Delivery of a subscription for the solution used by the Contracting Authority called Infoblox Threat Defense (hereinafter referred to as the System) and provision of technical support services for a period of 36 months or delivery of an equivalent solution.

Contract award may be requested by Contractors who fulfil the conditions for participation in the procedure concerning: technical or professional capacity Determination of the conditions: (a) The Contracting Authority shall consider the condition to be satisfied if the Contractor demonstrates that it has an ISO/IEC 27001 Certificate or an equivalent document issued by an independent certification body confirming the implementation and maintenance of the information security management system.

The requirement to have an ISO/IEC 27001 certificate or equivalent is due to the need to ensure an adequate level of information security during the performance of a contract involving the provision of ICT services, cybersecurity services, the maintenance of electronic infrastructure or other services related to the subject of the contract. The condition may be demonstrated by applying equivalent security measures.

The equivalent information security measures shall be understood as a documented, implemented and applied information security management system comprising at least (1) information security policy, (2) the identification and risk analysis process, (3) the principles of information security management, (4) the procedures for handling security incidents, (5) the principles of vulnerability management and security updates, (6) the principles of security in the provision of ICT services.

The burden of demonstrating equivalence lies with the Contractor. In the case of Contractors jointly applying for a contract, the condition must be met by at least the Contractor who will carry out the delivery, configuration, implementation, maintenance or provision of technical support for the solution offered.