{"bekendtgoerelseNoegle":{"noticeId":{"value":"9b434abc-9d9f-40cf-9072-cc82b7f561fa"},"noticeVersion":{"value":"01"},"noticePublicationNumber":{"value":"00570392-2025"}},"htmlDA":"\n\n \n 1 Køber1.1 KøberOfficielt navn: Danmarks Nationalbank\n Køberens retlige status: Offentligretligt organ\n Den ordregivende myndigheds aktivitet: Økonomiske anliggender\n \n \n 2 Procedure2.1 ProcedureTitel: Framework agreement on the delivery of purple teaming tests\n Beskrivelse: This procurement seeks to enter into framework agreements with 3 Suppliers, that are\n experts within the field of purple teaming testing. Any Statement of Work will be\n awarded suite of a subsequent re-opening of the competition.
The purple teaming\n test (PTT) shall be conducted on Danmarks Nationalbank. The purpose of the purple\n teaming test is to enhance the Customer’s cybersecurity posture by integrating offensive\n and defensive security teams to simulate real-world attack scenarios and improve detection\n and response capabilities. The test shall be conducted as a cooperation between the\n offensive red team provided by the supplier and the defensive blue team.
The test\n shall assess how well the Customer is equipped to protect against, detect, respond\n to and potentially recover from cyber-attacks from threat actors with realistically\n advanced capabilities and modus operandi. The test shall to the farthest possible\n extent mimic relevant real actors’ capabilities towards the defensive capabilities\n at the Customers disposal.
The framework agreement will be awarded to three (3)\n suppliers.\n Identifikator for proceduren: d9f31002-81af-4d13-870f-a6c4ad8b9d01\n \n Udbudsprocedure: Begrænset\n Proceduren er en hasteprocedure: nej\n 2.1.1 FormålKontraktens hovedformål: Tjenesteydelser\n Primær klassifikation (cpv): 72600000 Support- og konsulentvirksomhed i forbindelse med edb\n Supplerende klassifikation (cpv): 72500000 Servicevirksomhed i forbindelse med datamater\n \n 2.1.2 UdførelsesstedPostadresse: Langlinie Allé 47 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n 2.1.3 VærdiAnslået værdi eksklusiv moms: 24.000.000 Dansk krone\n Rammeaftalens maksimumværdi: 30.000.000 Dansk krone\n \n 2.1.4 Generelle oplysningerYderligere oplysninger: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply. All communication in connection with the tender procedure, including\n questions and answers, must take place through the electronic tendering system. Reference\n is made to the tender specifications and appendix B for information concerning questions\n and answers.
Interested operators are requested to keep updated via the electronic\n tendering system. If the candidate encounters problems with the system, please contact\n support by e-mail, dksupport@eu-sup ply.com, or telephone (+45) 70 20 80 14.
As\n its application, the candidate must submit an ESPD as preliminary documentation of\n the circumstances set out in section 148(1), paras (1)-(3) of the Danish Public Procurement\n Act (udbudsloven) and section 137(1) para (1) and para (3) and para (4) and para (5)\n of the Danish Public Procurement Act. It is not necessary for the candidate to sign\n the ESPD document. For groups of operators (e.g. a consortium), a separate ESPD must\n be submitted for each participating operator. Where the candidate is a group of operators,\n the ESPD document of each participant in the group must be signed by the
participant\n in question. The candidate heading the group and submitting the application is not\n required to sign its ESPD document. If the candidate relies on the capacities of other\n entities, an ESPD must be submitted for and signed by each of the entities on which\n it relies.
Before the award decision is made, the tenderer to whom the contracting\n entity intends to award the contract must provide documentation of the information\n submitted in the ESPD pursuant to sections 151-152, cf. section 153 of the Danish\n Public Procurement Act. As an alternative to the documentation mentioned in sections\n 153-155, 157 and 158 of the Danish Public Procurement Act, the applicant and tenderer\n may submit to the contracting entity a certificate of registration in an official\n list of approved economic operators, see section 156 of the Danish Public Procurement\n Act, issued by the competent authority. The contracting entity only accepts certificates\n of registration in an official list from applicants and tenderers established in the\n country holding the official list.
The contracting entity will select the number\n of candidates by applying the selection criteria stated
in this contract notice,\n unless the contracting entity receives no more than the stated number of compliant\n requests for participation.
Section 134a of the Danish Public Procurement Act\n shall apply to this tender procedure.
Participation in the tender procedure may\n only take place by electronic means via the electronic tendering system used by the\n contracting entity. For access to the tender documents, the tenderer must be registered\n or register as a user. If the tender contains several versions of the same document,\n the latest uploaded version will apply. All communication in connection with the tender\n procedure, including questions and answers, must
take place through the electronic\n tendering system. Reference is made to the tender specifications and
appendix\n B for information concerning questions and answers.
Interested operators are\n requested to keep updated via the electronic tendering system. If the tenderer encounters\n problems with the system, please contact support by e-mail, dksupport@eu-supply.com,\n or telephone (+45) 70 20 80 14.
The tenderer must submit an ESPD with the\n tender as preliminary documentation of the circumstances set out in section 148(1),\n paras (1)-(3) of the Danish Public Procurement Act (udbudsloven). It is not necessary\n for the tenderer to sign the ESPD document. For groups of operators (e.g., a consortium),\n a separate ESPD must be submitted for each participating operator. Where the tenderer\n is a group of operators, the ESPD document of each participant in the group must be\n signed by the
participant in question. The tenderer heading the group and submitting\n the tender is not required to sign its ESPD document. If the tenderer relies on the\n capacities of other entities, an ESPD must be submitted for and signed by each of\n the entities on which the tenderer relies. It should be noted that each candidate\n may only submit one application for prequalification.
Before the award decision\n is made, the tenderer to whom the contracting entity intends to award the contract\n must provide documentation of the information submitted in the ESPD pursuant to sections\n 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative to\n the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the tenderer may submit to the contracting entity a certificate of\n registration in an official list of approved economic operators, see section 156 of\n the Danish Public Procurement Act, issued by the competent authority. The contracting\n entity only accepts certificates of registration in an official list from tenderers\n established in the country holding the official list.
The difference between\n the estimated value and the maximum value is due to the uncertainty of the final value\n of the individual framework agreements. The estimated value thus reflects the contracting\n entity’s estimate of the expected purchase under the framework agreements, whereas\n the maximum value reflects the highest estimated value of all contracts to be performed\n within the term of the framework agreements. This takes into account, partly, the\n contracting entity’s expectations based on the most likely purchase under the framework\n agreement, partly, the expected uncertainty of such
estimate. In relation to the\n estimated value, particular attention is drawn to the fact that the tenderers are\n not guaranteed any minimum purchase under the framework agreement, and the estimate\n therefore implies no commitment on the part of the contracting entity to make a minimum\n purchase under the framework agreement. Decisive for the estimated value of the framework\n agreement can be the unexpected complexity in the tests. It is specifically pointed\n out to the tenderer that the tenderer is bound by the prices offered, irrespective\n of the turnover specifically achieved under the framework agreement. This means that\n the tenderer is also bound by the prices offered if the specific turnover deviates\n from the estimated value, both upwards and downwards. The maximum quantity to be delivered\n under the framework agreement is DKK 30 millio exclusive VAT.
The contracting\n entity may use the procedure of section 159(5) of the Danish Public Procurement Act\n in the event that tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the contract will\n commence on signature of the framework agreement.
An information meeting\n will be held Monday 8 September 2025, at 13.00-14.00 on MS teams. For practical reasons,\n operators interested in participating in the meeting are asked to sign up via the\n electronic tendering system not later than 1 days before the meeting with indication\n of name of business and names and e-mails of the participants. The contracting entity\n will draw up brief minutes of the information meeting which will be announced to all\n tenderers participating in the tender procedure via the electronic tendering system.\n \n \n The Danish Public Procurement Act - The tender procedure is covered by the Danish Public Procurement Act (Act No. 1564\n of 15 December
2015 as amended), which implements the Public Procurement Directive\n (Directive 2014/24/EU).\n \n \n \n 5 Delkontrakt5.1 Teknisk ID for delkontrakten: LOT-0000Titel: Framework agreement on the delivery of purple teaming tests\n Beskrivelse: This procurement seeks to enter into framework agreements with 3 Suppliers, that are\n experts within the field of purple teaming testing. Any Statement of Work will be\n awarded suite of a subsequent re-opening of the competition.
The purple teaming\n test (PTT) shall be conducted on Danmarks Nationalbank. The purpose of the purple\n teaming test is to enhance the Customer’s cybersecurity posture by integrating offensive\n and defensive security teams to simulate real-world attack scenarios and improve detection\n and response capabilities. The test shall be conducted as a cooperation between the\n offensive red team provided by the supplier and the defensive blue team.
The test\n shall assess how well the Customer is equipped to protect against, detect, respond\n to and potentially recover from cyber-attacks from threat actors with realistically\n advanced capabilities and modus operandi. The test shall to the farthest possible\n extent mimic relevant real actors’ capabilities towards the defensive capabilities\n at the Customers disposal.
The framework agreement will be awarded to three (3)\n suppliers.\n \n 5.1.1 FormålKontraktens hovedformål: Tjenesteydelser\n Primær klassifikation (cpv): 72600000 Support- og konsulentvirksomhed i forbindelse med edb\n Supplerende klassifikation (cpv): 72500000 Servicevirksomhed i forbindelse med datamater\n \n 5.1.2 UdførelsesstedPostadresse: Langlinie Allé 47 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n \n \n 5.1.5 VærdiAnslået værdi eksklusiv moms: 24.000.000 Dansk krone\n Rammeaftalens maksimumværdi: 30.000.000 Dansk krone\n \n 5.1.6 Generelle oplysningerReserveret deltagelse: Deltagelse uden forbehold.\n Indkøbsprojekt, der ikke finansieres med EU-midler\n Udbuddet er omfattet af aftalen om offentlige udbud (GPA): ja\n Yderligere oplysninger: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply. All communication in connection with the tender procedure, including\n questions and answers, must take place through the electronic tendering system. Reference\n is made to the tender specifications and appendix B for information concerning questions\n and answers.
Interested operators are requested to keep updated via the electronic\n tendering system. If the candidate encounters problems with the system, please contact\n support by e-mail, dksupport@eu-sup ply.com, or telephone (+45) 70 20 80 14.
As\n its application, the candidate must submit an ESPD as preliminary documentation of\n the circumstances set out in section 148(1), paras (1)-(3) of the Danish Public Procurement\n Act (udbudsloven) and section 137(1) para (1) and para (3) and para (4) and para (5)\n of the Danish Public Procurement Act. It is not necessary for the candidate to sign\n the ESPD document. For groups of operators (e.g. a consortium), a separate ESPD must\n be submitted for each participating operator. Where the candidate is a group of operators,\n the ESPD document of each participant in the group must be signed by the
participant\n in question. The candidate heading the group and submitting the application is not\n required to sign its ESPD document. If the candidate relies on the capacities of other\n entities, an ESPD must be submitted for and signed by each of the entities on which\n it relies.
Before the award decision is made, the tenderer to whom the contracting\n entity intends to award the contract must provide documentation of the information\n submitted in the ESPD pursuant to sections 151-152, cf. section 153 of the Danish\n Public Procurement Act. As an alternative to the documentation mentioned in sections\n 153-155, 157 and 158 of the Danish Public Procurement Act, the applicant and tenderer\n may submit to the contracting entity a certificate of registration in an official\n list of approved economic operators, see section 156 of the Danish Public Procurement\n Act, issued by the competent authority. The contracting entity only accepts certificates\n of registration in an official list from applicants and tenderers established in the\n country holding the official list.
The contracting entity will select the number\n of candidates by applying the selection criteria stated
in this contract notice,\n unless the contracting entity receives no more than the stated number of compliant\n requests for participation.
Section 134a of the Danish Public Procurement Act\n shall apply to this tender procedure.
Participation in the tender procedure may\n only take place by electronic means via the electronic tendering system used by the\n contracting entity. For access to the tender documents, the tenderer must be registered\n or register as a user. If the tender contains several versions of the same document,\n the latest uploaded version will apply. All communication in connection with the tender\n procedure, including questions and answers, must
take place through the electronic\n tendering system. Reference is made to the tender specifications and
appendix\n B for information concerning questions and answers.
Interested operators are\n requested to keep updated via the electronic tendering system. If the tenderer encounters\n problems with the system, please contact support by e-mail, dksupport@eu-supply.com,\n or telephone (+45) 70 20 80 14.
The tenderer must submit an ESPD with the\n tender as preliminary documentation of the circumstances set out in section 148(1),\n paras (1)-(3) of the Danish Public Procurement Act (udbudsloven). It is not necessary\n for the tenderer to sign the ESPD document. For groups of operators (e.g., a consortium),\n a separate ESPD must be submitted for each participating operator. Where the tenderer\n is a group of operators, the ESPD document of each participant in the group must be\n signed by the
participant in question. The tenderer heading the group and submitting\n the tender is not required to sign its ESPD document. If the tenderer relies on the\n capacities of other entities, an ESPD must be submitted for and signed by each of\n the entities on which the tenderer relies. It should be noted that each candidate\n may only submit one application for prequalification.
Before the award decision\n is made, the tenderer to whom the contracting entity intends to award the contract\n must provide documentation of the information submitted in the ESPD pursuant to sections\n 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative to\n the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the tenderer may submit to the contracting entity a certificate of\n registration in an official list of approved economic operators, see section 156 of\n the Danish Public Procurement Act, issued by the competent authority. The contracting\n entity only accepts certificates of registration in an official list from tenderers\n established in the country holding the official list.
The difference between\n the estimated value and the maximum value is due to the uncertainty of the final value\n of the individual framework agreements. The estimated value thus reflects the contracting\n entity’s estimate of the expected purchase under the framework agreements, whereas\n the maximum value reflects the highest estimated value of all contracts to be performed\n within the term of the framework agreements. This takes into account, partly, the\n contracting entity’s expectations based on the most likely purchase under the framework\n agreement, partly, the expected uncertainty of such
estimate. In relation to the\n estimated value, particular attention is drawn to the fact that the tenderers are\n not guaranteed any minimum purchase under the framework agreement, and the estimate\n therefore implies no commitment on the part of the contracting entity to make a minimum\n purchase under the framework agreement. Decisive for the estimated value of the framework\n agreement can be the unexpected complexity in the tests. It is specifically pointed\n out to the tenderer that the tenderer is bound by the prices offered, irrespective\n of the turnover specifically achieved under the framework agreement. This means that\n the tenderer is also bound by the prices offered if the specific turnover deviates\n from the estimated value, both upwards and downwards. The maximum quantity to be delivered\n under the framework agreement is DKK 30 millio exclusive VAT.
The contracting\n entity may use the procedure of section 159(5) of the Danish Public Procurement Act\n in the event that tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the contract will\n commence on signature of the framework agreement.
An information meeting\n will be held Monday 8 September 2025, at 13.00-14.00 on MS teams. For practical reasons,\n operators interested in participating in the meeting are asked to sign up via the\n electronic tendering system not later than 1 days before the meeting with indication\n of name of business and names and e-mails of the participants. The contracting entity\n will draw up brief minutes of the information meeting which will be announced to all\n tenderers participating in the tender procedure via the electronic tendering system.\n \n 5.1.9 UdvælgelseskriterierKilder til udvælgelseskriterier: Bekendtgørelse\n Kriterium: Referencer på specificerede tjenesterBeskrivelse: The candidate must submit the ESPD with the following information:
A list of the\n 5 most significant comparable services that the candidate has carried out in the latest\n 3 years before the expiry of the deadline for application.
Only references\n relating to services carried out at the time of the deadline for application will\n be given importance in the evaluation of whether the requirements regarding technical\n and professional capacity have been complied with, see below. Hence, in the case of\n an ongoing task, only the part of the services already performed at the time of the\n deadline for application will be included in the evaluation of the reference.
Each\n reference is requested to include a brief description of the deliveries made. The\n description of the delivery should include a clear description of the services to\n which the delivery relates and the candidate’s role(s) in the performance of the delivery.\n The reference is furthermore requested to include the financial value of the delivery\n (amount), the date of delivery and the name of the customer (recipient), if this information\n is not confidential.
When indicating the date of the delivery, the candidate is\n requested to indicate the date of commencement and finalisation of the delivery. If\n this is not possible, for example if the tasks were performed on a continuous basis\n under a framework agreement, the candidate is asked to indicate how the date is specified.
No\n more than 5 references may be stated, irrespective of whether the candidate is a single\n operator, whether the candidate relies on the technical capacity of other entities,\n or is a group of operators (e.g. a consortium). Where more than 5 references are stated,\n only the most recent 5 references will be taken into account. Any additional references\n will be disregarded. If it is not
possible to decide which references are the\n most recent 5 references, the references will be selected by drawing lots.
In\n this procedure, the candidate may rely on the technical capacity of other operators\n to fulfil the suitability requirements. The operator(s) making its/their technical\n capacity available to the candidate must sign a letter of commitment, see further\n in the tender specifications.
The form is enclosed as an attachment to the tender\n specifications.
If the candidate relies on the professional experience of other\n entities for the performance of specific parts of the services comprised by the contract,\n such specific parts of the services under the contract must be performed by the entity\n on which the candidate relies.
The ESPD serves as provisional documentation that\n the candidate fulfils the requirements in respect of technical and professional capacity.\n Before the award decision is made, the candidate to whom the contracting entity intends\n to award the contract must submit documentation that the information stated in the\n ESPD is accurate. No additional documentation of technical and professional capacity\n will be required from the candidate. However, the contracting entity reserves the\n
right to contact the candidate or the customer stated in the reference for verification\n of the information stated in the reference, including the dates of the reference indicated.
Minimum\n requirement: as a minimum requirement for participation, the candidate must provide\n documentation of at least one (1) reference for the delivery of purple teaming test.\n \n Kriterium: Referencer på specificerede tjenesterBeskrivelse: Criteria for selection among the suitable candidates. The shortlisting of candidates\n invited to tender will be based on an evaluation of which candidates have documented\n the most relevant deliveries, in relation to the main services put up for tender.\n
The relevance assessment will be made on the basis of the extent to which the\n references, combined, document experience in the provision of services that are comparable\n to the main services put up for tender.
In the evaluation of which candidates\n have documented the most relevant services of Purple teaming tests, the contracting\n entity will award points to the candidates on a scale from 1-5 for each main service,\n based on the extent to which the references, combined, document relevant experience\n in providing the main services. On this basis, the candidate will be awarded a total\n score calculated as the average number of points awarded for the main services.
In\n the selection, the contracting entity will place particular emphasis on the following\n main services:
- Demonstrated experience with intelligence-led red team tests\n within live production it-infrastructure in financial services or similar critical\n infrastructure industries
- Demonstrated experience with delivery of threat intelligence\n deliveries with focus on threat modelling
- Demonstrated experience with delivery\n of purple teaming test where red team capabilities work closely with the customer’s\n blue team including collaboration with customer’s third-party vendors
- Demonstrated\n cooperative and adaptable approach to purple teaming test, including willingness to\n adhere to specific customer requirements and context
- Demonstrated experience\n with communication with both technical and non-technical customer resources, and engagement\n with collaborative activities, such as whiteboard sessions, stand-ups, workshops,\n etc.
- Demonstrated experience with customers in various it-environments, ex.\n Cloud, outsourced, on-prem and in-house developed systems\n Kriteriet vil blive anvendt til at udvælge de ansøgere, som skal opfordres til at deltage i anden fase af proceduren\n \n Oplysninger om den anden fase i en procedure, der afvikles i to faser:Mindsteantallet af ansøgere, som skal opfordres til at deltage i anden fase af proceduren: 5\n Det højeste antal ansøgere, som skal opfordres til at deltage i anden fase af proceduren: 5\n Proceduren afvikles i successive faser. I hver fase kan nogle ansøgere blive\n \n \n 5.1.10 TildelingskriterierKriterium:\n \n Beskrivelse: We refer to the tender specifications, Appendix A.\n Kategori for tildelingskriteriet tærskel: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 30\n \n \n Kriterium:\n \n Beskrivelse: We refer to the tender specifications, Appendix A.\n Kategori for tildelingskriteriet tærskel: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 25\n \n \n Kriterium:\n Navn: Methodology and work modalities\n Beskrivelse: We refer to the tender specifications, Appendix A.\n Kategori for tildelingskriteriet tærskel: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 25\n \n \n Kriterium:\n Navn: Risk management and information security\n Beskrivelse: We refer to the tender specifications, Appendix A.\n Kategori for tildelingskriteriet tærskel: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 20\n \n \n \n 5.1.11 UdbudsdokumenterAdresse på udbudsdokumenterne: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=439232&B=\n \n 5.1.12 UdbudsvilkårVilkår for indgivelse:Elektronisk indgivelse: Påkrævet\n Indgivelsesadresse: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=439232&B=\n Sprog, som tilbud og ansøgninger om deltagelse kan indgives på: engelsk\n Elektronisk katalog: Ikke tilladt\n Alternative tilbud: Ikke tilladt\n Tilbudsgivere kan indgive mere end ét tilbud: Ikke tilladt\n Frist for modtagelse af anmodninger om deltagelse: 02-10-2025 10:00 +00:00\n \n Betingelser for kontraktens udførelse:Udførelsen af kontrakten skal ske inden for rammerne af programmer for beskyttet beskæftigelse: Nej\n Vilkår relateret til kontraktens udførelse: The contract has incorporated the corporate social responsibility considerations,\n as appropriate, as
laid down in the conventions on the basis of which the principles\n of the UN Global Compact are worded and as laid down in the OECD Guidelines for Multinational\n Enterprises.
If the contract is awarded to a group of operators (such as\n a consortium), the participants of the group must undertake joint and several liability\n and appoint a joint representative.\n Elektronisk fakturering: Påkrævet\n Der vil blive anvendt elektronisk bestilling: nej\n Der vil blive anvendt elektronisk betaling: ja\n \n \n 5.1.15 TeknikkerRammeaftale:Rammeaftale med fornyet iværksættelse af konkurrence\n Det maksimale antal deltagere: 3\n \n Oplysninger om det dynamiske indkøbssystem:Intet dynamisk indkøbssystem\n \n \n 5.1.16 Yderligere oplysninger, mægling og gennemgangOrganisation med ansvar for klager: Klagenævnet for Udbud\n Oplysninger om klagefrister: Pursuant to the Danish Act on the Complaints Board for Public Procurement, etc. (lov\n om Klagenævnet for Udbud m.v.) (the Act is available (in Danish) at ww.retsinformation.dk),\n the following deadlines apply to the lodging of complaints:
Complaints of not\n having been selected must be submitted to the Danish Complaints Board for Public
Procurement\n before the expiry of 20 calendar days, see section 7(1) of the Act, from the day after\n submission of notification to the candidates concerned of the identity of the successful\n tenderer where the notification is accompanied by an explanation of the grounds for\n the decision in accordance with section 2(1), para (1) of the Act and section 171(2)\n of the Danish Public Procurement Act.
In other situations, complaints of\n award procedures, see section 7(2) of the Act, must be lodged with the Danish Complaints\n Board for Public Procurement before the expiry of:
1) 45 calendar days after the\n contracting entity has published a notice in the Official Journal of the European\n Union that the contracting entity has entered into a contract. The deadline is calculated\n from the day after the day when the notice was published.
2) 30 calendar days\n calculated from the day after the day when the contracting entity has notified the\n candidates concerned that a contract based on a framework agreement with reopening\n of competition or a dynamic purchasing system has been entered into if the notification\n has included an explanation of the relevant grounds for the decision.
3) 6 months\n after the contracting entity entered into a framework agreement calculated from the\n day after the day when the contracting entity notified the candidates and tenderers\n concerned, see section 2(2) of the Act and section 171(4) of the Danish Public Procurement\n Act.
4) 20 calendar days calculated from the day after the contracting entity\n has submitted notification of its decision, see section 185(2) of the Danish Public\n Procurement Act.
Not later than at the time of lodging a complaint with the Danish\n Complaints Board for Public Procurement, the complainant must notify the contracting\n entity in writing that a complaint has been lodged with the Danish Complaints Board\n for Public Procurement and whether the complaint was lodged during the standstill\n period, see section 6(4) of the Act. In cases where the complaint was not lodged within\n the standstill period, the complainant must furthermore indicate whether a suspensory\n effect of the complaint has been requested, see section 12(1) of the Act.
The\n e-mail address of the Complaints Board for Public Procurement is klfu@naevneneshus.dk.\n The Complaints Board’s own complaints procedure is available at https://naevneneshus.dk/startdin-klage/klagenaevnet-for-udbud/vejledning/.\n Organisation, der leverer yderligere oplysninger om klageprocedurerne: Konkurrence- og Forbrugerstyrelsen\n Organisation, der modtager ansøgninger om deltagelse: Danmarks Nationalbank\n Organisation, der behandler tilbud: Danmarks Nationalbank\n \n \n \n 8 Organisationer8.1 ORG-0001Officielt navn: Danmarks Nationalbank\n Registreringsnummer: 61092919\n Afdeling: Danmarks Nationalbank\n Postadresse: Langelinie Allé 47 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n E-mail: amje@nationalbanken.dk\n \n Køberprofil: https://eu.eu-supply.com/ctm/company/companyinformation/index/281426\n Denne organisations roller:\n Organisation, der modtager ansøgninger om deltagelse\n Organisation, der behandler tilbud\n \n \n 8.1 ORG-0002Officielt navn: Klagenævnet for Udbud\n Registreringsnummer: 37795526\n Postadresse: Nævnenes Hus, Toldboden 2 \n \n \n Landsdel (NUTS): Vestjylland (DK041)\n \n E-mail: klfu@naevneneshus.dk\n \n Internetadresse: https://klfu.naevneneshus.dk/\n Denne organisations roller:Organisation med ansvar for klager\n \n \n 8.1 ORG-0003Officielt navn: Konkurrence- og Forbrugerstyrelsen\n Registreringsnummer: 10294819\n Postadresse: Carl Jacobsens Vej 35 \n \n \n Landsdel (NUTS): Nordsjælland (DK013)\n \n \n \n Internetadresse: http://www.kfst.dk\n Denne organisations roller:Organisation, der leverer yderligere oplysninger om klageprocedurerne\n \n \n 8.1 ORG-0004Officielt navn: Mercell Holding ASA\n Registreringsnummer: 980921565\n Postadresse: Askekroken 11 \n \n \n Landsdel (NUTS): Oslo (NO081)\n \n \n E-mail: publication@mercell.com\n \n \n Internetadresse: http://mercell.com/\n Denne organisations roller:\n \n \n \n Oplysninger om bekendtgørelsenBekendtgørelsens ID: 9b434abc-9d9f-40cf-9072-cc82b7f561fa - 01\n Formulartype: Konkurrencevilkår\n Bekendtgørelsestype: Udbuds- eller koncessionsbekendtgørelse – standardordningen\n Afsendelsesdato for bekendtgørelsen: 01-09-2025 08:02 +00:00\n Dato for afsendelse af bekendtgørelsen (eSender): 01-09-2025 08:30 +00:00\n Bekendtgørelsens officielle sprog: engelsk \n Bekendtgørelsesnummer: 00570392-2025\n \n Offentliggørelsesdato: 02-09-2025\n \n \n","htmlEN":"\n\n \n 1 Buyer1.1 BuyerOfficial name: Danmarks Nationalbank\n Legal type of the buyer: Body governed by public law\n Activity of the contracting authority: Economic affairs\n \n \n 2 Procedure2.1 ProcedureTitle: Framework agreement on the delivery of purple teaming tests\n Description: This procurement seeks to enter into framework agreements with 3 Suppliers, that are\n experts within the field of purple teaming testing. Any Statement of Work will be\n awarded suite of a subsequent re-opening of the competition.
The purple teaming\n test (PTT) shall be conducted on Danmarks Nationalbank. The purpose of the purple\n teaming test is to enhance the Customer’s cybersecurity posture by integrating offensive\n and defensive security teams to simulate real-world attack scenarios and improve detection\n and response capabilities. The test shall be conducted as a cooperation between the\n offensive red team provided by the supplier and the defensive blue team.
The test\n shall assess how well the Customer is equipped to protect against, detect, respond\n to and potentially recover from cyber-attacks from threat actors with realistically\n advanced capabilities and modus operandi. The test shall to the farthest possible\n extent mimic relevant real actors’ capabilities towards the defensive capabilities\n at the Customers disposal.
The framework agreement will be awarded to three (3)\n suppliers.\n Procedure identifier: d9f31002-81af-4d13-870f-a6c4ad8b9d01\n Internal identifier: TS 231059\n Type of procedure: Restricted\n The procedure is accelerated: no\n 2.1.1 PurposeMain nature of the contract: Services\n Main classification (cpv): 72600000 Computer support and consultancy services\n Additional classification (cpv): 72500000 Computer-related services\n \n 2.1.2 Place of performancePostal address: Langlinie Allé 47 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n \n 2.1.3 ValueEstimated value excluding VAT: 24.000.000 Danish krone\n Maximum value of the framework agreement: 30.000.000 Danish krone\n \n 2.1.4 General informationAdditional information: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply. All communication in connection with the tender procedure, including\n questions and answers, must take place through the electronic tendering system. Reference\n is made to the tender specifications and appendix B for information concerning questions\n and answers.
Interested operators are requested to keep updated via the electronic\n tendering system. If the candidate encounters problems with the system, please contact\n support by e-mail, dksupport@eu-sup ply.com, or telephone (+45) 70 20 80 14.
As\n its application, the candidate must submit an ESPD as preliminary documentation of\n the circumstances set out in section 148(1), paras (1)-(3) of the Danish Public Procurement\n Act (udbudsloven) and section 137(1) para (1) and para (3) and para (4) and para (5)\n of the Danish Public Procurement Act. It is not necessary for the candidate to sign\n the ESPD document. For groups of operators (e.g. a consortium), a separate ESPD must\n be submitted for each participating operator. Where the candidate is a group of operators,\n the ESPD document of each participant in the group must be signed by the
participant\n in question. The candidate heading the group and submitting the application is not\n required to sign its ESPD document. If the candidate relies on the capacities of other\n entities, an ESPD must be submitted for and signed by each of the entities on which\n it relies.
Before the award decision is made, the tenderer to whom the contracting\n entity intends to award the contract must provide documentation of the information\n submitted in the ESPD pursuant to sections 151-152, cf. section 153 of the Danish\n Public Procurement Act. As an alternative to the documentation mentioned in sections\n 153-155, 157 and 158 of the Danish Public Procurement Act, the applicant and tenderer\n may submit to the contracting entity a certificate of registration in an official\n list of approved economic operators, see section 156 of the Danish Public Procurement\n Act, issued by the competent authority. The contracting entity only accepts certificates\n of registration in an official list from applicants and tenderers established in the\n country holding the official list.
The contracting entity will select the number\n of candidates by applying the selection criteria stated
in this contract notice,\n unless the contracting entity receives no more than the stated number of compliant\n requests for participation.
Section 134a of the Danish Public Procurement Act\n shall apply to this tender procedure.
Participation in the tender procedure may\n only take place by electronic means via the electronic tendering system used by the\n contracting entity. For access to the tender documents, the tenderer must be registered\n or register as a user. If the tender contains several versions of the same document,\n the latest uploaded version will apply. All communication in connection with the tender\n procedure, including questions and answers, must
take place through the electronic\n tendering system. Reference is made to the tender specifications and
appendix\n B for information concerning questions and answers.
Interested operators are\n requested to keep updated via the electronic tendering system. If the tenderer encounters\n problems with the system, please contact support by e-mail, dksupport@eu-supply.com,\n or telephone (+45) 70 20 80 14.
The tenderer must submit an ESPD with the\n tender as preliminary documentation of the circumstances set out in section 148(1),\n paras (1)-(3) of the Danish Public Procurement Act (udbudsloven). It is not necessary\n for the tenderer to sign the ESPD document. For groups of operators (e.g., a consortium),\n a separate ESPD must be submitted for each participating operator. Where the tenderer\n is a group of operators, the ESPD document of each participant in the group must be\n signed by the
participant in question. The tenderer heading the group and submitting\n the tender is not required to sign its ESPD document. If the tenderer relies on the\n capacities of other entities, an ESPD must be submitted for and signed by each of\n the entities on which the tenderer relies. It should be noted that each candidate\n may only submit one application for prequalification.
Before the award decision\n is made, the tenderer to whom the contracting entity intends to award the contract\n must provide documentation of the information submitted in the ESPD pursuant to sections\n 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative to\n the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the tenderer may submit to the contracting entity a certificate of\n registration in an official list of approved economic operators, see section 156 of\n the Danish Public Procurement Act, issued by the competent authority. The contracting\n entity only accepts certificates of registration in an official list from tenderers\n established in the country holding the official list.
The difference between\n the estimated value and the maximum value is due to the uncertainty of the final value\n of the individual framework agreements. The estimated value thus reflects the contracting\n entity’s estimate of the expected purchase under the framework agreements, whereas\n the maximum value reflects the highest estimated value of all contracts to be performed\n within the term of the framework agreements. This takes into account, partly, the\n contracting entity’s expectations based on the most likely purchase under the framework\n agreement, partly, the expected uncertainty of such
estimate. In relation to the\n estimated value, particular attention is drawn to the fact that the tenderers are\n not guaranteed any minimum purchase under the framework agreement, and the estimate\n therefore implies no commitment on the part of the contracting entity to make a minimum\n purchase under the framework agreement. Decisive for the estimated value of the framework\n agreement can be the unexpected complexity in the tests. It is specifically pointed\n out to the tenderer that the tenderer is bound by the prices offered, irrespective\n of the turnover specifically achieved under the framework agreement. This means that\n the tenderer is also bound by the prices offered if the specific turnover deviates\n from the estimated value, both upwards and downwards. The maximum quantity to be delivered\n under the framework agreement is DKK 30 millio exclusive VAT.
The contracting\n entity may use the procedure of section 159(5) of the Danish Public Procurement Act\n in the event that tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the contract will\n commence on signature of the framework agreement.
An information meeting\n will be held Monday 8 September 2025, at 13.00-14.00 on MS teams. For practical reasons,\n operators interested in participating in the meeting are asked to sign up via the\n electronic tendering system not later than 1 days before the meeting with indication\n of name of business and names and e-mails of the participants. The contracting entity\n will draw up brief minutes of the information meeting which will be announced to all\n tenderers participating in the tender procedure via the electronic tendering system.\n \n \n The Danish Public Procurement Act - The tender procedure is covered by the Danish Public Procurement Act (Act No. 1564\n of 15 December
2015 as amended), which implements the Public Procurement Directive\n (Directive 2014/24/EU).\n \n \n \n 5 Lot5.1 Lot technical ID: LOT-0000Title: Framework agreement on the delivery of purple teaming tests\n Description: This procurement seeks to enter into framework agreements with 3 Suppliers, that are\n experts within the field of purple teaming testing. Any Statement of Work will be\n awarded suite of a subsequent re-opening of the competition.
The purple teaming\n test (PTT) shall be conducted on Danmarks Nationalbank. The purpose of the purple\n teaming test is to enhance the Customer’s cybersecurity posture by integrating offensive\n and defensive security teams to simulate real-world attack scenarios and improve detection\n and response capabilities. The test shall be conducted as a cooperation between the\n offensive red team provided by the supplier and the defensive blue team.
The test\n shall assess how well the Customer is equipped to protect against, detect, respond\n to and potentially recover from cyber-attacks from threat actors with realistically\n advanced capabilities and modus operandi. The test shall to the farthest possible\n extent mimic relevant real actors’ capabilities towards the defensive capabilities\n at the Customers disposal.
The framework agreement will be awarded to three (3)\n suppliers.\n Internal identifier: TS 231059\n 5.1.1 PurposeMain nature of the contract: Services\n Main classification (cpv): 72600000 Computer support and consultancy services\n Additional classification (cpv): 72500000 Computer-related services\n \n 5.1.2 Place of performancePostal address: Langlinie Allé 47 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n \n \n 5.1.3 Estimated duration\n \n 5.1.5 ValueEstimated value excluding VAT: 24.000.000 Danish krone\n Maximum value of the framework agreement: 30.000.000 Danish krone\n \n 5.1.6 General informationReserved participation: Participation is not reserved.\n Procurement Project not financed with EU Funds.\n The procurement is covered by the Government Procurement Agreement (GPA): yes\n Additional information: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply. All communication in connection with the tender procedure, including\n questions and answers, must take place through the electronic tendering system. Reference\n is made to the tender specifications and appendix B for information concerning questions\n and answers.
Interested operators are requested to keep updated via the electronic\n tendering system. If the candidate encounters problems with the system, please contact\n support by e-mail, dksupport@eu-sup ply.com, or telephone (+45) 70 20 80 14.
As\n its application, the candidate must submit an ESPD as preliminary documentation of\n the circumstances set out in section 148(1), paras (1)-(3) of the Danish Public Procurement\n Act (udbudsloven) and section 137(1) para (1) and para (3) and para (4) and para (5)\n of the Danish Public Procurement Act. It is not necessary for the candidate to sign\n the ESPD document. For groups of operators (e.g. a consortium), a separate ESPD must\n be submitted for each participating operator. Where the candidate is a group of operators,\n the ESPD document of each participant in the group must be signed by the
participant\n in question. The candidate heading the group and submitting the application is not\n required to sign its ESPD document. If the candidate relies on the capacities of other\n entities, an ESPD must be submitted for and signed by each of the entities on which\n it relies.
Before the award decision is made, the tenderer to whom the contracting\n entity intends to award the contract must provide documentation of the information\n submitted in the ESPD pursuant to sections 151-152, cf. section 153 of the Danish\n Public Procurement Act. As an alternative to the documentation mentioned in sections\n 153-155, 157 and 158 of the Danish Public Procurement Act, the applicant and tenderer\n may submit to the contracting entity a certificate of registration in an official\n list of approved economic operators, see section 156 of the Danish Public Procurement\n Act, issued by the competent authority. The contracting entity only accepts certificates\n of registration in an official list from applicants and tenderers established in the\n country holding the official list.
The contracting entity will select the number\n of candidates by applying the selection criteria stated
in this contract notice,\n unless the contracting entity receives no more than the stated number of compliant\n requests for participation.
Section 134a of the Danish Public Procurement Act\n shall apply to this tender procedure.
Participation in the tender procedure may\n only take place by electronic means via the electronic tendering system used by the\n contracting entity. For access to the tender documents, the tenderer must be registered\n or register as a user. If the tender contains several versions of the same document,\n the latest uploaded version will apply. All communication in connection with the tender\n procedure, including questions and answers, must
take place through the electronic\n tendering system. Reference is made to the tender specifications and
appendix\n B for information concerning questions and answers.
Interested operators are\n requested to keep updated via the electronic tendering system. If the tenderer encounters\n problems with the system, please contact support by e-mail, dksupport@eu-supply.com,\n or telephone (+45) 70 20 80 14.
The tenderer must submit an ESPD with the\n tender as preliminary documentation of the circumstances set out in section 148(1),\n paras (1)-(3) of the Danish Public Procurement Act (udbudsloven). It is not necessary\n for the tenderer to sign the ESPD document. For groups of operators (e.g., a consortium),\n a separate ESPD must be submitted for each participating operator. Where the tenderer\n is a group of operators, the ESPD document of each participant in the group must be\n signed by the
participant in question. The tenderer heading the group and submitting\n the tender is not required to sign its ESPD document. If the tenderer relies on the\n capacities of other entities, an ESPD must be submitted for and signed by each of\n the entities on which the tenderer relies. It should be noted that each candidate\n may only submit one application for prequalification.
Before the award decision\n is made, the tenderer to whom the contracting entity intends to award the contract\n must provide documentation of the information submitted in the ESPD pursuant to sections\n 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative to\n the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the tenderer may submit to the contracting entity a certificate of\n registration in an official list of approved economic operators, see section 156 of\n the Danish Public Procurement Act, issued by the competent authority. The contracting\n entity only accepts certificates of registration in an official list from tenderers\n established in the country holding the official list.
The difference between\n the estimated value and the maximum value is due to the uncertainty of the final value\n of the individual framework agreements. The estimated value thus reflects the contracting\n entity’s estimate of the expected purchase under the framework agreements, whereas\n the maximum value reflects the highest estimated value of all contracts to be performed\n within the term of the framework agreements. This takes into account, partly, the\n contracting entity’s expectations based on the most likely purchase under the framework\n agreement, partly, the expected uncertainty of such
estimate. In relation to the\n estimated value, particular attention is drawn to the fact that the tenderers are\n not guaranteed any minimum purchase under the framework agreement, and the estimate\n therefore implies no commitment on the part of the contracting entity to make a minimum\n purchase under the framework agreement. Decisive for the estimated value of the framework\n agreement can be the unexpected complexity in the tests. It is specifically pointed\n out to the tenderer that the tenderer is bound by the prices offered, irrespective\n of the turnover specifically achieved under the framework agreement. This means that\n the tenderer is also bound by the prices offered if the specific turnover deviates\n from the estimated value, both upwards and downwards. The maximum quantity to be delivered\n under the framework agreement is DKK 30 millio exclusive VAT.
The contracting\n entity may use the procedure of section 159(5) of the Danish Public Procurement Act\n in the event that tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the contract will\n commence on signature of the framework agreement.
An information meeting\n will be held Monday 8 September 2025, at 13.00-14.00 on MS teams. For practical reasons,\n operators interested in participating in the meeting are asked to sign up via the\n electronic tendering system not later than 1 days before the meeting with indication\n of name of business and names and e-mails of the participants. The contracting entity\n will draw up brief minutes of the information meeting which will be announced to all\n tenderers participating in the tender procedure via the electronic tendering system.\n \n 5.1.9 Selection criteriaSources of selection criteria: Notice\n Criterion: References on specified servicesDescription: The candidate must submit the ESPD with the following information:
A list of the\n 5 most significant comparable services that the candidate has carried out in the latest\n 3 years before the expiry of the deadline for application.
Only references\n relating to services carried out at the time of the deadline for application will\n be given importance in the evaluation of whether the requirements regarding technical\n and professional capacity have been complied with, see below. Hence, in the case of\n an ongoing task, only the part of the services already performed at the time of the\n deadline for application will be included in the evaluation of the reference.
Each\n reference is requested to include a brief description of the deliveries made. The\n description of the delivery should include a clear description of the services to\n which the delivery relates and the candidate’s role(s) in the performance of the delivery.\n The reference is furthermore requested to include the financial value of the delivery\n (amount), the date of delivery and the name of the customer (recipient), if this information\n is not confidential.
When indicating the date of the delivery, the candidate is\n requested to indicate the date of commencement and finalisation of the delivery. If\n this is not possible, for example if the tasks were performed on a continuous basis\n under a framework agreement, the candidate is asked to indicate how the date is specified.
No\n more than 5 references may be stated, irrespective of whether the candidate is a single\n operator, whether the candidate relies on the technical capacity of other entities,\n or is a group of operators (e.g. a consortium). Where more than 5 references are stated,\n only the most recent 5 references will be taken into account. Any additional references\n will be disregarded. If it is not
possible to decide which references are the\n most recent 5 references, the references will be selected by drawing lots.
In\n this procedure, the candidate may rely on the technical capacity of other operators\n to fulfil the suitability requirements. The operator(s) making its/their technical\n capacity available to the candidate must sign a letter of commitment, see further\n in the tender specifications.
The form is enclosed as an attachment to the tender\n specifications.
If the candidate relies on the professional experience of other\n entities for the performance of specific parts of the services comprised by the contract,\n such specific parts of the services under the contract must be performed by the entity\n on which the candidate relies.
The ESPD serves as provisional documentation that\n the candidate fulfils the requirements in respect of technical and professional capacity.\n Before the award decision is made, the candidate to whom the contracting entity intends\n to award the contract must submit documentation that the information stated in the\n ESPD is accurate. No additional documentation of technical and professional capacity\n will be required from the candidate. However, the contracting entity reserves the\n
right to contact the candidate or the customer stated in the reference for verification\n of the information stated in the reference, including the dates of the reference indicated.
Minimum\n requirement: as a minimum requirement for participation, the candidate must provide\n documentation of at least one (1) reference for the delivery of purple teaming test.\n \n Criterion: References on specified servicesDescription: Criteria for selection among the suitable candidates. The shortlisting of candidates\n invited to tender will be based on an evaluation of which candidates have documented\n the most relevant deliveries, in relation to the main services put up for tender.\n
The relevance assessment will be made on the basis of the extent to which the\n references, combined, document experience in the provision of services that are comparable\n to the main services put up for tender.
In the evaluation of which candidates\n have documented the most relevant services of Purple teaming tests, the contracting\n entity will award points to the candidates on a scale from 1-5 for each main service,\n based on the extent to which the references, combined, document relevant experience\n in providing the main services. On this basis, the candidate will be awarded a total\n score calculated as the average number of points awarded for the main services.
In\n the selection, the contracting entity will place particular emphasis on the following\n main services:
- Demonstrated experience with intelligence-led red team tests\n within live production it-infrastructure in financial services or similar critical\n infrastructure industries
- Demonstrated experience with delivery of threat intelligence\n deliveries with focus on threat modelling
- Demonstrated experience with delivery\n of purple teaming test where red team capabilities work closely with the customer’s\n blue team including collaboration with customer’s third-party vendors
- Demonstrated\n cooperative and adaptable approach to purple teaming test, including willingness to\n adhere to specific customer requirements and context
- Demonstrated experience\n with communication with both technical and non-technical customer resources, and engagement\n with collaborative activities, such as whiteboard sessions, stand-ups, workshops,\n etc.
- Demonstrated experience with customers in various it-environments, ex.\n Cloud, outsourced, on-prem and in-house developed systems\n The criteria will be used to select the candidates to be invited for the second stage of the procedure\n \n Information about the second stage of a two-stage procedure:Minimum number of candidates to be invited for the second stage of the procedure: 5\n Maximum number of candidates to be invited for the second stage of the procedure: 5\n The procedure will take place in successive stages. At each stage, some participants may be eliminated\n \n \n 5.1.10 Award criteriaCriterion:\n \n Description: We refer to the tender specifications, Appendix A.\n Category of award threshold criterion: Weight (percentage, exact)Award criterion number: 30\n \n \n Criterion:\n \n Description: We refer to the tender specifications, Appendix A.\n Category of award threshold criterion: Weight (percentage, exact)Award criterion number: 25\n \n \n Criterion:\n Name: Methodology and work modalities\n Description: We refer to the tender specifications, Appendix A.\n Category of award threshold criterion: Weight (percentage, exact)Award criterion number: 25\n \n \n Criterion:\n Name: Risk management and information security\n Description: We refer to the tender specifications, Appendix A.\n Category of award threshold criterion: Weight (percentage, exact)Award criterion number: 20\n \n \n \n 5.1.11 Procurement documentsAddress of the procurement documents: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=439232&B=\n \n 5.1.12 Terms of procurementTerms of submission:Electronic submission: Required\n Address for submission: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=439232&B=\n Languages in which tenders or requests to participate may be submitted: English\n Electronic catalogue: Not allowed\n \n Tenderers may submit more than one tender: Not allowed\n Deadline for receipt of requests to participate: 02-10-2025 10:00 +00:00\n \n Terms of contract:The execution of the contract must be performed within the framework of sheltered employment programmes: No\n Conditions relating to the performance of the contract: The contract has incorporated the corporate social responsibility considerations,\n as appropriate, as
laid down in the conventions on the basis of which the principles\n of the UN Global Compact are worded and as laid down in the OECD Guidelines for Multinational\n Enterprises.
If the contract is awarded to a group of operators (such as\n a consortium), the participants of the group must undertake joint and several liability\n and appoint a joint representative.\n Electronic invoicing: Required\n Electronic ordering will be used: no\n Electronic payment will be used: yes\n \n \n 5.1.15 TechniquesFramework agreement:Framework agreement, with reopening of competition\n Maximum number of participants: 3\n \n Information about the dynamic purchasing system:No dynamic purchase system\n \n \n 5.1.16 Further information, mediation and reviewReview organisation: Klagenævnet for Udbud\n Information about review deadlines: Pursuant to the Danish Act on the Complaints Board for Public Procurement, etc. (lov\n om Klagenævnet for Udbud m.v.) (the Act is available (in Danish) at ww.retsinformation.dk),\n the following deadlines apply to the lodging of complaints:
Complaints of not\n having been selected must be submitted to the Danish Complaints Board for Public
Procurement\n before the expiry of 20 calendar days, see section 7(1) of the Act, from the day after\n submission of notification to the candidates concerned of the identity of the successful\n tenderer where the notification is accompanied by an explanation of the grounds for\n the decision in accordance with section 2(1), para (1) of the Act and section 171(2)\n of the Danish Public Procurement Act.
In other situations, complaints of\n award procedures, see section 7(2) of the Act, must be lodged with the Danish Complaints\n Board for Public Procurement before the expiry of:
1) 45 calendar days after the\n contracting entity has published a notice in the Official Journal of the European\n Union that the contracting entity has entered into a contract. The deadline is calculated\n from the day after the day when the notice was published.
2) 30 calendar days\n calculated from the day after the day when the contracting entity has notified the\n candidates concerned that a contract based on a framework agreement with reopening\n of competition or a dynamic purchasing system has been entered into if the notification\n has included an explanation of the relevant grounds for the decision.
3) 6 months\n after the contracting entity entered into a framework agreement calculated from the\n day after the day when the contracting entity notified the candidates and tenderers\n concerned, see section 2(2) of the Act and section 171(4) of the Danish Public Procurement\n Act.
4) 20 calendar days calculated from the day after the contracting entity\n has submitted notification of its decision, see section 185(2) of the Danish Public\n Procurement Act.
Not later than at the time of lodging a complaint with the Danish\n Complaints Board for Public Procurement, the complainant must notify the contracting\n entity in writing that a complaint has been lodged with the Danish Complaints Board\n for Public Procurement and whether the complaint was lodged during the standstill\n period, see section 6(4) of the Act. In cases where the complaint was not lodged within\n the standstill period, the complainant must furthermore indicate whether a suspensory\n effect of the complaint has been requested, see section 12(1) of the Act.
The\n e-mail address of the Complaints Board for Public Procurement is klfu@naevneneshus.dk.\n The Complaints Board’s own complaints procedure is available at https://naevneneshus.dk/startdin-klage/klagenaevnet-for-udbud/vejledning/.\n Organisation providing more information on the review procedures: Konkurrence- og Forbrugerstyrelsen\n Organisation receiving requests to participate: Danmarks Nationalbank\n Organisation processing tenders: Danmarks Nationalbank\n \n \n \n 8 Organisations8.1 ORG-0001Official name: Danmarks Nationalbank\n Registration number: 61092919\n Department: Danmarks Nationalbank\n Postal address: Langelinie Allé 47 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n Contact point: Astrid Jepsen\n Email: amje@nationalbanken.dk\n \n Buyer profile: https://eu.eu-supply.com/ctm/company/companyinformation/index/281426\n Roles of this organisation:\n Organisation receiving requests to participate\n Organisation processing tenders\n \n \n 8.1 ORG-0002Official name: Klagenævnet for Udbud\n Registration number: 37795526\n Postal address: Nævnenes Hus, Toldboden 2 \n \n \n Country subdivision (NUTS): Vestjylland (DK041)\n \n Email: klfu@naevneneshus.dk\n \n Internet address: https://klfu.naevneneshus.dk/\n Roles of this organisation:\n \n \n 8.1 ORG-0003Official name: Konkurrence- og Forbrugerstyrelsen\n Registration number: 10294819\n Postal address: Carl Jacobsens Vej 35 \n \n \n Country subdivision (NUTS): Nordsjælland (DK013)\n \n \n \n Internet address: http://www.kfst.dk\n Roles of this organisation:Organisation providing more information on the review procedures\n \n \n 8.1 ORG-0004Official name: Mercell Holding ASA\n Registration number: 980921565\n Postal address: Askekroken 11 \n \n \n Country subdivision (NUTS): Oslo (NO081)\n \n \n Email: publication@mercell.com\n \n \n Internet address: http://mercell.com/\n Roles of this organisation:\n \n \n \n Notice informationNotice identifier/version: 9b434abc-9d9f-40cf-9072-cc82b7f561fa - 01\n \n Notice type: Contract or concession notice – standard regime\n Notice dispatch date: 01-09-2025 08:02 +00:00\n Notice dispatch date (eSender): 01-09-2025 08:30 +00:00\n Languages in which this notice is officially available: English \n Notice publication number: 00570392-2025\n OJ S issue number: 167/2025\n Publication date: 02-09-2025\n \n \n","opsummeringDA":{"card":{"titel":"Framework agreement on the delivery of purple teaming tests","ordregiver":"Danmarks Nationalbank","ordregiverId":"61092919 ","ordregiverIdDatavasket":"61092919","publiceringsdato":"2025-09-02+02:00","cpvKode":"72600000","cpvTitel":"Support- og konsulentvirksomhed i forbindelse med edb","formulartype":"Konkurrencevilkår","formulartypeKode":"competition","tidsfrister":["2025-10-02T10:00:00Z"],"alleOrdregivere":["Danmarks Nationalbank"],"anslaaetVaerdi":"24000000","anslaaetVaerdiValuta":"DKK","beskrivelse":"This procurement seeks to enter into framework agreements with 3 Suppliers, that are experts within the field of purple teaming testing. Any Statement of Work will be awarded suite of a subsequent re-opening of the competition. \nThe purple teaming test (PTT) shall be conducted on Danmarks Nationalbank. The purpose of the purple teaming test is to enhance the Customer’s cybersecurity posture by integrating offensive and defensive security teams to simulate real-world attack scenarios and improve detection and response capabilities. The test shall be conducted as a cooperation between the offensive red team provided by the supplier and the defensive blue team.\nThe test shall assess how well the Customer is equipped to protect against, detect, respond to and potentially recover from cyber-attacks from threat actors with realistically advanced capabilities and modus operandi. The test shall to the farthest possible extent mimic relevant real actors’ capabilities towards the defensive capabilities at the Customers disposal.\nThe framework agreement will be awarded to three (3) suppliers.","bkSubTypeKode":"16","bkSubType":"Udbudsbekendtgørelse – det generelle direktiv, standardordningen","erAendring":false},"indholdsType":"HENTET_FRA_TED","sekundaereOrdregivere":[],"udforelsesstedNutsCode":["DK011"],"udforelsesstedSubLand":["Byen København"],"udforelsesstedLand":["Danmark"],"udforelsesstedBy":["Copenhagen Ø"],"tilbudsfrister":[],"intressentfrister":[],"deltagelsefrister":["2025-10-02T10:00:00Z"],"svarfrister":[],"antalParts":0,"antalLots":1,"udbudsDokumenter":["https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=439232&B="]},"opsummeringEN":{"card":{"titel":"Framework agreement on the delivery of purple teaming tests","ordregiver":"Danmarks Nationalbank","ordregiverId":"61092919 ","ordregiverIdDatavasket":"61092919","publiceringsdato":"2025-09-02+02:00","cpvKode":"72600000","cpvTitel":"Computer support and consultancy services","formulartype":"Competition","formulartypeKode":"competition","tidsfrister":["2025-10-02T10:00:00Z"],"alleOrdregivere":["Danmarks Nationalbank"],"anslaaetVaerdi":"24000000","anslaaetVaerdiValuta":"DKK","beskrivelse":"This procurement seeks to enter into framework agreements with 3 Suppliers, that are experts within the field of purple teaming testing. Any Statement of Work will be awarded suite of a subsequent re-opening of the competition. \nThe purple teaming test (PTT) shall be conducted on Danmarks Nationalbank. The purpose of the purple teaming test is to enhance the Customer’s cybersecurity posture by integrating offensive and defensive security teams to simulate real-world attack scenarios and improve detection and response capabilities. The test shall be conducted as a cooperation between the offensive red team provided by the supplier and the defensive blue team.\nThe test shall assess how well the Customer is equipped to protect against, detect, respond to and potentially recover from cyber-attacks from threat actors with realistically advanced capabilities and modus operandi. The test shall to the farthest possible extent mimic relevant real actors’ capabilities towards the defensive capabilities at the Customers disposal.\nThe framework agreement will be awarded to three (3) suppliers.","bkSubTypeKode":"16","bkSubType":"Contract notice – general directive, standard regime","erAendring":false},"indholdsType":"HENTET_FRA_TED","sekundaereOrdregivere":[],"udforelsesstedNutsCode":["DK011"],"udforelsesstedSubLand":["Byen København"],"udforelsesstedLand":["Denmark"],"udforelsesstedBy":["Copenhagen Ø"],"tilbudsfrister":[],"intressentfrister":[],"deltagelsefrister":["2025-10-02T10:00:00Z"],"svarfrister":[],"antalParts":0,"antalLots":1,"udbudsDokumenter":["https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=439232&B="]}}