Deploy and operate a SaaS-based data-centric security platform (DSP) to analyze, monitor and protect data and access rights

1) current proof of registration in a commercial or professional register of the seat or residence of the applicant (for foreign applicants equivalent certificate of an authority of the home country together with an officially recognised translation)

2) Organization chart of the company structure 3 List of the applicant’s product range, showing that the required product groups can be covered 4 Confirmation by self-declaration on the use of the German language acc. Template, deposited on the DTVP platform (see Section 5.1.11) 5) current certificate of safety of the professional associations 6) current certificate of safety of the social insurance 7 Indication of the company’s turnover over the last three years, showing that the company can settle a contract of this size 9a-c Number of employees of the enterprise in the last 3 years 10 Proof of sufficient creditworthiness by a recognized credit agency (e.g. Creditreform, D&B). The rating must be at least equivalent to a Creditreform rating of a maximum of 250 or a D&B rating of at least 75. 11) Proof of liability insurance with indication of the amount of the cover sum 12) Confirmation by self-declaration that there are no exclusion reasons within the meaning of §§123 and 124 GWB acc. Template, deposited on the DTVP platform (see section 5.1.11) 13) self-declaration, in the course of the Russia sanctions in accordance with Regulation (EU) 833/2014 acc. Template deposited on the DTVP platform (see Section 5.1.11) 14 The applicant can use the capacities of other companies with regard to the necessary economic and financial as well as the technical and professional performance skills if he makes a corresponding declaration on the qualifying loan, including a declaration of commitment according to § 47 SektVO of these companies acc. Template, deposited on the DTVP platform (see 5.1.11, submitted 15) Confirmation Supplier Code of Conduct SWD acc. Template, deposited on the DTVP platform (see Section 5.1.11) or a Code of Conducts, which meets the due diligence requirements of the Supply Chain Due Diligence Act "LkSG" 16 Confidentiality Statement ISMS for bidders, suppliers and/or service providers acc. Template deposited on the DTVP platform (see Section 5.1.11) Incomplete documents or particulars may lead to exclusion from the procedure. The AG reserves the right to examine the quality of the applicant in a qualification procedure.

17) Proof of an active partner status at least. a DSP manufacturer. 18) ISO/IEC 27001 Certification: The participant has a possibility to meet the eligibility criterion. The eligibility criterion is deemed to have been passed if the participant can demonstrate a valid certification according to ISO 27001, whose scope (hosting or retrieval). Cloud Operations, Implementation Services, Support Services and Operational Services) fully includes the services to be provided. Incomplete documents or particulars may lead to exclusion from the procedure. The AG reserves the right to examine the quality of the applicant in a qualification procedure.

19) Self-declaration on data protection, template deposited on the DTVP platform (see Section 5.1.11). Incomplete documents or particulars may lead to exclusion from the procedure. The AG reserves the right to examine the quality of the applicant in a qualification procedure.

20) Indicate project references: Please provide at least 3 but not more than 5 references (max. 2 A4 pages per reference) for comparable solutions provided, not older than 5 years. Please specify/explain as applicable to the solution: - industry, customer and if applicable. Contact person (minimum 1 from the KRITIS environment) - Implementation, operation or provision of a data-centric security solution (e.g. Data Security Platform, Data Security Posture Management or comparable solutions) - Use in an IT environment of comparable scale and complexity - Integration into hybrid IT landscapes (on-premises and cloud) - Services in the area of analysis of authorizations, data accesses or security-relevant activities - Industry and scale of reference - Project description and scope of services - Connected systems / system landscape (e.g. directory services, file servers, cloud services) - Project period - Applicant demonstrates a market presence in the area of IT/cybersecurity or data security (e.g. through company representation, references or comparable proof). Incomplete documents or particulars may lead to exclusion from the procedure. The AG reserves the right to examine the quality of the applicant in a qualification procedure.