Delivery and implementation of Threat Intelligence solution
At a glance
Bank Gospodarstwa Krajowego (Warszawa, Poland) is tendering: Delivery and implementation of Threat Intelligence solution. Offers are due 16 Nov 2026, 11:00 CET. 24-month contract. Bidders must show, among other things: CISSP, key people.
Already a customer? Open it in the app
Translated from the official notice. The original text is the legally binding one.
Key facts
- Deadline
- not published
- Estimated value
- 24 months
- Duration
- Open procedure
- Procedure
- 19 Oct 2026
- Published
- 720481-2026
- Notice number
- DZK/84/DI/2026
- Reference number
- Miscellaneous software package and computer systems (48900000)
- Main CPV
- PL911
- Place of performance (NUTS)
- not allowed
- Variant offers
- Polish
- Language of offers
The buyer did not publish an estimated value in the notice.
Dates
Every date of the notice and its changes, in order. Times: Brussels / Warsaw.
Notice published
Deadline for offers
Opening of offers
Offers binding until (computed)computed
90 days from the deadline for offers, per the notice
What the buyer wants
The subject of the order is the delivery of the Threat Intelligence solution, an advanced cybersecurity tool providing information about malicious software, data leaks (including data from customer and contractor infrastructure) or new techniques used by hacker groups, sponsored by foreign governments, enabling effective and precise identification. Basic scope: delivery of licences with the support of the contractor and producer and implementation. Optional scope: additional contractor support.
CPV codes
- 48900000Miscellaneous software package and computer systemsmain
- 72260000Software-related services
- 72267000Software maintenance and repair services
Conditions for participation & required documents
What the notice asks bidders to prove, and the documents it requires. Full text below.
Conditions in the notice
- CertificatesCISSP
- Key peopleNamed roles, CVs or minimum team
Detected automatically in the published notice. Always confirm against the tender documents.
Show the notice text (2)
- The Contracting Authority shall consider the condition to be fulfilled if the Contractor demonstrates that during the last 3 (three) years before the deadline for the submission of tenders and if the period of business is shorter, within that period, it has duly executed, and in the case of recurrent or continuous benefits, it shall also duly: i. at least 2 (two) contracts involving the delivery of the Third Intelligence solution (hereinafter the ‘TI solution’), with:
- the value of one contract was not less than PLN 800 000,00 gross,
- at least 1 (one) contract included the implementation and configuration of the TI solution offered,
- at least 1 (one) contract must be performed for the financial institution or financial sector institution. ii. at least 2 (two) orders to carry out risk analysis within the meaning of Cyber Threat Intelligence, including landscape analysis of cyber threats in terms of customer specificities, risk profiling and sector risk analysis, with:
- at least 1 (one) contract being executed/executed for a financial institution or financial sector institution.
- Where the subject-matter of the contract is repeated or continuous services The Ordering Party allows not only orders executed (i.e. completed), but also executed. In such a case, the Contracting Authority shall require that the part of the contract completed until the time limit for the submission of tenders meets the requirements laid down by the Contracting Authority in the condition.
- Where the value of the contract is expressed in a currency other than PLN, The contractor shall be obliged to convert it to PLN on the basis of the average exchange rate of the currency published by the NBP (as shown in Table A of the Exchange Rates of Foreign Exchange) on the day of publication of this contract in the Official Journal of the European Union.If the publication of a contract notice in the Official Journal of the European Union occurs on the day when the NBP does not publish the average rate table, the rate from the average rate table, published on the next day following the publication of the contract notice in the Official Journal of the European Union, shall be adopted.
- The Contracting Authority shall consider the condition to be fulfilled if the Contractor demonstrates that he has or will have a team of persons who will be designated to carry out the contract, including persons with the following professional qualifications, education, experience described below:
- Persons who are fluent in Polish who have experience in designing and implementing the offered TIP system and who have the current certificate of engineer of the offered TIP system. - Two people two. People who are fluent in Polish who have experience in integrating the offered TIP system with the Splunk Enterprise product-based SIEM system owned by the Contracting Authority and who have the current Splunk Enterprise Security Certificate Admin or Splunk Enterprise Certified Architect certificate or equivalent and TIP system engineer certificate. - Two people
- People who are fluent in Polish who have experience in the design of IT systems in the field of safety and design and implementation of Splunk products and have current ISC2 CISSP certificates or equivalent and Splunk Core Certified Consultant or Splunk Enterprise Certified Architect or equivalent. - Two people
- People who are fluent in Polish who have experience in designing and integrating the TIP system offered with the Customer's SOAR system based on Palo Alto Networks XSOAR and who have the current Palo Alto Networks Certified XSOAR Engineer certificate or equivalent. - 2 people
- A person who is fluent in Polish who has experience in the field of MITRE ATT&CK framework and has the current certificate Adversary Emulation Methodology Certification or equivalent. - 1 person
- In the case of the submission of equivalent certificates, they are required to include:
- having the same scope and level of knowledge and experience;
- confirming the certificate with an examination if obtaining a certificate requires an examination. An equivalent certificate may not be issued by the Contractor or a subsidiary of the Contractor. Along with the equivalent certificate, a document shall be submitted confirming that the scope of that certificate is equivalent to the certificate indicated by the Contracting Authority.NOTE: The Contracting Authority allows the Contractor to demonstrate the same person in a maximum of 2 (two) different profiles. The conditions for participation in the proceedings should be confirmed by making the declarations and documents referred to in Chapter VIII of the WWZ.
Options, renewals, framework
- Options: foreseen
This is the SalesDots check: every condition in the notice, the company registers and your whole company profile — certificates with expiry dates, team, references and financials — in one place. The results below are an example; you see the real one after signing in.
12 met · 1 expiring · 2 missing · 2 to check
Conditions in this notice
- CISSPcertificate in the profile, valid on the bid dateIn your profile
- Key people2 people in the team meet itIn your profile
Registers — checked automatically
- KRS / CEIDG statuscompany active, representation matchesVerified
- NIP and VAT white listactive VAT payer, account listedVerified
- Beneficial owners (CRBR)filing matches KRSVerified
- EU VAT (VIES)number active in VIESVerified
- LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
- Sanctions screeningcompany and owners not listedVerified
Company profile — matched to the requirements
- ISO/IEC 27001company certificate, validIn your profile
- ISO 9001company certificate — renew before you bidExpires before the deadline
- ISO 22301add it or bring in a consortium partnerNot in your profile yet
- Project manager — PMP / PRINCE22 people, 5+ years of experienceIn your profile
- Solution architect — TOGAFno certified personNot in your profile yet
- IT references, last 3 years3 public-sector implementationsIn your profile
- Turnover, last 3 yearsfrom financial statementsIn your profile
- Partner status (Microsoft, SAP, Oracle)to confirm with the vendorNeeds a look
- Security clearance (Poufne, NATO)to check in the teamNeeds a look
Free · no account
Get tenders like this one by e-mail
Free check · 10 seconds
Does your company fit this tender?
Award criteria
The full criteria and their weights, as published in the notice.
- Price (C)50%
Under this criterion, points will be awarded according to the following formula: "C =" "Cmin" "Cb" × 50 point where: C – number of points of tender tested in criterion Cmin. – the lowest of the prices offered for the entire contract of Cb tenders received – the price of the tender to be examined The maximum number of points to be obtained under this criterion is 50. The final result of this action shall be rounded to two decimal places.
- Additional functionalities50%
Under this criterion, points will be awarded based on the declaration in the Contractor's tender, corresponding to the number of offered additional functionalities selected from those indicated in the table below, in accordance with the scoring principle specified below. 1. WO.1 - Data collection – database size: The TI Solution must contain a minimum of 5 billion objects in its database. 2. WO.2 - Data collection – number of sources: The TI Solution must collect data from a minimum of 900,000 distinct sources globally. 3. WO.3 - Information retrieval - Graphical query builder: For searching a given phrase (keyword), the TI Solution must support specifying it in other languages and alphabets as well, at a minimum: - Russian and in the Cyrillic script - German - English - Arabic and in the Arabic script. 4. WO.4 - File detonation in a sandbox system - Sandbox system: The TI Solution must support the detonation of files up to 3 GB in size. 5. WO.5 - Interaction in the sandbox system: The sandbox system must enable the analyst to interact with the environment in which the sample is executed via remote desktop. 6. WO.6 - Automated generation of detection rules: The TI Solution must include an engine for the automated generation of detection rules, at a minimum YARA and SIGMA rules. Each automatically generated detection rule must present automatically developed detection patterns so that the analyst can analyze them directly within the platform. Additionally, the system must sho…
Buyer
Bank Gospodarstwa Krajowego
- Address
- Al. Jerozolimskie 7, 00-955 Warszawa, Poland
- Region (NUTS)
- PL911
- Website
- www.bgk.pl
- Official contact address
- [email protected]
- The functional mailbox published in the notice. We never publish personal data.
Register identifiers
- NIP (tax id)
- 5250012372
- REGON
- 000017319
- EU VAT
- PL5250012372
- LEI
- 259400BCOV9JJIGLYF05
What this buyer bought before
138 IT contract award notices 2016–2026, €397m in total.
Zawarcie umowy ramowej na usługę przeprowadzania testów bezpieczeństwa na rzecz Banku Gospodarstwa Krajowego
Winner: Efigo sp. z o.o. +4 more contractors · 10 bids
PLN 148,553Framework agreement — maximum value
25 Sept 2026
Świadczenie usługi monitorowania i reagowania na alerty bezpieczeństwa i alerty dostępności w infrastrukturze serwerowej oraz sieciowej Banku w ramach SOC (Sec…
Winner: ComCERT S.A. · 2 bids
PLN 546,120
21 Sept 2026
Przedłużenie wsparcia technicznego producenta dla posiadanego oprogramowania IBM Cognos Planning Analytics wraz z zakupem dodatkowych licencji IBM Cognos (lub …
Winner: MINERAL MIDRANGE S.A. · 2 bids
PLN 1.7m
21 Sept 2026
Zakup subskrypcji oprogramowania firmy Elastic Stack albo oprogramowania równoważnego wraz ze wsparciem technicznym producenta
Winner: Linux Polska Sp. z o.o. · 3 bids
PLN 3.6m
17 Jul 2026
Dostawa licencji oraz pakietów suportowych dla systemu klasy Database Activity Monitoring (DAM) wraz ze świadczeniem usług serwisu i wsparcia technicznego
Winner: Trafford IT sp. z o.o. sp. k. · 1 bid
PLN 1.3m
7 Jul 2026
Zawarcie umowy ramowej na usługę przeprowadzania testów bezpieczeństwa na rzecz Banku Gospodarstwa Krajowego
Winner: AFINE sp. z o.o. +9 more contractors · 14 bids
PLN 2.9mFramework agreement — maximum value
2 Jul 2026
How to submit an offer
Offers are submitted only on the buyer's platform, before the deadline for offers.
- bgk.eb2b.com.pl
- Platform
- yes
- Electronic submission
- no
- Electronic auction
Questions & answers
What is the deadline for offers in "Delivery and implementation of Threat Intelligence solution"?
Offers are due by 16 Nov 2026, 11:00 CET.
What is the estimated value?
The buyer did not publish an estimated value in the notice.
Who is the buyer?
Bank Gospodarstwa Krajowego (Warszawa, Poland); NIP (tax id) 5250012372, REGON 000017319, LEI 259400BCOV9JJIGLYF05.
Where and how do I submit an offer?
Offers are submitted electronically on bgk.eb2b.com.pl.
How are offers scored?
Price (C) 50%, Additional functionalities 50%.
Which procedure is used?
Open procedure.
Win it with SalesDots
Read the documents for you
SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.
Analyse documentsMatch it with your profile
Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.
Check my fitPrepare your response
Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.
Start a responseNever miss a change
Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.
Track this tenderSource: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 3 Nov 2026, 02:22 CET.