Managed SOC and Digital Forensics and Incident Response (DFIR)
At a glance
kommunit IT-Zweckverband Schleswig-Holstein (Elmshorn, Germany) is tendering: Managed SOC and Digital Forensics and Incident Response (DFIR). Offers are due 26 Oct 2026, 10:00 CET. 48-month contract. Bidders must show, among other things: BSI IT-Grundschutz, ISO 27001, SOC 2, references, key people, insurance.
Translated from the official notice. The original text is the legally binding one.
Key facts
- Deadline
- not published
- Estimated value
- 48 months
- Duration
- Negotiated with call
- Procedure
- 22 Oct 2026
- Published
- 730912-2026
- Notice number
- I20260706-0559
- Reference number
- Systems and technical consultancy services (72220000)
- Main CPV
- DEF09
- Place of performance (NUTS)
- not allowed
- Variant offers
- German
- Language of offers
The buyer did not publish an estimated value in the notice.
Dates
Every date of the notice and its changes, in order. Times: Brussels / Warsaw.
Notice published
Deadline for offers
What the buyer wants
The subject of this call for tender is the commissioning of two complementary but separate security services:
- Managed Security Operations Center (SOC) 24/7 – Operation of a SOC Level 1 for the continuous monitoring of the client’s system landscape
- Digital Forensics and Incident Response (DFIR) – Provision of capacities for the structured handling of serious security incidents on a separate contract. The services must be offered by the tenderer taking into account the procurement documents, including application and tender conditions, catalogue of requirements, specifications, contract and price sheet.
Managed SOC and Digital Forensics and Incident Response (DFIR)
CPV codes
- 72220000Systems and technical consultancy servicesmain
Conditions for participation & required documents
What the notice asks bidders to prove, and the documents it requires. Full text below.
Conditions in the notice
- CertificatesBSI IT-Grundschutz · ISO 27001 · SOC 2
- ReferencesSimilar contracts delivered before
- Key peopleNamed roles, CVs or minimum team
- InsuranceProfessional or liability insurance
Detected automatically in the published notice. Always confirm against the tender documents.
Show the notice text (7)
Proof of commercial or professional registration in accordance with the legislation of the Community country in which it is established. The professional or commercial register statement must not be older than 6 months in relation to the end of the participation period.
Proof of an insurance policy valid – in relation to the end of the participation period – according to which the bidder has a company / professional liability insurance.
Four reference projects from the years 2022 - 2026 have to be submitted by the bidder, which are comparable to the advertised service item. kommunit reserves the right to request reference confirmation letters from the respective clients at short notice. The references shall be taken into account in the evaluation of requests to participate. (--> Assessment matrix aptitude test) The criteria will be used to select candidates to be invited to the second phase of the procedure.
Self-declaration on "Russia sanctions".
Declaration that only personnel are employed who have knowledge of German in words and writing at at least C1 level.
Proof that bidders have fulfilled their obligations to pay taxes, duties. For this purpose, they shall provide a certificate from the tax office. The certificate of the tax office must not be older than 12 months in relation to the end of the participation period.
Proof of one of the following certifications (ISO 27001, BSI Basic Protection, SOC 2)
This is the SalesDots check: every condition in the notice, the company registers and your whole company profile — certificates with expiry dates, team, references and financials — in one place. The results below are an example; you see the real one after signing in.
13 met · 3 expiring · 2 missing · 2 to check
Conditions in this notice
- BSI IT-Grundschutzcertificate in the profile, valid on the bid dateIn your profile
- ISO 27001renew before you bidExpires before the deadline
- SOC 2certificate in the profile, valid on the bid dateIn your profile
- References3 matching references from the last 3 yearsIn your profile
- Key people2 people in the team meet itIn your profile
- Insuranceliability policy expires before the bid deadlineExpires before the deadline
Registers — checked automatically
- Handelsregistercompany active, managing directors matchVerified
- Transparenzregister (beneficial owners)entry matches the shareholdersVerified
- Wettbewerbsregister (exclusions)no entry that excludes you from public contractsVerified
- EU VAT (VIES)number active in VIESVerified
- LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
- Sanctions screeningcompany and owners not listedVerified
Company profile — matched to the requirements
- ISO 9001company certificate — renew before you bidExpires before the deadline
- ISO 22301add it or bring in a consortium partnerNot in your profile yet
- Project manager — PMP / PRINCE22 people, 5+ years of experienceIn your profile
- Solution architect — TOGAFno certified personNot in your profile yet
- IT references, last 3 years3 public-sector implementationsIn your profile
- Turnover, last 3 yearsfrom financial statementsIn your profile
- Partner status (Microsoft, SAP, Oracle)to confirm with the vendorNeeds a look
- Security clearance (Poufne, NATO)to check in the teamNeeds a look
Award criteria
The full criteria and their weights, as published in the notice.
- Quality criterion37.4%
Quality and concepts
- cost criterion62.6%
Costs
Buyer
kommunit IT-Zweckverband Schleswig-Holstein
- Address
- Ramskamp 71 - 75, 25337 Elmshorn, Germany
- Region (NUTS)
- DEF09, DEF0B
- Website
- www.deutsche-evergabe.de
Register identifiers
- Registration no. in the notice
- 9189
What this buyer bought before
21 IT contract award notices 2020–2026, €362,061 in total.
Erweiterung um ein Führerscheinverfahren
Winner: prokommunal - Softwareentwicklungs- und Beratungsgesellschaft mbH
value not disclosed
11 Sept 2026
Projektunterstützung und Beratung Zulassungsstelle 2026
Winner: choose my mission GmbH · 3 bids
value left out (implausible in the notice)
7 Sept 2026
Überlassung einer ISMS/DSMS/BCMS/RMS Software
Winner: DextraData GRC Technologies GmbH · 4 bids
value left out (implausible in the notice)
12 May 2026
Beschaffung Storage
Winner: Bechtle direct GmbH · 2 bids
value left out (implausible in the notice)
15 Jul 2025
Kauf und Lieferung von iPads mit DEP und Zubehör für Education
Winner: REDNET GmbH · 7 bids
value not disclosed
10 Jul 2025
Beschaffung DDI-Softwaresystem
Winner: MUCNET GmbH · 1 bid
value left out (implausible in the notice)
27 Jun 2025
How to submit an offer
Offers are submitted only on the buyer's platform, before the deadline for offers.
- www.deutsche-evergabe.de
- Platform
- yes
- Electronic submission
- no
- Electronic auction
Questions & answers
What is the deadline for offers in "Managed SOC and Digital Forensics and Incident Response (DFIR)"?
Offers are due by 26 Oct 2026, 10:00 CET.
What is the estimated value?
The buyer did not publish an estimated value in the notice.
Who is the buyer?
kommunit IT-Zweckverband Schleswig-Holstein (Elmshorn, Germany).
Where and how do I submit an offer?
Offers are submitted electronically on www.deutsche-evergabe.de.
How are offers scored?
Quality criterion 37.4%, cost criterion 62.6%.
Which procedure is used?
Negotiated with call.
Win it with SalesDots
Read the documents for you
SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.
Analyse documentsMatch it with your profile
Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.
Check my fitPrepare your response
Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.
Start a responseNever miss a change
Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.
Track this tenderSource: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 24 Oct 2026, 01:56 CEST.