The objectives of the support services in the area of activities on cybersecurity strategies, indexes and frameworks may take but are not limited to, the following forms:
• perform research and analysis on the topics mentioned above; relevant existing literature, reports, white papers, legislation, policies, strategies, initiatives and other research projects;
• provide support for stakeholder engagement activities of ENISA and in particular interviews with related stakeholders (e.g. planning, design, implementing, drafting minutes, etc.). Stakeholders are identified by ENISA and include among else policy makers, MS representatives, developers, manufacturers, solution vendors, industry associations, standardization bodies, certification organisations, as well as SMEs, SME associations, customer associations, government organizations, large enterprises, etc.;
• support ENISA in collecting input (initial phase) and feedback (review phase) from related stakeholders for the studies and reports mentioned above. This involves the setting up of online tools and/or platforms for surveys, questionnaires, polls, etc. based on the content and the requirements set by ENISA on the topics mentioned above;
• support ENISA in processing the results from interviews, surveys and questionnaires. This may include extraction of statistical values, design of infographics, compilation of summary reports/slides, quantitative and qualitative assessments, etc.;
• support ENISA in developing targeted methodologies for building cybersecurity taxonomies and frameworks, quantifying impact assessments, identifying information workflows, information and knowledge synthesis and their valorisation. Assist ENISA in evaluating the inter-relationships between different elements of the cybersecurity ecosystem, in quantitatively and qualitatively assessing their impact and in identification of relevant measurable key performance indicators;
• support ENISA in the drafting of reports based on information collected (via interviews and surveys) or based on stocktaking. Support activities in this category may include proofreading, editorial work, plagiarism checks, substantiating findings by correlating to research and analysis, etc.;
• based on ENISA provided taxonomies, support the mapping of ENISA good practices and recommendations to relevant existing literature, reports, white papers, legislation, policies, strategies, initiatives and other research projects;
• perform SWOT analysis for various kinds of technical and organisational cases related to the scope of this tender, to present this to ENISA;
• maintain up-to-date repositories of relevant existing literature, reports, white papers, legislation, policies, strategies, initiatives and other research projects throughout the length of the project and provide technical means (e.g. online platforms, structured formats, etc.) to present this to ENISA;
• provide tools and/or services to support ENISA in validating the findings, results, good practices and recommendations with stakeholders, such as online questionnaires, online platforms for gathering comments, etc.;
• assist ENISA in the organisation of workshops and the drafting of minutes of the workshops;
• present effectively achieved results by using presentation techniques (paper documents, on-line documents, slides, demonstrators, graphs, videos, etc.);
• compile collection of relevant contacts;
• support ENISA in updating existing inventories, online tools, research and analysis, surveys, etc.
Various specific contracts based on the annual ENISA Work Programme will be launched periodically to the successful framework contractors based on the ‘Reopening of Competition’ procedure. Depending on the changing needs of the contracting authority and budget availability, this overall budget could be increased by up to 50 % by employing a ‘negotiated procedure without prior publication of a contract notice’.