Detailed description of the various lots: The subject of this contract is the provision of cybersecurity services for the benefit of the teams in charge of the security of RTE's information systems, within the Directorate for Information Systems and Telecommunications (DSIT). As part of its information systems security policy, RTE implements an in-depth defence, adapted to the business challenges of the various IS, so that the IS does not lead to security vulnerabilities which, if exploited, could lead to risks on RTE’s electricity system (disclosure of sensitive information, compromise of the network’s operating bodies, …). In this context, particular attention is paid to the choice of partners involved in the security of TEN IS, in order to ensure their expertise, reliability and commitment to the protection of the information system. The contract is scheduled for a duration of eight (8) years, comprising three (3) firm years and five (5) optional periods of twelve (12) months each. It will be allotted in four (4) lots, of which: - Lot A – Expertise and MCO This lot concerns the execution of recurrent activities and expertise essential to the security of the IS. Examples of activities: ticket processing, technical support, direct billing, handling of operations. This lot also includes the mobilisation of specialised or rare technical expertise, for services such as Level 3 design, integration or support on specific security solutions, pentest, reverse engineering, the performance of CERT analyses, or the implementation of PDIS expertise. The flexibility of the market will thus make it possible to meet very targeted needs expressed on an ad hoc basis by the operating or engineering teams. - Lot B – Engineering projects and studies This lot targets the provision of services in the framework of projects and studies carried out by RTE’s DSIT or in support of external teams. Examples of activities: conduct of cybersecurity-related projects, production of deliverables expected by client projects, technical studies, interventions in the form of packages with specific milestones and deliverables. - Lot C – Governance This lot concerns the development, updating and formalisation of security policies, in close cooperation with the CISO team. Examples of activities: drafting of safety frameworks, policies and procedures, support for regulatory compliance, monitoring of the implementation of policies. - Lot D – Intermediation platforms This lot aims to address specific cybersecurity expertise needs through the use of independent profiles on ad hoc or highly specialised missions. The scope of this lot, strictly limited to cybersecurity activities, is deliberately broad to allow access to rare or advanced skills, often not strictly defined in advance. The main market issues to be met are: - Securing and resiliency of the electrical system; - Regulatory compliance; - Flexibility and agility in meeting needs; - Commitment to social and environmental responsibility (CSR).
Text automatically translated in your browsing language
