Framework agreement Support for IT security

1. self-declaration that there is an entry in the professional or commercial register or another comparable proof of the permitted professional practice. Note: GMSH will, if necessary, request the corresponding proof before awarding the contract.

2. On the basis of the (group) annual financial statements of the company’s last completed financial year (2025) and, if applicable, the (group) annual financial statements of the parent company’s last financial year (if the bidding part of the company is a subsidiary), a rating of the providers acc. the official DSGV or RSU corporate rating procedure by the credit division of IB.SH. The ratings are subsequently categorised. Providers with a DSGV / RSU corporate rating of 12 or worse are not further considered in the procedure = exclusion of proceedings.

3. Self-declaration on proof of a correspondingly existing company liability insurance or that this is concluded accordingly in the case of conclusion of a contract (according to § 45 para 1 no. 3 VgV). The insurance liability for personal, property and property damages should be at least € 4 million.

4. Professional qualification of the applicant (know-how and customer references): description of the range of services, know-how and experience of the company in providing the requested IT security assistance; a description of the business lines in which it operates; A list of min. 3 suitable references on previously executed service contracts in the area of banks, among others already in the development banking environment, in the form of a list of the main comparable services provided in the last three years (2023 - 2025) with keyword-like description (e.g. on the subject of the investigation, range of services) and indication of the service period, the client (municipality) including contact person for reference check with contact details (address, telephone) or reference letter and the scope of the order.

5. Self-declaration on resource availability in relation to the desired term of the contract.

6. A meaningful description of the measures for quality assurance and quality management (max. 10 DIN A4 pages).

7. Self-declaration (form) on contracts and concessions above the EU thresholds implementing Article 5k of Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia's actions destabilising the situation in Ukraine, inserted by Council Regulation (EU) 2022/576 of 8 March 2022. April 2022. The form shall form part of the procurement documents.

8. Self-declaration that the minimum requirements specified in the attached specifications are met.

9. self-declaration that the register of competitions does not contain negative entries. Note: GMSH will obtain a competition register extract before awarding the contract.

10. Self-declaration that the contractor acknowledges the tender conditions and has not entered into any cartel agreements, fixed prices or similar agreements, and excludes the validity of company's own General Terms and Conditions (GTC) and, if these are used on the back of business letters or are attached in any other form to the request for participation, do not become effective. Self-declaration that there is no compelling reason for exclusion according to § 123 and § 126 GWB, unless self-cleaning according to § 125 GWB has taken place. If there is an optional exclusion reason according to § 124 and § 126 GWB and no self-cleaning has taken place according to § 125 GWB, the participation depends on a discretionary decision of the client. If an optional reason for exclusion also affects the commercial reliability within the meaning of § 158 No. 4 BauGB, an exclusion takes place.

12. Presentation of sustainability in the company (work paths of employees, measures relating to training, flexible working models, mobility in the company, energy measures).

13. Self-declaration of the applicant that the obligations under the Minimum Wage Act (MiLoG) are complied with and that any subcontractors commissioned by the applicant in the context of the implementation of a possible contract and their subcontractors also comply with the requirements of MiLoG.

14. Design of the participation documents and meaningful company presentation incl. Service portfolio (name, address, legal form, ownership structure, organisational structure, company size in the relevant segment, personnel, locations, date of incorporation, history, telephone and e-mail address, VAT identification number, bank details, description of the company branch that will provide the advertised service, date of incorporation for this company branch, customers in Germany, other meaningful documents that enable the client to obtain an overall picture of the company).