c55b2216-84ea-47b3-8da3-cbcf073d733f-01update-addterminliche Gründe17https://www.tscnet.euORG-0001TSCNET Services GmbHWeihenstephaner Str. 9München81673DE212DEU14499+49 8945554101procurement@tscnet.euORG-0002Regierung von Oberbayern | Vergabekammer SüdbayernMaximilianstraße 39München80538DE212DEUf872485e-b666-4caa-b522-563704601176+49 8921760vergabekammer.suedbayern@reg-ob.bayern.deORG-0003Datenservice Öffentlicher Einkauf (in Verantwortung des Beschaffungsamts des BMI)Bonn53119DEA22DEU0204:994-DOEVD-83+49228996100noreply.esender_hub@bescha.bund.de00645255-2025189/20252025-10-02+02:002.3eforms-sdk-1.120d9681c1-bba6-4f2b-875e-8b332967c1aec55b2216-84ea-47b3-8da3-cbcf073d733f2025-10-01+02:0009:44:00+02:00012025-10-01+02:0032014L0025cn-standardDEUhttps://www.deutsche-evergabe.deelectricityORG-0001ted-esenORG-0003sektvoepo-noticeexg-crim-corrptexg-crim-fraudexg-crim-laundexg-crim-traffickexg-crim-partexg-crim-terrorexg-mis-bre-env-lawexg-mis-bre-lab-lawexg-mis-bre-soc-lawexg-mis-distortionexg-mis-misconductexg-mis-misrepresentexg-mis-partic-conflexg-mis-prep-conflexg-mis-sanctionexg-natl-bre-nat-lawexg-pmt-bre-sscexg-pmt-bre-taxexg-sitn-as-suspexg-sitn-insolvencyexg-sitn-liq-adminexg-sitn-otherneg-w-callfalse12092025ENTSO-E Security Plan External Auditing Services (ESPEAS)TSCNET Services GmbH, based in Munich and ISO 27001:2022 certified, seeks a qualified third-party Regulatory Information Security Auditor to perform audits aligned with EU energy sector regulations. The contractor must be an experienced ISO 27001:2022 Lead Auditor with strong service delivery and expertise in regulatory audits. Audits must comply with frameworks from ENTSO-E and ACER, and adapt to evolving EU and national cybersecurity, data protection, and energy governance requirements. The contract is expected to span at least four years.services79212000721500007280000072810000DE212DEULOT-0001slc-stand-otherKnockout criterion: ENTSO-E Security Plan experience based on ISO 27001:2022 and ISO 27002:2022 Information Security Standards applicable to TSCNET Services GmbH and its suppliers contracted for IT support, software development and hosting services. Conducting Type II Effectiveness Audits using control sets based on the aforementioned ISO Standards, performed and officially reported on by a certified ISO 27001:2022 Lead Auditor.trueslc-stand-otherRegister 01_App - Application for Participation Self created application letter including description of the company and its complete corporate structure (including ownership structure). Type: Self-declaration File name: 20250801_Tender_ESPEAS_01_App_Application_for_Participation_company name.pdf trueslc-suit-reg-tradeRegister 02_CRE - Commercial Register Extract Current entry in the professional or commercial register of the country of origin or presentation of a corresponding certificate. Type: Professional or commercial register certificate File name: 20250801_Tender_ESPEAS_02_CRE_Commercial_Register_Extract_company name.pdf trueslc-stand-otherRegister 03_GFEX - Grounds for exclusion Declaration of mandatory and optional grounds for exclusion within the meaning of Sections 123 and 124 of the GWB (German Act Against Restraints of Competition), Section 21 of the AentG (Aent Act), Section 98c of the AufenthG (Residence Act), Section 21 of the SchwarzArbG (Black Employment Act), and Section 19 of the MiLoG (Minimum Minimum Wage Act). Type: Form provided by the contacting authority. File name: 20250801_Tender_ESPEAS_03_GFEX_Grounds for exclusion_company name.pdf trueslc-stand-otherRegister 06_ FinCR Submission of a current credit report. Type: Credit report from a recognized credit agency. File name: 20250801_Tender_ESPEAS_06_FinCR_Credit Report (e.g. Creditreform or D&B)_company name.pdftrueslc-stand-otherRegister 07_Ins - Commercial Liability Insurance Proof of commercial liability insurance (insured event: damage event), including product liability, covering the applicant's statutory liability for personal injury and/or property damage and environmental damage to third parties with an insured sum of at least EUR 1,5 million per insured event and twice per insurance year. The proof of insurance should show coverage for the Applicant, not just for affiliated companies, if applicable. Type: Insurance certificate. File name: 20250801_Tender_ESPEAS_07_Ins_Commercial Liability Insurance_company name.pdf trueslc-stand-to-avgRegister 08_FinTO - Annual Turnover Declaration The Applicant must demonstrate financial capacity, inter alia, by showing that his average annual turnover for the last three completed financial years is at least twice the contract value of the subject matter of this contract notice. Type: Self declation. File name: 20250801_Tender_ESPEAS_08_FinTO_Annual Turnover Declaration_company name.pdf trueslc-stand-otherRegister 10_ External Business Partner Screening Questionnaire This questionnaire is part of the integrity check and must be completed by the Applicant as part of a self-disclosure process. Type: Form provided by the contacting authority. File name: 20250801_Tender_ESPEAS_10_BP_External Business Partner Screening Questionnaire_company name.pdf trueslc-stand-otherRegister 11_Cond - Confirmation of TSCNET Principles of Conduct Declaration by the applicant that he has read and understood the Supplier Code of Conduct. The code can be found at “TSCNET Principles of Conduct”. Type: Self-declaration File name: 20250801_Tender_ESPEAS_11_Cond_Confirmation of TSCNET Principles of Conduct_company name.pdf trueslc-stand-otherRegister 12_ Signed Non-Disclosure Agreement The applicant agrees to sign a Non-Disclosure Agreement (NDA) to ensure the confidentiality of all sensitive information exchanged during the course of the engagement. The NDA must be signed and returned along with the application to proceed with the tender process. Thr applicant must use the NDA document provided by the contact point. Type: Form provided by the contacting authority. File name: 20250801_Tender_ESPEAS_12_NDA_Signed Non-Disclosure Agreement_company name.pdf trueslc-abil-ref-servicesRegister 04_Ref - Reference List References to services comparable to the advertised service. The following information must be provided for each reference: • Client • Date of contract award • Order and final invoice value • Representation of project size and volume • Main service contents • Start and end of services • Number of applicant's employees working on the project • Naming of the responsible persons on the applicant’s side and on the reference client’s side • Providing the contact details of the reference client Type: The applicant must use the form (Reference Form) provided by the contact point. File name: 20250801_Tender_ESPEAS_04_Ref_Reference List_company name.docx trueslc-abil-staff-qualRegister 09_Edu - Educational & Professional Qualifications Information on the average number of employees employed in the last three completed financial years, broken down by trades/fields of activity, and certifications of key personnel responsible for service delivery. Type: Self-declaration File name: 20250801_Tender_ESPEAS_09_Edu_Educational & Professional Qualifications_company name.pdf trueslc-abil-mgmt-qualRegister 05_Self_Self-declaration (Capacity, Resources, Quality Assurance) Confirmation by the applicant through self-declaration that the applicant is able a) to carry out the contract execution in English, including all documents and correspondence; b) to provide project managers who speak fluent English (at least B2 or equivalent) in sufficient numbers to process the order; c) on-site work managers who speak fluent English (at least B2 or equivalent); d) Confirm that the Applicant has systems, processes, and personnel in place to maintain consistent quality. Provide assurance to the contracting authority that the Applicant can meet the technical specifications and performance standards required. Type: Self-declaration File name: 20250801_Tender_ESPEAS_05_Self_Self-declaration (Capacity, Resources, Quality_company name.pdf) truefalsenot-allowedno-eu-fundsnot-requfalsenot-allowedfalseDEUc55b2216-84ea-47b3-8da3-cbcf073d733fnon-restricted-documenthttp://www.deutsche-evergabe.de/dashboards/dashboard_off/c55b2216-84ea-47b3-8da3-cbcf073d733fin den Vergabeunterlagen aufgeführttruein den Vergabeunterlagen aufgeführtlate-allPlease note: To avoid possible exclusion of the offer, please ensure that you enclose all the required evidence and declarations with the offer.epo-noticeperformanceBedingungen für die Ausführung des Auftrags und ggfs. Verweis auf die einschlägige Rechts- oder Verwaltungsvorschrift siehe Vergabeunterlagennorequirednot-allowedfalseDer Preis ist nicht das einzige Zuschlagskriterium; alle Kriterien sind in den Vergabeunterlagen aufgeführtORG-0001http://www.deutsche-evergabe.de/dashboards/dashboard_off/c55b2216-84ea-47b3-8da3-cbcf073d733fORG-0001(1) Any violations of public procurement law must be reported by the applicant/bidder within 10 days of becoming aware of them, in accordance with Section 160 (3) No. 1 GWB. (2) Violations of procurement regulations that are apparent from the announcement must be reported to the contracting authority in accordance with Section 160 (3) No. 2 GWB no later than the deadline for submitting applications or bids specified in the announcement. (3) Violations of procurement regulations that are only apparent in the procurement documents must be reported to the contracting authority in accordance with Section 160 (3) No. 3 GWB no later than the expiry of the deadline for submitting applications or bids. (4) Pursuant to Section 160 (3) No. 4 GWB, an application for review of the award must be submitted to the Public Procurement Tribunal within 15 calendar days of the contracting authority's notification that it does not intend to remedy a complaint.ORG-0002DEUfalsefalserequiredtruefalse2025-11-12+01:002025-10-31+01:0010:00:00+02:00true41falsenonenone0001ENTSO-E Security Plan External Auditing Services (ESPEAS)TSCNET Services GmbH (TSCNET) located in Munich, Germany, is an ISO 27001:2022 certified organization providing services 24 hours a day, 7 days a week, 365 days a year, to Contracting Authorities operating critical infrastructure connected to the Central and Eastern European power grid. As part of TSCNET's requestor’s input for Regulatory Information Security Auditor Services, TSCNET wishes to contract a specialist third-party to undertake regulatory information security audits. The third-party needs to be a qualified ISO 27001:2022 Lead Auditor with not only best of breed expertise, but excellent service delivery and multiple years' experience in regulatory audits. The audits must be aligned with the regulatory expectations and frameworks established by: a) ENTSO-E (European Network of Transmission System Operators for Electricity) – https://www.entso-e.eu, which coordinates the operation of Europe’s electricity transmission networks and sets cybersecurity and operational standards for TSOs. b) ACER (European Union Agency for the Cooperation of Energy Regulators) – https://www.acer.europa.eu, which oversees the implementation of EU energy regulations, including cybersecurity and data protection obligations under the Network Code on Cybersecurity and other relevant EU legislation. Given that the contract is expected to span at least four years, TSCNET anticipates that additional compliance requirements may emerge over time. Therefore, the scope of regulatory alignment shall not be limited to ENTSO-E or ACER alone. The selected auditor must demonstrate the capacity to adapt to evolving EU and national regulatory frameworks, including but not limited to cybersecurity, data protection, and energy sector governance, as defined by current and future mandates from ENTSO-E, ACER, and other relevant authorities.servicesfalsenone79212000DE212DEU4821 + 1 year