Evaluation des Sofortprogramms Cybersicherheit

The Federal Ministry of Health in Germany from Europe region has released this tender for Due to the high threat level in cyberspace, the German federal legislature has enshrined an immediate cybersecurity program in the federal budget to protect acute inpatient care. This funding program aims to provide systemically important healthcare facilities along the critical (acute) care chain with the necessary resources for modern security measures and simultaneously contribute to compliance with the mandatory NIS-2 directive. The IT systems used will thus be protected preventively against attacks and enabled to quickly return to a functional state in the event of security incidents. This ensures uninterrupted acute care in crisis situations. As part of the immediate cybersecurity program, the overall level of digitalization, and in particular the level of IT security, of systemically important healthcare facilities along the critical care chain will be assessed (see Module 1 for further explanation). Based on recognized maturity models and criteria yet to be defined, systemically important healthcare facilities will conduct a self-assessment to classify and evaluate their IT security and digitalization status. Participation in the self-assessment is mandatory for facilities receiving funding under the immediate action program. However, participation should be open to all eligible, systemically important healthcare facilities along the critical care pathway. The data will then be aggregated and analyzed. Three data collection periods are planned for 2027, 2028, and 2029. The first survey is scheduled for 2027 and will subsequently be conducted annually, with further surveys in 2028 and 2029. Within these data collection periods, the specific data collection dates for the respective groups of facilities can be determined based on the available data and the specific information needs. In particular, the first survey for other systemically important healthcare facilities for which no comparable data currently exists can be conducted earlier. For hospitals, on the other hand, existing findings from the most recent DigitalRadar survey can be used as a basis, and the next survey can be conducted at a later date accordingly. On the one hand, this allows the status quo of systemically important healthcare facilities to be recorded at the three measurement points; on the other hand, a longitudinal trend can be depicted by comparing the three measurement points. This enables an assessment of the extent to which the digitalization/IT security of systemically important healthcare facilities has been improved within the framework of the immediate action program.Based on this, measures to improve modern security precautions, meet the requirements of the NIS-2 Directive, strengthen resilience and security of supply, and optimize resource utilization can also be evaluated. Please refer to the tender documents for details. with tender notice no. 676449-2026 published on 07 Oct 2026. The tender is due to expire on 15 Oct 2026. This tender is sourced from TED Europa and is eligible for suppliers interested in Cyber security. Interested bidders can obtain further information including complete bid documents or ways to participate by registering on Tender Impulse and referencing via Tender Impulse ID 15267637.