Procurement of vulnerability management software including licenses, implementation, operations and support services

General company profile (form 1 in the application)

Description: self-declaration on the absence of grounds for exclusion in accordance with §§ 123 para. 1 and 4, 124 GWB (form 2 in the application for participation)

Description: Self-declaration that the prerequisites for an exclusion according to § 19 (1) Minimum Wage Act (MiLoG) in relation to the applicant are not available (form 3 in the application for participation)

Description: Self-declaration of the applicant as well as confirmation by the insurance provider of the existence of professional liability insurance (preferably not older than three months) or confirmation letter from an insurance provider to conclude a corresponding insurance in the case of an order which corresponds at least to the following coverage amounts per individual damage (form 4 in the application for participation): Personal injury: min. EUR 4 000 000, damage to property: min. EUR 4 000 000, property damages: min. EUR 4 000 000

Description: Information on the total turnover of the applicant in the last three financial years and on the turnover of the applicant with deliveries and services comparable to the volume of delivery and services advertised (form 4 in the application for participation)

Description: Self-declaration that the employed employees are sufficiently qualified for the software used (form 5 in the application for participation). In particular, the persons employed must have proven skills such as: - Multi-year practical experience in vulnerability management or comparable IT security areas - Experience in complex IT and organizational structures - Experience in cooperation with IT operations, information security and specialist areas - Ability to structuredly analyse, evaluate and prioritize vulnerabilities

Description: The tenderer must prove his technical and practical suitability by submitting suitable reference projects (form 6 in the request to participate). The references serve to prove the experience in the design, implementation, configuration, operation and further development of solutions for vulnerability management or comparable IT security solutions. At least three reference projects from the period 01.01.2022 to 30.06.2026 must be submitted for services provided by the applicant himself. The reference projects should be comparable with the requirements of Stadtwerke Bielefeld in terms of tasks, technical complexity and organisational framework conditions. For each reference, at least the following information must be provided: • Project name • Client (name or anonymized) with indication of the industry, company size and country • Project period • Project content and objective • Scope of services • Solution used or Technologies • Description of the services provided • Presentation of the results achieved • Presentation of comparability with the requirements of Stadtwerke Bielefeld The submitted reference projects must meet the following requirements: At least three reference projects must be submitted, which meet the two requirements mentioned below in total. • At least two reference projects must demonstrate experience in the design, installation, configuration and operation of a vulnerability management solution or a comparable IT security solution. • At least two reference projects must have been carried out in the KRITIS environment or in organisations comparable in terms of size, complexity and regulatory requirements.

Description: Self-declaration of the existence of a partnership with or a partner status with the manufacturer of the offered software (form 7 in the application for participation)

Description: Information on the number of persons employed in the last 3 financial years broken down by financial year (form 9 in the application)

Description: Self-declaration that a German-language (in word and letter, C1 in accordance with the Common European Framework of Reference for Languages) service provision and service processing is ensured during the contract period (form 8 in the application for participation)

Description: Excerpt from the commercial register (excerpt from comparable register in the case of foreign applicants, not older than three months at the end of the application period)

Description: Proof of registration with the professional association

Description: Extract from the Central Commercial Register

Description: Social Security Certificate(s)

Description: Tax Safety Certificate issued by the tax office on taxes paid

Description: Signed unilateral confidentiality agreement

Description: Self-declaration implementing Article 5ki(1) of Regulation (EU) No 833/2014, as last amended by Council Regulation (EU) 2023/2878 of 18. December 2023 (EU sanctions package)