Consulting Services for the Preparation and Follow-up of a Re-Certification or Monitoring Audit according to the IT Basic Protection BSI

In order to determine the economic and financial capacity, the bidder must also provide information in the form "Information on the company and the company profile" - if possible - regarding the creditworthiness of the company (in particular the business account management, the financial situation, the existence of complaints in the business relationship with the credit institution, the initiation of fulfillable obligations and the payment of due invoices) and - if appropriate information is available - the turnover (turnover regarding the type of service that is the subject of the award and total turnover) of the last three completed years.

If the above information cannot yet be (completely) made due to a new establishment of the company or for another legitimate reason, the bidder must provide a corresponding declaration from his credit institution to prove his creditworthiness by submitting an offer.

In order to prove technical and professional ability (specialist customer), the tenderer has a reference list of the essential services provided in the last three years, which are comparable in type and scope to the tendered service, specifying the contract value, the scope, the contract period and the customer incl. Contact person and telephone number. The references to be provided here must relate to advisory activities that accompanied a subsequent audit according to BSI-Grundschutz.

In addition, the tenderer must submit a list of comparable contracts performed (comparable in terms of the service offered here) as well as a list of references on consultations performed by EU paying agencies or their IT service providers on BSI basic protection issues with the tender. To indicate the references, the tenderer must complete the "Reference List" form.

The bidder must provide information about the personnel and qualifications (BSI certification as audit team leader for ISO 27001 audits based on IT-Grundschutz (BSI auditor)) of the personnel used for the execution of the order in the consultancy. The proof must be submitted together with the tender. In addition, it must be proven that the intended auditor has successfully carried out or accompanied an audit under Grundschutz-Compendium. The proof must be submitted together with the tender.

The intended BSI basic protection auditor must have at least three years of experience in advising authorities or companies that have been successfully certified according to BSI basic protection. In addition, he must also demonstrate experience in advising EU paying agencies or their IT service providers on BSI basic protection issues. The proof must be submitted together with the tender.

In addition, the bidder must prove experience in modeling building block libraries and administration in the ISMS tool "Verinice". The proof shall be submitted together with the tender. The bidder shall ensure that representation by a licensed BSI auditor is ensured if the intended BSI auditor fails. Proof thereof shall be submitted together with the tender documents.