Technical security assistance

Justification 1: The applicant will provide, for the last three available years (or any other means for newly created companies), a statement of the total turnover of his company, as well as the turnover relating to services similar to those provided by his company in this contract. Specific minimum level(s) required for the proof No 1: the minimum annual total turnover required for the: - Lot 1 "SIS Security Advice and Expertise": €393,000 excluding tax; * No percentage statement will be taken into account in the overall assessment of justification #1. Proof No. 1 will be evaluated in the following areas: assessment of the CA for services similar to the object of the lot and the applicant's economic dependence on the PAN-26-8 lot 1 market.

Justification 2: The applicant shall list the main services carried out over the last three (3) years in fields identical to those covered by this contract, indicating the object, amount, date and public or private recipient in the following fields for Lot 1 in Security Advice. The candidate will limit the number of references provided to 10 and number them. Only the first 10 references less than or equal to 3 years will be analysed and if no numbering only the most recent 10. Specific level(s) required for substantiation 2: None. Proof No 2 will be evaluated according to the following lines: number, amount, duration of services similar to those covered by this contract.

Supporting document No. 3: The applicant will present the academic and professional qualifications of the executives of his company and of the service providers of the same nature as those of this tender. Specific level(s) required for substantiation 3: The following academic and professional qualifications must be present: - for Lot 1 : o Security Experts : 5, o Security Engineer : 5. A security expert must have at least 8 years' experience in computer security, a security engineer with 3 years' experience in computer security, and a security auditor with 3 years' experience in information systems security audit or intrusion testing.

Rationale 1: will be evaluated according to 2 axes: assessment of the CA for services similar to the object of the lot over the last three years and the applicant's economic dependence on the PAN-26-8 lot 2 market, as well as overall turnover over the last three years. Minimum annual total turnover required for: Lot 2 - Risk analysis and privacy is EUR 225 000 HT per reference year * No percentage statement will be taken into account in the overall assessment of justification No 1.

Justification 2: will be assessed according to the following axis: the object, number, amount, date, duration and recipient of services similar to those covered by this contract. Only the first 10 numbered references will be analysed. In the absence of numbering, the 10 references, the most recent less than or equal to 3 years will be analysed.

Rationale 3: will be evaluated according to the following axis: the number and level of educational and professional qualifications of the profiles requested under this contract. A security expert must have at least 8 years' experience in computer security, a security engineer with 3 years' experience in computer security, and a security auditor with 3 years' experience in information systems security audit or intrusion testing. The following academic and professional qualifications must be present: for Lot No. 2: Security Experts: 4, Security Engineer: 3.

Case No. 1: The applicant will provide, for the last three available years (or any other means for newly created companies), a statement of the total turnover of his company, as well as the turnover relating to services similar to those covered by the present contract carried out by his company. Specific minimum level(s) required for proof No 1: the minimum annual total turnover required for: Lot No 3 - Security audits and intrusion tests are €262,000 HT per reference year. * No percentage statement will be taken into account in the overall assessment of justification #1.

Justification 2: will be evaluated according to the following axis: the object, the recipient, the number, the amount, the duration of the services similar to those covered by this contract. Only the first 10 numbered references will be analysed. In the absence of numbering, the 10 references, the most recent less than or equal to 3 years will be analysed.

Justification 3: will be assessed according to the following lines: The candidate will present the academic and professional qualifications of the executives of his company and of the service providers of the same nature as those of this call for tenders. Specific level(s) required for substantiation 3: The following academic and professional qualifications must be present: for Lot 3 : Security Experts : 4, Security Engineer : 3, Security Auditor : 3, Security Auditor : 2. A security expert must have at least 8 years of experience in computer security, a security engineer with 3 years of experience in computer security, a security auditor with 3 years of experience in security audit of information systems or intrusion tests and a security auditor with 3 years of experience in the development and audits of embedded systems (devices and source code (language C)).

Justification 4: The candidate will present the list of PASSI certificates issued by the ANSSI which he or she has at his or her disposal attesting to his or her qualification to carry out security audits of information systems. Further evidence of equivalent measures, particularly the fact that the candidate is engaged in a PASSI qualification process, is accepted. Specific level(s) of qualification(s) required for substantiation #4 will be taken into account for substantiation #3 of qualification(s) or qualification(s) (with ANSSI) on all PASSI competencies (except PASSI LPM), namely: architecture audit, configuration audit, source code audit, intrusion tests, organizational and physical audit. A candidate who declares himself or herself to be PASSI qualified or in the process of being qualified without providing the supporting evidence will be rejected for Lot 3.

Justification 5: The following areas will be evaluated: the rationale for the CESTI accreditation with the ANSSI on all the following ranges, intrusion detection, anti-virus, malicious code protection, firewall, data erasure, security administration and supervision, identification, authentication and access control, secure communication, secure messaging, secure storage, secure execution environment. Only applications presenting the proof of accreditation in all the scopes described above will be analysed. Any applications that submit a declaration of approval without presenting the supporting documents, or if the supporting documents do not contain all the scopes mentioned, will be rejected.

Case No. 1: The applicant will provide, for the last three available years (or any other means for newly created companies), a statement of the total turnover of his company, as well as the turnover relating to services similar to those covered by this contract carried out by his company. Specific level(s) required for proof No 1: the minimum annual total turnover required for: Lot No 4 - Expertise and implementation in cryptography is 131,000 euros HT per reference year. * No percentage statement will be taken into account in the overall assessment of justification #1.

Supporting document No. 3: The applicant will present the academic and professional qualifications of the executives of his company and of the service providers of the same nature as those of this tender. Specific level(s) required for substantiation 3: The following educational and professional qualifications must be present: For Lot 4 : Expert Cryptography : 2, Engineer Cryptography : 2, Developer Security Embarked Systems : 2, Developer Security Software : 2, Validator Security Embarked Systems : 2, Validator Security Software : 2. An expert in Cryptography must have at least 8 years of experience in the field. A Cryptography Engineer must have at least 5 years of experience in the field. An Embarked Systems Security Developer must have at least 5 years of experience in the field. A software security developer must demonstrate at least 3 years of experience in the field. An Embarked Systems Security Validator must have at least 5 years of experience in the field. A Software Security validator must demonstrate at least 3 years of experience in the field.