegislationDocumentReference></cac:TenderingTerms><cac:TenderingProcess><cbc:ProcedureCode listName="procurement-procedure-type">neg-wo-call</cbc:ProcedureCode></cac:TenderingProcess><cac:ProcurementProject><cbc:ID schemeName="InternalID">MfN-05-2024</cbc:ID><cbc:Name languageID="DEU">RV Incident Response</cbc:Name><cbc:Description languageID="DEU">Am 18.10.2023 wurde durch die IT des MfN bemerkt, dass Ransomware mit der Verschlüsselung von Dateien auf den Servern des Museums für Naturkunde begonnen hat. Nach dem Sicherheits-vorfall im Oktober 2023 hat das Museum für Naturkunde interimistisch eine Managed Detection &amp; Response-Lösung (im Folgenden MDR-Service) bezogen, die Anfang Dezember ausgelaufen ist.
Es ist jedoch derzeitig davon auszugehen, dass sich noch immer Schadcode bzw. Backdoors in den Systemen des Museums befindet, weitere Daten verloren gehen können und die Angreifer sich so-mit noch immer mit diversen Systemen verbinden könnten und Systeme in der Krisenbewältigung ungewollt aus kompromittierten Backups wiederhergestellt werden. Das hier umzusetzende Vergabeverfahren dient dazu, interimistisch einen APT Response Dienstleister zu finden.</cbc:Description><cbc:ProcurementTypeCode listName="contract-nature">services</cbc:ProcurementTypeCode><cac:MainCommodityClassification><cbc:ItemClassificationCode listName="cpv">72220000</cbc:ItemClassificationCode></cac:MainCommodityClassification><cac:RealizedLocation><cac:Address><cbc:CityName>Berlin</cbc:CityName><cbc:PostalZone>10115</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DE300</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:Address></cac:RealizedLocation></cac:ProcurementProject><cac:ProcurementProjectLot><cbc:ID schemeName="Lot">LOT-0000</cbc:ID><cac:TenderingTerms><ext:UBLExtensions><ext:UBLExtension><ext:ExtensionContent><efext:EformsExtension><efac:StrategicProcurement><efbc:ApplicableLegalBasis listName="cvd-scope">false</efbc:ApplicableLegalBasis></efac:StrategicProcurement></efext:EformsExtension></ext:ExtensionContent></ext:UBLExtension></ext:UBLExtensions><cbc:FundingProgramCode listName="eu-funded">no-eu-funds</cbc:FundingProgramCode><cac:AwardingTerms><cac:AwardingCriterion><cbc:Description languageID="DEU">100 % Preis</cbc:Description><cbc:CalculationExpression languageID="DEU">100 % Preis</cbc:CalculationExpression><cac:SubordinateAwardingCriterion><cbc:AwardingCriterionTypeCode listName="award-criterion-type">price</cbc:AwardingCriterionTypeCode><cbc:Description languageID="DEU">Incident Response</cbc:Description></cac:SubordinateAwardingCriterion></cac:AwardingCriterion></cac:AwardingTerms><cac:AppealTerms><cac:AppealReceiverParty><cac:PartyIdentification><cbc:ID>TPO-0001</cbc:ID></cac:PartyIdentification></cac:AppealReceiverParty></cac:AppealTerms></cac:TenderingTerms><cac:TenderingProcess><cbc:GovernmentAgreementConstraintIndicator>false</cbc:GovernmentAgreementConstraintIndicator><cac:AuctionTerms><cbc:AuctionConstraintIndicator>false</cbc:AuctionConstraintIndicator></cac:AuctionTerms><cac:ContractingSystem><cbc:ContractingSystemTypeCode listName="framework-agreement">fa-wo-rc</cbc:ContractingSystemTypeCode></cac:ContractingSystem><cac:ContractingSystem><cbc:ContractingSystemTypeCode listName="dps-usage">none</cbc:ContractingSystemTypeCode></cac:ContractingSystem></cac:TenderingProcess><cac:ProcurementProject><cbc:ID schemeName="InternalID">MfN-05-2024</cbc:ID><cbc:Name languageID="DEU">RV Incident Response</cbc:Name><cbc:Description languageID="DEU">Am 18.10.2023 wurde durch die IT des MfN bemerkt, dass Ransomware mit der Verschlüsselung von Dateien auf den Servern des Museums für Naturkunde begonnen hat. Nach dem Sicherheits-vorfall im Oktober 2023 hat das Museum für Naturkunde interimistisch eine Managed Detection &amp; Response-Lösung (im Folgenden MDR-Service) bezogen, die Anfang Dezember ausgelaufen ist.
Es ist jedoch derzeitig davon auszugehen, dass sich noch immer Schadcode bzw. Backdoors in den Systemen des Museums befindet, weitere Daten verloren gehen können und die Angreifer sich so-mit noch immer mit diversen Systemen verbinden könnten und Systeme in der Krisenbewältigung ungewollt aus kompromittierten Backups wiederhergestellt werden. Das hier umzusetzende Vergabeverfahren dient dazu, interimistisch einen APT Response Dienstleister zu finden.</cbc:Description><cbc:ProcurementTypeCode listName="contract-nature">services</cbc:ProcurementTypeCode><cac:ProcurementAdditionalType><cbc:ProcurementTypeCode listName="strategic-procurement">none</cbc:ProcurementTypeCode></cac:ProcurementAdditionalType><cac:MainCommodityClassification><cbc:ItemClassificationCode listName="cpv">72220000</cbc:ItemClassificationCode></cac:MainCommodityClassification><cac:RealizedLocation><cac:Address><cbc:CityName>Berlin</cbc:CityName><cbc:PostalZone>10115</cbc:PostalZone><cbc:CountrySubentityCode listName="nuts">DE300</cbc:CountrySubentityCode><cac:Country><cbc:IdentificationCode listName="country">DEU</cbc:IdentificationCode></cac:Country></cac:Address></cac:RealizedLocation></cac:ProcurementProject></cac:ProcurementProjectLot><cac:TenderResult><cbc:AwardDate>2000-01-01+01:00</cbc:AwardDate></cac:TenderResult></ContractAwardNotice>