Implementation and maintenance of the Information Security Management System (ISMS) and SOC, along with training at the Independent Public Clinical Hospital named after Prof. W. Orłowski CMKP in Warsaw

The Independent Public Clinical Hospital named after Prof. W. Orłowski Medical Center for Postgraduate Education in Poland from Europe region has released this tender for The subject of the contract is the implementation and maintenance of an Information Security Management System (ISMS) and a SOC, along with training, at the Independent Public Clinical Hospital named after Prof. W. Orłowski CMKP in Warsaw, which has been divided into two packages. Package No. 1 - Implementation and maintenance of an Information Security Management System (ISMS) The subject of the contract is the implementation and maintenance of an Information Security Management System (ISMS) at the Ordering Party compliant with the PN-EN ISO/IEC 27001:2023-08 standard, including: a) development of comprehensive ISMS documentation and procedures, including the Information Security Policy, operational procedures and incident response procedures, b) implementation of the ISMS within the Ordering Party’s structures, together with appropriate technical and organizational configuration guidelines, c) planning processes for monitoring the effectiveness of the implemented ISMS and its continuous improvement, d) conducting training for the Ordering Party’s staff: e-learning training on the implemented ISMS documentation and raising awareness of cybersecurity (cyber hygiene) — for current and future employees — as well as on-site training for the Ordering Party’s manager. e) maintaining and improving the ISMS for the period from implementation and formal handover of the ISMS to 36 months from the date of signing the agreement, including periodic ISMS reviews, documentation and risk register updates, compliance reviews, support during inspections and audits, and recommendations for corrective and improvement actions. A detailed description of the subject matter of the order for package no. 1 can be found in Appendix no. 2 to the SWZ. Package no. 2 - Provision of the Security Operations Center Service (SOC Service) The subject matter of the order is the provision of the Security Operations Center service (hereinafter referred to as the SOC Service), including: a) The SOC service will be provided for a period of 36 months from the date of conclusion of the agreement (including pre-implementation analysis and start-up). b) The SOC service must be performed by an entity providing cybersecurity services that meets the organizational and technical conditions resulting from the Act of 5 July 2018 on the national cybersecurity system, in the wording applicable from 3 April 2026 (amended by the Act of 23 January 2026, Journal of Laws of 2026, item 252), and implementing acts to this Act. c) The SOC Service will be provided in real time, continuously 24 hours a day, 7 days a week, 365 days a year (24/7/365). d) For the purposes of the SOC Service, the Contractor will provide a SIEM system and an Incident Management System as a service, on the Contractor's platform or within the Ordering Party's infrastructure, along with documentation and technical support for the entire period of the SOC Service provision. e) The SOC Service's operational procedures (incident classification, response scenarios, playbooks) must be consistent with the ISMS documentation being prepared as part of this procedure, in particular the procedure for managing serious incidents and the logging and monitoring policy. A detailed description of the subject matter of the contract for package no. 2 can be found in Appendix no. 3 to the ToR. The Ordering Party does not require the submission of such evidence with the offer. Information on the subject matter of the evidence can be found in Chapter 8 of the Terms of Reference. with tender notice no. 653892-2026 published on 24 Sep 2026. The tender is due to expire on 01 Oct 2026. This tender is sourced from TED Europa and is eligible for suppliers interested in Security software development services. Interested bidders can obtain further information including complete bid documents or ways to participate by registering on Tender Impulse and referencing via Tender Impulse ID 14954823.