16 https://z-cert.nl/ ORG-0001 Stichting Z-CERT Stationsplein 121 Amersfoort 3818 LE NL310 NLD 248760907 Annemieke Oostveen +313 37370609 inkoop@z-cert.nl TPO-0001 Rechtbank Midden-Nederland, Utrecht Vrouwe Justitiaplein 1 Utrecht 3511 EX NL310 NLD 00596131-2024193/20242024-10-03+02:00 2.3 eforms-sdk-1.12 6a2f6484-f30c-4e3f-abf6-10ea12320f53 f3388dc4-5f26-40ba-9cea-db2f2c73af68 2024-10-02+02:00 14:26:46.200036308+02:00 01 32014L0024 cn-standard NLD body-pl health ORG-0001 epo-sub-espd 2 2 open false Cyber Threat Intelligence Starting in 2025, Z-CERT has a legal duty under the Cybersecurity Act to provide threat intelligence to a large number of healthcare organizations (being: healthcare entities). As a result, the number of CTI sources that need to be monitored also increases enormously. Collecting, analysing, enriching and distributing the threat information manually is not scalable and needs to be more structured and automated. To achieve this goal, Z-CERT has chosen to issue this tender. The tender consists of two (2) Lots. Lot 1 CTI Feed: This concerns a substantive data stream of threat information. This data stream must be provided in a format that is both machine readable and can be interpreted by humans. Lot 2 CTI Monitoring Dashboard: This concerns a Software-as-a-Service (SaaS) solution, where an analyst of Z-CERT logs into a dashboard. This dashboard provides a clear overview to the analyst about cyber threat information. Proposals for Lot 1 and 2 must consist of a minimum number of 10 licences. It is also required to make an offer for the following volume of licences: 15, 20, 25 and 30 (see Appendix 2A and Appendix 2B). services 72000000 anyw-cou NLD LOT-0001 false not-allowed no-eu-funds not-requ false false documentsId non-restricted-document https://www.tenderned.nl/aankondigingen/overzicht/351733 none false epo-sub-espd no allowed false not-allowed poi-exa 40 quality List of Requirements See tender documents. poi-exa 25 quality Plan of Action See tender documents. poi-exa 35 quality Proof of concept See tender documents poi-exa 30 price Prijs Prijs ORG-0001 https://www.tenderned.nl/aankondigingen/overzicht/351733 ORG-0001 3 ORG-0001 TPO-0001 NLD false false false required true 2024-11-12+01:00 10:00:00+01:00 2024-10-14+02:00 10:00:00+02:00 2024-11-12+01:00 10:00:00+01:00 false 1 fa-wo-rc none 1 Lot 1: CTI Feed Lot 1 CTI Feed: This concerns a substantive data stream of threat information. This data stream must be provided in a format that is both machine readable and can be interpreted by humans. This data stream should be able to be linked to other software applications, such as a Threat Intelligence Platform, which makes it possible that the stream can be included in a larger collection of cyber threat information. See tender documents. services none 72000000 anyw-cou NLD 48 The Contracting Authority wishes to enter into a Framework Agreement with one tender per Lot, under which contracts may be awarded for one year, with optional extensions of up to three times for one year (maximum of three (3) one-year extensions). The maximum term of the Framework Agreement is four years. 3 The Contracting Authority wishes to enter into a Framework Agreement with one tender per Lot, under which contracts may be awarded for one year, with optional extensions of up to three times for one year (maximum of three (3) one-year extensions). The maximum term of the Framework Agreement is four years. LOT-0002 false not-allowed no-eu-funds not-requ false false documentsId non-restricted-document https://www.tenderned.nl/aankondigingen/overzicht/351733 none false epo-sub-espd no allowed false not-allowed poi-exa 40 quality List of Requirements See tender documents. poi-exa 25 quality Plan of Action See tender documents. poi-exa 35 quality Proof of concept See tender documents poi-exa 30 price Prijs Prijs ORG-0001 https://www.tenderned.nl/aankondigingen/overzicht/351733 ORG-0001 3 ORG-0001 TPO-0001 NLD false false false required true 2024-11-12+01:00 10:00:00+01:00 2024-10-14+02:00 10:00:00+02:00 2024-11-12+01:00 10:00:00+01:00 false 1 fa-wo-rc none 2 Lot 2: CTI Monitoring Dashboard Lot 2 CTI Monitoring Dashboard: This concerns a Software-as-a-Service (SaaS) solution, where an analyst of Z-CERT logs into a dashboard. This dashboard gives the analyst a clear overview of the most important cyber threat information relevant for the healthcare sector. In addition to providing a clear overview, the dashboard should have the possibility to distinguish between specific threat information. The dashboard should provide the option to make choices about which sources are monitored as well as it should be possible to add data streams to the dashboard. See tender documents. services none 72000000 anyw-cou NLD 48 The Contracting Authority wishes to enter into a Framework Agreement with one tender per Lot, under which contracts may be awarded for one year, with optional extensions of up to three times for one year (maximum of three (3) one-year extensions). The maximum term of the Framework Agreement is four years. 3 The Contracting Authority wishes to enter into a Framework Agreement with one tender per Lot, under which contracts may be awarded for one year, with optional extensions of up to three times for one year (maximum of three (3) one-year extensions). The maximum term of the Framework Agreement is four years.