IT MSP services

The following describes which lot-specific references must be provided. The following information is required for all references: • Name and address of the client, • Contact person of the client including telephone number and email address, • Place of performance, • Performance period, • Contractual relationship (e.g., framework agreement with call-off of services for operations, services, service provision, contract for work and services, or similar), • Description including the nature and scope of the services provided, • Order value (net) per year. One and the same reference may, if applicable, be used for multiple categories and will be counted towards achieving the respective minimum number required. Within each category, a maximum of one reference per client will be considered. In each case, the same client is deemed to be the same legal entity. If multiple references involving the same client are provided within a category, all of these references will be collectively counted as exactly one reference. Multiple considerations of references from the same client within the same category will not occur. All references that were performed for at least six months between September 1, 2023, and the date of notice of this tender will be taken into account. All references must be documented in the attached template. Other forms of presentation will not be evaluated towards achieving the required minimum number. Lot 01: MSP Operations, Control & IT Consulting Category Lot 01 R01: References in the areas of Trading/B2B Sales or Energy Storage Minimum number: o Three (3) references in the electricity and/or gas sector, of which at least one reference must be in the electricity and gas sector (the latter must include services for both the electricity and gas sectors. A reference comprising exclusively services in the electricity sector or exclusively services in the gas sector does not fulfill the reference criterion.) Minimum size: EUR 1 million per reference Relevant areas: • Energy trading, or • B2B sales, or • Energy storage Requirements per reference (must apply to each of the specified references): o Operation of a highly available IT infrastructure, and o Ensuring cybersecurity and data protection, and o Application management, incl. cloud operation components, of energy industry applications, and o Compliance with relevant statutory requirements, and o Comprehensive documentation of IT system landscapes, processes, access rights, and o Within the scope of the EnWG, and o Application of the IT Security Catalogue of the Federal Network Agency (not relevant for references in the energy trading and B2B sales sectors), and o Requirement of applicability of KRITIS-V (not relevant for references in the B2B sales sector), and o Requirement of applicability of NIS-2, and o Application of market communication processes (MaKo), and o Application of 24x7x365 services (not relevant for references in the energy trading and B2B sales sectors), and o Independent 24/7 operational organisation for energy systems and energy companies with an operational base in the EU. Category Lot 01 R02: References in Grid Operations Minimum number: o Three (3) references in the electricity and/or gas sector Minimum size: EUR 1 million per reference Relevant areas (must apply to each of the specified references): • Grid operations Requirements per reference (must apply to each of the specified references): o Secure operation of a highly available IT infrastructure, and o Ensuring cybersecurity and data protection, and o Operation, migration, or implementation of EDM platforms, and o Compliance with relevant statutory requirements, and o Comprehensive documentation of IT system landscape, processes, access rights, and o Within the scope of the EnWG, and o Application of the IT Security Catalogue of the Federal Network Agency, and o Requirement of applicability of KRITIS-V, and o Requirement of applicability of NIS-2, and o Application of market communica…

Continuation of criterion References for specific services: Category Lot 01 R04: References in the field of IT consultancy Minimum number: Three (3) references, of which at least one (1) reference in the field of electricity and gas (the latter must include services for both electricity and gas). A reference which includes only electricity or exclusively gas does not meet the reference criterion.’ Minimum sizes: 100,000 EUR per reference Relevant ranges (must apply to each of the references provided): • No specific area required (except for a reference from the field of electricity and gas) Requirements per reference (must apply to each of the references given): o Answering strategic-conceptual questions about the future-oriented (further) development of the IT infrastructure and application landscape, and o Conceptual responsibility for energy management processes, system integration and interface management, and o Accompanying transition or implementation measures, and o Project language English. Note: A reference in the field of electricity and gas counts only once for the minimum number of three (3) references. Category Lot 01 R05: References from the field of IT consulting - German network operator Minimum number: Three (3) references in the field of electricity and/or gas Minimum sizes: 100,000 EUR per reference Relevant areas (must apply to each of the references given): • German grid operators Requirements per reference (must apply to each of the specified references): o In the scope of application of the EnWG, and o Answer strategic-conceptual questions about the future-oriented (further) development of the IT infrastructure and application landscape, and o Conceptual responsibility for energy economic processes, system integration and interface management, and o Support of transition or implementation measures, and o Project language German, and o independent 24/7 operating organization for energy systems and energy companies with an operating base in the EU. Lot 02: MSP Infrastructure & On-site operation category Lot 02 R01: References from at least one of the areas of commerce, B2B distribution, distribution grid operation or power generation Minimum number: o Three (3) references in the area of electricity and/or gas Minimum sizes: 250,000 EUR per reference Relevant areas (must apply to each of the references specified): Energy trading • B2B distribution • Power generation Requirements per reference (must apply to each of the references specified, unless expressly excluded below): o Highly available, secure on-site operation as well as maintenance of the IT infrastructure, and o Compliance with relevant legal requirements, and o On-site support in case of problem/disruption, and o Comprehensive documentation of networks, processes, accesses, and o Certified in the scope of the EnWG, and o Uptime Institute Tier III, and o Application of the IT security catalogue of the Federal Network Agency (not relevant for references in the area of energy trading and B2B distribution), and o Application requirement of KRITIS-V (not relevant for references in the area of B2B distribution), and o Application requirement of NIS-2.

Formal self-declaration that the company has the correspondingly defined number of employees with the necessary skills for the respective lot in order to accompany the project and to be able to react to any personnel losses. The customer reserves the right to request a list of names before, before or during the offer phase and certificates specified by the applicant in the self-declaration. In the event of non-submission on request, the exclusion of the applicant shall take place. The minimum requirements per lot are defined as follows: Lot 01: MSP Operation, Control & Employees with professional experience in IT operations The applicant employs at least five (5) permanent employees who have • at least ten (10) years of professional experience in IT operations in both the electricity and gas industry, and • have both negotiated German and negotiated English language skills, and • have already been used in the past as project manager for services comparable to the advertised services. Employees with professional experience in IT consulting The applicant employs at least ten (10) permanent employees who have • at least ten (10) years of professional experience in IT consulting in both the electricity and gas industries, and • have both negotiating-secure German and negotiating-secure English language skills, and • at least five (5) have been used in the past as project manager for services comparable to the advertised services. Certificates The applicant must have a total of at least eight (8) valid certificates from the selection listed in the table under point 1.6.1.1 in the selection criteria document of the award documents. There must be at least one (1) valid certificate from each of the six categories, so that each of the six categories is represented at least once. Several certificates may belong to the same person. The certificates do not have to be held by the employees fulfilling the requirements in point 1 (employees with professional experience in IT operations) and point 2 (employees with professional experience in IT consulting). It is also permissible for an employee to have several of the required certificates. For the fulfilment of this criterion, only certificates valid at the time of submission of the request to participate may be considered. Lot 02: MSP Infrastructure & Employees with professional experience in the IT operation The applicant employs at least ten (10) permanent employees who have • at least ten (10) years of professional experience in the IT operation in both the electricity and gas industry, and • have both negotiating-secure German and negotiating-secure English language skills, and • at least five (5) have already been used in the past as project manager for services comparable to the advertised services. Certificates The applicant must have a total of at least ten (10) valid certificates from the selection listed in the table under point 1.6.1.2 in the document selection criteria of the award documents. There must be at least one (1) valid certificate from each of the eight categories, so that each of the eight categories is represented at least once. Several certificates may belong to the same person. The certificates do not have to be held by the employees fulfilling the requirements in point 1 (employees with professional experience in IT operations). It is also permissible for an employee to have several of the required certificates. For the fulfilment of this criterion, only certificates valid at the time of submission of the request to participate may be considered.

For lot 02: Submission of an ISO 9001:2015 quality management system certificate from an accredited certifier. The scope shall include the applicant or the organisational unit intended for the provision of services and the services of the lot. The customer reserves the right to request a valid certificate before or during the tender phase in the case of certificates presented in the competition for participation that expire before the award of the contract. In the event of non-submission, the exclusion of the applicant shall take place.

For lot 01, lot 02: Submission of an ISE/IEC27001:2022 Information Security Management System Certificate from an accredited certifier. The scope shall include the applicant or the organisational unit intended to provide the service and the performance of the relevant lot. The customer reserves the right to request a valid certificate before or during the tender phase in the case of certificates presented in the competition for participation that expire before the award of the contract. In the event of non-submission, the exclusion of the applicant shall take place.

Lot 01, Lot 02: Declaration of Confidentiality I (tendering process) Signature of the declaration of confidentiality provided and commitment to confidentiality of information provided in the tendering process.

Lot 01, Lot 02: Proof by a corresponding insurance confirmation on a company liability insurance with insurance coverage for IT services as well as on a property liability insurance with insurance coverage for damages due to data loss, cyber incidents and system failures. The sums covered must be at least EUR 10 million for personal, property and property damage per claim.

Lot 01 requires at least the following annual sales for three years: • 3 million EUR per year with services in the field of IT-Managed Services, which have been provided for both the electricity and gas industries, and • 1 million EUR per year for IT consultancy services provided to both the electricity and gas industries. Lot 02 requires at least the following annual sales for three years: • 3 million EUR per year with services in the field of IT-Managed Services provided for both the electricity and gas industry. In the informal self-declaration, the sales of the bidder in the respective areas (lot 01 for IT managed services and for IT consultancy, lot 02 for IT managed services) are to be broken down for three years. If the total annual turnover, exclusively in the field of electricity or exclusively in the field of gas, is provided, the criterion is not fulfilled.

For lot 01, lot 02: commercial register extract as proof of the company that the company is registered in the commercial register or - for foreign companies - a comparable business register of its country of origin or self-declaration that the company is not obliged to be registered in the commercial register or business register of its country of origin. In the event of non-submission, the exclusion of the applicant shall take place.