{"bekendtgoerelseNoegle":{"noticeId":{"value":"f104f4f6-8fc3-4624-b286-6968e40f18d1"},"noticeVersion":{"value":"01"},"noticePublicationNumber":{"value":"00603665-2026"}},"htmlDA":"\n\n \n 1 Køber1.1 KøberOfficielt navn: Danmarks Nationalbank\n Køberens retlige status: Offentligretligt organ\n Den ordregivende myndigheds aktivitet: Økonomiske anliggender\n \n \n 2 Procedure2.1 ProcedureTitel: Tender for a framework agreement on the delivery of Cybersecurity advisory and assessment\n services\n Beskrivelse: Danmarks Nationalbank (the Customer) seeks to establish a framework agreement with\n one Supplier for the provision of specialized cybersecurity advisory and assessment\n services.
As the operator and overseer of critical financial infrastructure in\n Denmark, Danmarks Nationalbank supports essential processes and systems that require\n a high level of security, resilience, and trust.
The Customer continuously introduces\n new technologies, vendors, services and architectural changes that may impact its\n security posture. To ensure informed decision-making and maintain an appropriate level\n of cyber resilience, the Customer seeks access to independent technical experts capable\n of evaluating cybersecurity risks from an adversarial perspective.
The purpose\n of the agreement is to provide the Customer with on-demand access to highly skilled\n technical cybersecurity experts with offensive security backgrounds, capable of delivering\n rapid, pragmatic and risk-based assessments of new technologies, systems, solutions,\n architectures and security-related questions.
The service shall complement the\n Customer's internal cybersecurity capabilities by providing independent expert judgement,\n specialized technical expertise and threat-informed analysis to support secure decision-making,\n risk management and operational resilience.
The Supplier shall provide access\n to cybersecurity specialists with relevant expertise across infrastructure, cloud,\n applications, identity and access management, emerging technologies, adversarial techniques\n and offensive security methodologies.\n Identifikator for proceduren: 7c03c120-69c0-4112-af76-3d30b1aab18e\n \n Udbudsprocedure: Begrænset\n Proceduren er en hasteprocedure: nej\n 2.1.1 FormålKontraktens hovedformål: Tjenesteydelser\n Primær klassifikation (cpv): 72220000 Konsulentvirksomhed i forbindelse med systemer og teknik\n Supplerende klassifikation (cpv): 72000000 It-tjenester: rådgivning, programmeludvikling, internet og support\n Supplerende klassifikation (cpv): 72600000 Support- og konsulentvirksomhed i forbindelse med edb\n \n 2.1.2 UdførelsesstedPostadresse: Langelinie Allé 47 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n 2.1.3 VærdiAnslået værdi eksklusiv moms: 9.200.000 Dansk krone\n Rammeaftalens maksimumværdi: 11.420.000 Dansk krone\n \n 2.1.4 Generelle oplysningerYderligere oplysninger: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply.
All communication in connection with the tender procedure,\n including questions and answers, must take place through the electronic tendering\n system. Reference is made to the tender specifications and appendix B for information\n concerning questions and answers.
Interested operators are requested to keep\n updated via the electronic tendering system. If the candidate encounters problems\n with the system, please contact support by submitting a ticket at the following link\n https://contact.mercell.com/?lang=en or by calling (+45) 70 20 80 14.
As its application,\n the candidate must submit an ESPD as preliminary documentation of the circumstances\n set out in section 148(1), paras (1)-(3) of the Danish Public Procurement Act (udbudsloven).\n It is not necessary for the candidate to sign the ESPD document. For groups of operators\n (e.g. a consortium), a separate ESPD must be submitted for each participating operator.\n Where the candidate is a group of operators, the ESPD document of each participant\n in the group must be signed by the participant in question. The candidate heading\n the group and submitting the application is not required to sign its ESPD document.\n If the candidate relies on the capacities of other entities, an ESPD must be submitted\n for and signed by each of the entities on which it relies.
Before the award\n decision is made, the tenderer to whom the contracting entity intends to award the\n contract must provide documentation of the information submitted in the ESPD pursuant\n to sections 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative\n to the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the applicant and tenderer may submit to the contracting entity a\n certificate of registration in an official list of approved economic operators, see\n section 156 of the Danish Public Procurement Act, issued by the competent authority.\n The contracting entity only accepts certificates of registration in an official list\n from applicants and tenderers established in the country holding the official list.
The\n contracting entity will select the number of candidates by applying the selection\n criteria stated in this contract notice, unless the contracting entity receives no\n more than the stated number of compliant requests for participation.
The\n difference between the estimated value and the maximum value is due to the uncertainty\n of the final value of the individual orders placed under the framework agreement.\n The estimated value thus reflects the contracting entity’s estimate of the expected\n purchase under the framework agreement, whereas the maximum value reflects the highest\n value of all contracts to be performed within the term of the framework agreement.\n This takes into account, partly, the contracting entity’s expectations based on the\n most likely purchase under the framework agreement, partly, the expected uncertainty\n of such estimate. In relation to the estimated value, particular attention is drawn\n to the fact that the tenderers are not guaranteed any minimum purchase under the framework\n agreement, and the estimate therefore implies no commitment on the part of the contracting\n entity to make a minimum purchase under the framework agreement. Decisive for the\n estimated value of the framework agreement will be unexpected need for the services\n covered by the Agreement.
It is specifically pointed out to the tenderer\n that the tenderer is bound by the prices offered, irrespective of the turnover specifically\n achieved under the framework agreement. This means that the tenderer is also bound\n by the prices offered if the specific turnover deviates from the estimated value,\n both upwards and downwards.
It should be noted that each candidate may only\n submit one application for prequalification.
The contracting entity may use\n the procedure of section 159(5) of the Danish Public Procurement Act in the event\n that applications or tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the agreement will\n commence on signature of the framework agreement.
In addition to the indicated\n duration of contract, an expiry phase that is flexible in time will be required when\n the contract is at an end in order to ensure an undisturbed continuation of the services\n in connection with a possible re-tender.
The agreement is not divided into\n lots, as a further division would undermine the close cooperation with a particularly\n trusted partner envisaged by this procurement. Due to the nature of the services,\n the supplier must necessarily have access to highly sensitive information, which makes\n a single-provider structure justified and proportionate.\n \n \n Danish Public Procurement Act (Act No. 1564 of 15 Decem-ber 2015 as amended) - The tender procedure is covered by the Danish Public Procurement Act (Act No. 1564\n of 15 December 2015 as amended), which implements the Public Procurement Directive\n (Directive 2014/24/EU).\n \n 2.1.6 UdelukkelsesgrundeKilder til grundlag for udelukkelse: Bekendtgørelse\n Korruption: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for corruption, by a conviction\n rendered at the most five years ago or in which an exclusion period set out directly\n in the conviction continues to be applicable? As defined in Article 3 of the Convention\n on the fight against corruption involving officials of the European Communities or\n officials of Member States of the European Union, OJ C 195, 25.6.1997, p. 1, and in\n Article 2(1) of Council Framework Decision 2003/568/JHA of 22 July 2003 on combating\n corruption in the private sector (OJ L 192, 31.7.2003, p. 54). This exclusion ground\n also includes corruption as defined in the national law of the contracting authority\n (contracting entity) or the economic operator\n Svig: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for fraud, by a conviction\n rendered at the most five years ago or in which an exclusion period set out directly\n in the conviction continues to be applicable? Within the meaning of Article 1 of the\n Convention on the protection of the European Communities' financial interests (OJ\n C 316, 27.11.1995, p. 48).\n Hvidvaskning af penge eller finansiering af terrorisme: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for money laundering or\n terrorist financing, by a conviction rendered at the most five years ago or in which\n an exclusion period set out directly in the conviction continues to be applicable?\n As defined in Article 1 of Directive 2005/60/EC of the European Parliament and of\n the Council of 26 October 2005 on the prevention of the use of the financial system\n for the purpose of money laundering and terrorist financing (OJ L 309, 25.11.2005,\n p. 15).\n Deltagelse i en kriminel organisation: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for participation in a\n criminal organisation, by a conviction rendered at the most five years ago or in which\n an exclusion period set out directly in the conviction continues to be applicable?\n As defined in Article 2 of Council Framework Decision 2008/841/JHA of 24 October 2008\n on the fight against organised crime (OJ L 300, 11.11.2008, p. 42).\n Terrorhandlinger eller strafbare handlinger med forbindelse til terroraktivitet: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for terrorist offences\n or offences linked to terrorist activities, by a conviction rendered at the most five\n years ago or in which an exclusion period set out directly in the conviction continues\n to be applicable? As defined in Articles 1 and 3 of Council Framework Decision of\n 13 June 2002 on combating terrorism (OJ L 164, 22.6.2002, p. 3). This exclusion ground\n also includes inciting or aiding or abetting or attempting to commit an offence, as\n referred to in Article 4 of that Framework Decision.\n Børnearbejde og andre former for menneskehandel: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for child labour and other\n forms of trafficking in human beings, by a conviction rendered at the most five years\n ago or in which an exclusion period set out directly in the conviction continues to\n be applicable? As defined in Article 2 of Directive 2011/36/EU of the European Parliament\n and of the Council of 5 April 2011 on preventing and combating trafficking in human\n beings and protecting its victims, and replacing Council Framework Decision 2002/629/JHA\n (OJ L 101, 15.4.2011, p. 1).\n Alvorlige forsømmelser i forbindelse med udøvelsen af erhvervet: Is the economic operator guilty of grave professional misconduct? Where applicable,\n see definitions in national law, the relevant notice or the procurement documents.\n Afgivelse af urigtige oplysninger, tilbageholdelse af oplysninger, ude af stand til at fremlægge de dokumenter, der anmodes om, eller indhentede fortrolige oplysninger i forbindelse med denne procedure: Can the economic operator confirm that:a) It has been guilty of serious misrepresentation\n in supplying the information required for the verification of the absence of grounds\n for exclusion or the fulfilment of the selection criteria,b) It has withheld such\n information,c) It has not been able, without delay, to submit the supporting documents\n required by a contracting authority or contracting entity, andd) It has undertaken\n to unduly influence the decision making process of the contracting authority or contracting\n entity, to obtain confidential information that may confer upon it undue advantages\n in the procurement procedure or to negligently provide misleading information that\n may have a material influence on decisions concerning exclusion, selection or award?\n Interessekonflikt som følge af deltagelse i udbudsproceduren: Is the economic operator aware of any conflict of interest, as indicated in national\n law, the relevant notice or the procurement documents due to its participation in\n the procurement procedure?\n Direkte eller indirekte involvering i forberedelsen af denne udbudsprocedure: Has the economic operator or an undertaking related to it advised the contracting\n authority or contracting entity or otherwise been involved in the preparation of the\n procurement procedure?\n Tilsidesættelse af forpligtelser vedrørende betaling af bidrag til sociale sikringsordninger: Has the economic operator breached its obligations relating to the payment social\n security contributions, both in the country in which it is established and in Member\n State of the contracting authority or contracting entity if other than the country\n of establishment?\n Tilsidesættelse af forpligtelser vedrørende betaling af skatter og afgifter: Has the economic operator breached its obligations relating to the payment of taxes,\n both in the country in which it is established and in Member State of the contracting\n authority or contracting entity if other than the country of establishment?\n \n \n \n 5 Delkontrakt5.1 Delkontrakt: LOT-0000Titel: Tender for a framework agreement on the delivery of Cybersecurity advisory and assessment\n services\n Beskrivelse: Danmarks Nationalbank (the Customer) seeks to establish a framework agreement with\n one Supplier for the provision of specialized cybersecurity advisory and assessment\n services.
As the operator and overseer of critical financial infrastructure in\n Denmark, Danmarks Nationalbank supports essential processes and systems that require\n a high level of security, resilience, and trust.
The Customer continuously introduces\n new technologies, vendors, services and architectural changes that may impact its\n security posture. To ensure informed decision-making and maintain an appropriate level\n of cyber resilience, the Customer seeks access to independent technical experts capable\n of evaluating cybersecurity risks from an adversarial perspective.
The purpose\n of the agreement is to provide the Customer with on-demand access to highly skilled\n technical cybersecurity experts with offensive security backgrounds, capable of delivering\n rapid, pragmatic and risk-based assessments of new technologies, systems, solutions,\n architectures and security-related questions.
The service shall complement the\n Customer's internal cybersecurity capabilities by providing independent expert judgement,\n specialized technical expertise and threat-informed analysis to support secure decision-making,\n risk management and operational resilience.
The Supplier shall provide access\n to cybersecurity specialists with relevant expertise across infrastructure, cloud,\n applications, identity and access management, emerging technologies, adversarial techniques\n and offensive security methodologies.\n \n 5.1.1 FormålKontraktens hovedformål: Tjenesteydelser\n Primær klassifikation (cpv): 72220000 Konsulentvirksomhed i forbindelse med systemer og teknik\n Supplerende klassifikation (cpv): 72000000 It-tjenester: rådgivning, programmeludvikling, internet og support\n Supplerende klassifikation (cpv): 72600000 Support- og konsulentvirksomhed i forbindelse med edb\n \n 5.1.2 UdførelsesstedPostadresse: Langelinie Allé 47 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n \n \n 5.1.5 VærdiAnslået værdi eksklusiv moms: 9.200.000 Dansk krone\n Rammeaftalens maksimumværdi: 11.420.000 Dansk krone\n \n 5.1.6 Generelle oplysningerReserveret deltagelse: Deltagelse uden forbehold.\n Indkøbsprojekt, der ikke finansieres med EU-midler\n Udbuddet er omfattet af aftalen om offentlige udbud (GPA): ja\n Dette udbud er også egnet for små og mellemstore virksomheder (SMV'er): ja\n Yderligere oplysninger: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply.
All communication in connection with the tender procedure,\n including questions and answers, must take place through the electronic tendering\n system. Reference is made to the tender specifications and appendix B for information\n concerning questions and answers.
Interested operators are requested to keep\n updated via the electronic tendering system. If the candidate encounters problems\n with the system, please contact support by submitting a ticket at the following link\n https://contact.mercell.com/?lang=en or by calling (+45) 70 20 80 14.
As its application,\n the candidate must submit an ESPD as preliminary documentation of the circumstances\n set out in section 148(1), paras (1)-(3) of the Danish Public Procurement Act (udbudsloven).\n It is not necessary for the candidate to sign the ESPD document. For groups of operators\n (e.g. a consortium), a separate ESPD must be submitted for each participating operator.\n Where the candidate is a group of operators, the ESPD document of each participant\n in the group must be signed by the participant in question. The candidate heading\n the group and submitting the application is not required to sign its ESPD document.\n If the candidate relies on the capacities of other entities, an ESPD must be submitted\n for and signed by each of the entities on which it relies.
Before the award\n decision is made, the tenderer to whom the contracting entity intends to award the\n contract must provide documentation of the information submitted in the ESPD pursuant\n to sections 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative\n to the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the applicant and tenderer may submit to the contracting entity a\n certificate of registration in an official list of approved economic operators, see\n section 156 of the Danish Public Procurement Act, issued by the competent authority.\n The contracting entity only accepts certificates of registration in an official list\n from applicants and tenderers established in the country holding the official list.
The\n contracting entity will select the number of candidates by applying the selection\n criteria stated in this contract notice, unless the contracting entity receives no\n more than the stated number of compliant requests for participation.
The\n difference between the estimated value and the maximum value is due to the uncertainty\n of the final value of the individual orders placed under the framework agreement.\n The estimated value thus reflects the contracting entity’s estimate of the expected\n purchase under the framework agreement, whereas the maximum value reflects the highest\n value of all contracts to be performed within the term of the framework agreement.\n This takes into account, partly, the contracting entity’s expectations based on the\n most likely purchase under the framework agreement, partly, the expected uncertainty\n of such estimate. In relation to the estimated value, particular attention is drawn\n to the fact that the tenderers are not guaranteed any minimum purchase under the framework\n agreement, and the estimate therefore implies no commitment on the part of the contracting\n entity to make a minimum purchase under the framework agreement. Decisive for the\n estimated value of the framework agreement will be unexpected need for the services\n covered by the Agreement.
It is specifically pointed out to the tenderer\n that the tenderer is bound by the prices offered, irrespective of the turnover specifically\n achieved under the framework agreement. This means that the tenderer is also bound\n by the prices offered if the specific turnover deviates from the estimated value,\n both upwards and downwards.
It should be noted that each candidate may only\n submit one application for prequalification.
The contracting entity may use\n the procedure of section 159(5) of the Danish Public Procurement Act in the event\n that applications or tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the agreement will\n commence on signature of the framework agreement.
In addition to the indicated\n duration of contract, an expiry phase that is flexible in time will be required when\n the contract is at an end in order to ensure an undisturbed continuation of the services\n in connection with a possible re-tender.
The agreement is not divided into\n lots, as a further division would undermine the close cooperation with a particularly\n trusted partner envisaged by this procurement. Due to the nature of the services,\n the supplier must necessarily have access to highly sensitive information, which makes\n a single-provider structure justified and proportionate.\n \n \n 5.1.9 UdvælgelseskriterierKilder til udvælgelseskriterier: Bekendtgørelse\n Kriterium: Referencer på specificerede tjenesterBeskrivelse af udvælgelseskriterium: The candidate must submit the ESPD with the following information:
A list\n of the 5 most significant comparable services that the candidate has carried out in\n the latest 3 years before the expiry of the deadline for application.
Only\n references relating to services carried out at the time of the deadline for application\n will be given importance in the evaluation of whether the requirements regarding technical\n and professional capacity have been complied with, see below. Hence, in the case of\n an ongoing task, only the part of the services already performed at the time of the\n deadline for application will be included in the evaluation of the reference.
Each\n reference is requested to include a brief description of the deliveries made. The\n description of the delivery should include a clear description of the services to\n which the delivery relates and the candidate’s role(s) in the performance of the delivery.\n The reference is furthermore requested to include the financial value of the delivery\n (amount), the date of delivery and the name of the customer (recipient).
When\n indicating the date of the delivery, the candidate is requested to indicate the date\n of commencement and finalisation of the delivery. If this is not possible, for example\n if the tasks were performed on a continuous basis under a framework agreement, the\n candidate is asked to indicate how the date is specified.
No more than 5\n references may be stated, irrespective of whether the candidate is a single operator,\n whether the candidate relies on the technical capacity of other entities, or is a\n group of operators (e.g. a consortium). Where more than 5 references are stated, only\n the most recent 5 references will be taken into account. Any additional references\n will be disregarded. If it is not possible to decide which references are the most\n recent 5 references, the references will be selected by drawing lots.
In\n this procedure, the candidate may rely on the technical capacity of other operators\n to fulfil the suitability requirements. The operator(s) making its/their technical\n capacity available to the candidate must sign a letter of commitment, see further\n in the tender specifications. The form is enclosed as an attachment to the tender\n specifications.
If the candidate relies on the professional experience of\n other entities for the performance of specific parts of the services comprised by\n the contract, such specific parts of the services under the contract must be performed\n by the entity on which the candidate relies.
The ESPD serves as provisional\n documentation that the candidate fulfils the requirements in respect of technical\n and professional capacity.
Before the award decision is made, the candidate\n to whom the contracting entity intends to award the contract must submit documentation\n that the information stated in the ESPD is accurate.
No additional documentation\n of technical and professional capacity will be required from the candidate. However,\n the contracting entity reserves the right to contact the tenderer or the customer\n stated in the reference for verification of the information stated in the reference,\n including the dates of the reference indicated.
Minimum requirement: as a\n minimum requirement for participation, the candidate must provide documentation of\n at least one (1) reference for the provision of specialized cybersecurity advisory\n and assessment services.\n \n Kriterium: Referencer på specificerede tjenesterBeskrivelse af udvælgelseskriterium: Criteria for selection among the suitable candidates. The shortlisting of candidates\n invited to tender will be based on an evaluation of which candidates have documented\n the most relevant specialized cybersecurity advisory and assessment services in relation\n to the main services put up for tender.
The relevance assessment will be made\n on the basis of the extent to which the references, combined, document experience\n in the provision of services that are comparable to the main services put up for tender.\n
In the evaluation of which candidates have documented the most relevant services,\n the contracting entity will award points to the candidates on a scale from 1-5 for\n each main service, based on the extent to which the references, combined, document\n relevant experience in providing the main services. On this basis, the candidate will\n be awarded a total score calculated as the average number of points awarded for the\n main services.
In the selection, the contracting entity will place particular\n emphasis on the following main services:
• Demonstrated experience with delivery\n of similar services into central banking, financial sector or similar regulated environments
•\n Demonstrated experience with providing a multidisciplinary team across relevant areas\n such as technical assessment, advisory, AI assurance, operational resilience and incident\n readiness
• Demonstrated experience in technical assurance/technical validation\n activities in live, business-critical or production environments
• Demonstrated\n experience in delivering similar services including communication with both technical\n and non-technical customer resources
• Demonstrated experience with delivering\n similar services in various it-environments, ex. Cloud, outsourced, on-prem and in-house\n devel-oped systems\n Kriteriet vil blive anvendt til at udvælge de ansøgere, som skal opfordres til at deltage i anden fase af proceduren\n \n Oplysninger om den anden fase i en procedure, der afvikles i to faser:Mindsteantallet af ansøgere, som skal opfordres til at deltage i anden fase af proceduren: 5\n Det højeste antal ansøgere, som skal opfordres til at deltage i anden fase af proceduren: 5\n Proceduren afvikles i successive faser. I hver fase kan nogle ansøgere blive udelukket\n \n \n 5.1.10 TildelingskriterierKriterium:\n \n Beskrivelse: Cfr. Appendix A to the tender specificaitons.\n Kategori for tildelingskriteriet vægt: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 30\n \n \n Kriterium:\n \n Beskrivelse: Cfr. Appendix A to the tender specifications\n Kategori for tildelingskriteriet vægt: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 40\n \n \n Kriterium:\n Navn: Collaboration model\n Beskrivelse: Cfr. Appendix A to the tender specifications\n Kategori for tildelingskriteriet vægt: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 20\n \n \n Kriterium:\n Navn: Risk management and information security\n Beskrivelse: Cfr. Appendix A to the tender specifications\n Kategori for tildelingskriteriet vægt: Vægtning (procentdel, præcis)Tildelingskriterium talværdi: 10\n \n \n \n 5.1.11 TilbudsdokumenterAdresse på udbudsdokumenterne: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=460124&TID=200420571&B=\n \n 5.1.12 TilbudsvilkårVilkår for proceduren:Der kræves sikkerhedsgodkendelse\n Beskrivelse: The winning tenderer's proposed team shall have security clearance before commencing\n the Services.\n \n Vilkår for indgivelse:Elektronisk indgivelse: Påkrævet\n Indgivelsesadresse: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=460124&TID=200420571&B=\n Sprog, som tilbud og ansøgninger om deltagelse kan indgives på: engelsk\n Elektronisk katalog: Ikke tilladt\n Alternative tilbud: Ikke tilladt\n Tilbudsgivere kan indgive mere end ét tilbud: Ikke tilladt\n Frist for modtagelse af anmodninger om deltagelse: 02-10-2026 10:00 +00:00\n \n Betingelser for kontraktens udførelse:Udførelsen af kontrakten skal ske inden for rammerne af programmer for beskyttet beskæftigelse: Nej\n Vilkår relateret til kontraktens udførelse: The contract has incorporated the corporate social responsibility considerations,\n as appropriate, as laid down in the conventions on the basis of which the principles\n of the UN Global Compact are worded and as laid down in the OECD Guidelines for Multinational\n Enterprises.
If the contract is awarded to a group of operators (such as\n a consortium), the participants of the group must undertake joint and several liability\n and appoint a joint representative.\n Elektronisk fakturering: Påkrævet\n Der vil blive anvendt elektronisk bestilling: nej\n Der vil blive anvendt elektronisk betaling: ja\n \n \n 5.1.15 TeknikkerRammeaftale:Rammeaftale uden fornyet iværksættelse af konkurrence\n Det maksimale antal deltagere: 1\n \n Oplysninger om det dynamiske indkøbssystem:Intet dynamisk indkøbssystem\n \n \n 5.1.16 Yderligere oplysninger, mægling og gennemgangOrganisation med ansvar for klager: Klagenævnet for Udbud\n Oplysninger om klagefrister: Pursuant to the Danish Act on the Complaints Board for Public Procurement, etc. (lov\n om Klagenævnet for Udbud m.v.) (the Act is available (in Danish) at www.retsinformation.dk),\n the following deadlines apply to the lodging of complaints:
Complaints of\n not having been selected must be submitted to the Danish Complaints Board for Public\n Procurement before the expiry of 20 calendar days, see section 7(1) of the Act, from\n the day after submission of notification to the candidates concerned of the identity\n of the successful tenderer where the notification is accompanied by an explanation\n of the grounds for the decision in accordance with section 2(1), para (1) of the Act\n and section 171(2) of the Danish Public Procurement Act.
In other situations,\n complaints of award procedures, see section 7(2) of the Act, must be lodged with the\n Danish Complaints Board for Public Procurement before the expiry of:
1) 45\n calendar days after the contracting entity has published a notice in the Official\n Journal of the European Union that the contracting entity has entered into a contract.\n The deadline is calculated from the day after the day when the notice was published.
2)\n 30 calendar days calculated from the day after the day when the contracting entity\n has notified the candidates concerned that a contract based on a framework agreement\n with reopening of competition or a dynamic purchasing system has been entered into\n if the notification has included an explanation of the relevant grounds for the decision.
3)\n 6 months after the contracting entity entered into a framework agreement calculated\n from the day after the day when the contracting entity notified the candidates and\n tenderers concerned, see section 2(2) of the Act and section 171(4) of the Danish\n Public Procurement Act.
4) 20 calendar days calculated from the day after\n the contracting entity has submitted notification of its decision, see section 185(2)\n of the Danish Public Procurement Act.
Not later than at the time of lodging\n a complaint with the Danish Complaints Board for Public Procurement, the complainant\n must notify the contracting entity in writing that a complaint has been lodged with\n the Danish Complaints Board for Public Procurement and whether the complaint was lodged\n during the standstill period, see section 6(4) of the Act. In cases where the complaint\n was not lodged within the standstill period, the complainant must furthermore indicate\n whether a suspensory effect of the complaint has been requested, see section 12(1)\n of the Act.
The e-mail address of the Complaints Board for Public Procurement\n is klfu@naevneneshus.dk.
The Complaints Board’s own complaints procedure\n is available at https://naevneneshus.dk/start-din-klage/klagenaevnet-for-udbud/vejledning/.\n Organisation, der leverer supplerende oplysninger om udbudsproceduren: Danmarks Nationalbank\n Organisation, der sikrer adgang til udbudsdokumenterne offline: Danmarks Nationalbank\n Organisation, der leverer yderligere oplysninger om klageprocedurerne: Konkurrence- og Forbrugerstyrelsen\n Organisation, der modtager ansøgninger om deltagelse: Danmarks Nationalbank\n Organisation, der behandler tilbud: Danmarks Nationalbank\n \n \n \n 8 Organisationer8.1 ORG-0001Officielt navn: Danmarks Nationalbank\n Registreringsnummer: 61092919\n Afdeling: Danmarks Nationalbank\n Postadresse: Langelinie Allé 47 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n E-mail: amje@nationalbanken.dk\n \n Køberprofil: https://eu.eu-supply.com/ctm/company/companyinformation/index/281426\n Denne organisations roller:\n Organisation, der leverer supplerende oplysninger om udbudsproceduren\n Organisation, der sikrer adgang til udbudsdokumenterne offline\n Organisation, der modtager ansøgninger om deltagelse\n Organisation, der behandler tilbud\n \n \n 8.1 ORG-0002Officielt navn: Klagenævnet for Udbud\n Registreringsnummer: 37795526\n Postadresse: Nævnenes Hus, Toldboden 2 \n \n \n Landsdel (NUTS): Østjylland (DK042)\n \n E-mail: klfu@naevneneshus.dk\n \n Internetadresse: https://klfu.naevneneshus.dk/\n Denne organisations roller:Organisation med ansvar for klager\n \n \n 8.1 ORG-0003Officielt navn: Konkurrence- og Forbrugerstyrelsen\n Registreringsnummer: 10294819\n Postadresse: Carl Jacobsens Vej 35 \n \n \n Landsdel (NUTS): Byen København (DK011)\n \n \n \n Internetadresse: http://www.kfst.dk\n Denne organisations roller:Organisation, der leverer yderligere oplysninger om klageprocedurerne\n \n \n 8.1 ORG-0004Officielt navn: Mercell Holding ASA\n Registreringsnummer: 980921565\n Postadresse: Askekroken 11 \n \n \n Landsdel (NUTS): Oslo (NO081)\n \n \n E-mail: publication@mercell.com\n \n \n Internetadresse: http://mercell.com/\n Denne organisations roller:\n \n \n \n Oplysninger om bekendtgørelsenBekendtgørelsens ID: f104f4f6-8fc3-4624-b286-6968e40f18d1 - 01\n Formulartype: Konkurrencevilkår\n Bekendtgørelsestype: Udbuds- eller koncessionsbekendtgørelse – standardordningen\n Afsendelsesdato for bekendtgørelsen: 01-09-2026 08:00 +00:00\n Dato for afsendelse af bekendtgørelsen (eSender): 01-09-2026 08:00 +00:00\n Bekendtgørelsens officielle sprog: engelsk \n Bekendtgørelsesnummer: 00603665-2026\n \n Offentliggørelsesdato: 02-09-2026\n \n \n","htmlEN":"\n\n \n 1 Buyer1.1 BuyerOfficial name: Danmarks Nationalbank\n Legal type of the buyer: Body governed by public law\n Activity of the contracting authority: Economic affairs\n \n \n 2 Procedure2.1 ProcedureTitle: Tender for a framework agreement on the delivery of Cybersecurity advisory and assessment\n services\n Description: Danmarks Nationalbank (the Customer) seeks to establish a framework agreement with\n one Supplier for the provision of specialized cybersecurity advisory and assessment\n services.
As the operator and overseer of critical financial infrastructure in\n Denmark, Danmarks Nationalbank supports essential processes and systems that require\n a high level of security, resilience, and trust.
The Customer continuously introduces\n new technologies, vendors, services and architectural changes that may impact its\n security posture. To ensure informed decision-making and maintain an appropriate level\n of cyber resilience, the Customer seeks access to independent technical experts capable\n of evaluating cybersecurity risks from an adversarial perspective.
The purpose\n of the agreement is to provide the Customer with on-demand access to highly skilled\n technical cybersecurity experts with offensive security backgrounds, capable of delivering\n rapid, pragmatic and risk-based assessments of new technologies, systems, solutions,\n architectures and security-related questions.
The service shall complement the\n Customer's internal cybersecurity capabilities by providing independent expert judgement,\n specialized technical expertise and threat-informed analysis to support secure decision-making,\n risk management and operational resilience.
The Supplier shall provide access\n to cybersecurity specialists with relevant expertise across infrastructure, cloud,\n applications, identity and access management, emerging technologies, adversarial techniques\n and offensive security methodologies.\n Procedure identifier: 7c03c120-69c0-4112-af76-3d30b1aab18e\n Internal identifier: TS238559\n Type of procedure: Restricted\n The procedure is accelerated: no\n 2.1.1 PurposeMain nature of the contract: Services\n Main classification (cpv): 72220000 Systems and technical consultancy services\n Additional classification (cpv): 72000000 IT services: consulting, software development, Internet and support\n Additional classification (cpv): 72600000 Computer support and consultancy services\n \n 2.1.2 Place of performancePostal address: Langelinie Allé 47 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n \n 2.1.3 ValueEstimated value excluding VAT: 9.200.000 Danish krone\n Maximum value of the framework agreement: 11.420.000 Danish krone\n \n 2.1.4 General informationAdditional information: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply.
All communication in connection with the tender procedure,\n including questions and answers, must take place through the electronic tendering\n system. Reference is made to the tender specifications and appendix B for information\n concerning questions and answers.
Interested operators are requested to keep\n updated via the electronic tendering system. If the candidate encounters problems\n with the system, please contact support by submitting a ticket at the following link\n https://contact.mercell.com/?lang=en or by calling (+45) 70 20 80 14.
As its application,\n the candidate must submit an ESPD as preliminary documentation of the circumstances\n set out in section 148(1), paras (1)-(3) of the Danish Public Procurement Act (udbudsloven).\n It is not necessary for the candidate to sign the ESPD document. For groups of operators\n (e.g. a consortium), a separate ESPD must be submitted for each participating operator.\n Where the candidate is a group of operators, the ESPD document of each participant\n in the group must be signed by the participant in question. The candidate heading\n the group and submitting the application is not required to sign its ESPD document.\n If the candidate relies on the capacities of other entities, an ESPD must be submitted\n for and signed by each of the entities on which it relies.
Before the award\n decision is made, the tenderer to whom the contracting entity intends to award the\n contract must provide documentation of the information submitted in the ESPD pursuant\n to sections 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative\n to the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the applicant and tenderer may submit to the contracting entity a\n certificate of registration in an official list of approved economic operators, see\n section 156 of the Danish Public Procurement Act, issued by the competent authority.\n The contracting entity only accepts certificates of registration in an official list\n from applicants and tenderers established in the country holding the official list.
The\n contracting entity will select the number of candidates by applying the selection\n criteria stated in this contract notice, unless the contracting entity receives no\n more than the stated number of compliant requests for participation.
The\n difference between the estimated value and the maximum value is due to the uncertainty\n of the final value of the individual orders placed under the framework agreement.\n The estimated value thus reflects the contracting entity’s estimate of the expected\n purchase under the framework agreement, whereas the maximum value reflects the highest\n value of all contracts to be performed within the term of the framework agreement.\n This takes into account, partly, the contracting entity’s expectations based on the\n most likely purchase under the framework agreement, partly, the expected uncertainty\n of such estimate. In relation to the estimated value, particular attention is drawn\n to the fact that the tenderers are not guaranteed any minimum purchase under the framework\n agreement, and the estimate therefore implies no commitment on the part of the contracting\n entity to make a minimum purchase under the framework agreement. Decisive for the\n estimated value of the framework agreement will be unexpected need for the services\n covered by the Agreement.
It is specifically pointed out to the tenderer\n that the tenderer is bound by the prices offered, irrespective of the turnover specifically\n achieved under the framework agreement. This means that the tenderer is also bound\n by the prices offered if the specific turnover deviates from the estimated value,\n both upwards and downwards.
It should be noted that each candidate may only\n submit one application for prequalification.
The contracting entity may use\n the procedure of section 159(5) of the Danish Public Procurement Act in the event\n that applications or tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the agreement will\n commence on signature of the framework agreement.
In addition to the indicated\n duration of contract, an expiry phase that is flexible in time will be required when\n the contract is at an end in order to ensure an undisturbed continuation of the services\n in connection with a possible re-tender.
The agreement is not divided into\n lots, as a further division would undermine the close cooperation with a particularly\n trusted partner envisaged by this procurement. Due to the nature of the services,\n the supplier must necessarily have access to highly sensitive information, which makes\n a single-provider structure justified and proportionate.\n \n \n Danish Public Procurement Act (Act No. 1564 of 15 Decem-ber 2015 as amended) - The tender procedure is covered by the Danish Public Procurement Act (Act No. 1564\n of 15 December 2015 as amended), which implements the Public Procurement Directive\n (Directive 2014/24/EU).\n \n 2.1.6 Grounds for exclusionSources of grounds for exclusion: Notice\n Corruption: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for corruption, by a conviction\n rendered at the most five years ago or in which an exclusion period set out directly\n in the conviction continues to be applicable? As defined in Article 3 of the Convention\n on the fight against corruption involving officials of the European Communities or\n officials of Member States of the European Union, OJ C 195, 25.6.1997, p. 1, and in\n Article 2(1) of Council Framework Decision 2003/568/JHA of 22 July 2003 on combating\n corruption in the private sector (OJ L 192, 31.7.2003, p. 54). This exclusion ground\n also includes corruption as defined in the national law of the contracting authority\n (contracting entity) or the economic operator\n Fraud: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for fraud, by a conviction\n rendered at the most five years ago or in which an exclusion period set out directly\n in the conviction continues to be applicable? Within the meaning of Article 1 of the\n Convention on the protection of the European Communities' financial interests (OJ\n C 316, 27.11.1995, p. 48).\n Money laundering or terrorist financing: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for money laundering or\n terrorist financing, by a conviction rendered at the most five years ago or in which\n an exclusion period set out directly in the conviction continues to be applicable?\n As defined in Article 1 of Directive 2005/60/EC of the European Parliament and of\n the Council of 26 October 2005 on the prevention of the use of the financial system\n for the purpose of money laundering and terrorist financing (OJ L 309, 25.11.2005,\n p. 15).\n Participation in a criminal organisation: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for participation in a\n criminal organisation, by a conviction rendered at the most five years ago or in which\n an exclusion period set out directly in the conviction continues to be applicable?\n As defined in Article 2 of Council Framework Decision 2008/841/JHA of 24 October 2008\n on the fight against organised crime (OJ L 300, 11.11.2008, p. 42).\n Terrorist offences or offences linked to terrorist activities: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for terrorist offences\n or offences linked to terrorist activities, by a conviction rendered at the most five\n years ago or in which an exclusion period set out directly in the conviction continues\n to be applicable? As defined in Articles 1 and 3 of Council Framework Decision of\n 13 June 2002 on combating terrorism (OJ L 164, 22.6.2002, p. 3). This exclusion ground\n also includes inciting or aiding or abetting or attempting to commit an offence, as\n referred to in Article 4 of that Framework Decision.\n Child labour and including other forms of trafficking in human beings: Has the economic operator itself or any person who is a member of its administrative,\n management or supervisory body or has powers of representation, decision or control\n therein been the subject of a conviction by final judgment for child labour and other\n forms of trafficking in human beings, by a conviction rendered at the most five years\n ago or in which an exclusion period set out directly in the conviction continues to\n be applicable? As defined in Article 2 of Directive 2011/36/EU of the European Parliament\n and of the Council of 5 April 2011 on preventing and combating trafficking in human\n beings and protecting its victims, and replacing Council Framework Decision 2002/629/JHA\n (OJ L 101, 15.4.2011, p. 1).\n Grave professional misconduct: Is the economic operator guilty of grave professional misconduct? Where applicable,\n see definitions in national law, the relevant notice or the procurement documents.\n Misrepresentation, withheld information, unable to provide required documents or obtained confidential information of this procedure: Can the economic operator confirm that:a) It has been guilty of serious misrepresentation\n in supplying the information required for the verification of the absence of grounds\n for exclusion or the fulfilment of the selection criteria,b) It has withheld such\n information,c) It has not been able, without delay, to submit the supporting documents\n required by a contracting authority or contracting entity, andd) It has undertaken\n to unduly influence the decision making process of the contracting authority or contracting\n entity, to obtain confidential information that may confer upon it undue advantages\n in the procurement procedure or to negligently provide misleading information that\n may have a material influence on decisions concerning exclusion, selection or award?\n Conflict of interest due to its participation in the procurement procedure: Is the economic operator aware of any conflict of interest, as indicated in national\n law, the relevant notice or the procurement documents due to its participation in\n the procurement procedure?\n Direct or indirect involvement in the preparation of this procurement procedure: Has the economic operator or an undertaking related to it advised the contracting\n authority or contracting entity or otherwise been involved in the preparation of the\n procurement procedure?\n Breaching obligation relating to payment of social security contributions: Has the economic operator breached its obligations relating to the payment social\n security contributions, both in the country in which it is established and in Member\n State of the contracting authority or contracting entity if other than the country\n of establishment?\n Breaching obligation relating to payment of taxes: Has the economic operator breached its obligations relating to the payment of taxes,\n both in the country in which it is established and in Member State of the contracting\n authority or contracting entity if other than the country of establishment?\n \n \n \n 5 Lot5.1 Lot: LOT-0000Title: Tender for a framework agreement on the delivery of Cybersecurity advisory and assessment\n services\n Description: Danmarks Nationalbank (the Customer) seeks to establish a framework agreement with\n one Supplier for the provision of specialized cybersecurity advisory and assessment\n services.
As the operator and overseer of critical financial infrastructure in\n Denmark, Danmarks Nationalbank supports essential processes and systems that require\n a high level of security, resilience, and trust.
The Customer continuously introduces\n new technologies, vendors, services and architectural changes that may impact its\n security posture. To ensure informed decision-making and maintain an appropriate level\n of cyber resilience, the Customer seeks access to independent technical experts capable\n of evaluating cybersecurity risks from an adversarial perspective.
The purpose\n of the agreement is to provide the Customer with on-demand access to highly skilled\n technical cybersecurity experts with offensive security backgrounds, capable of delivering\n rapid, pragmatic and risk-based assessments of new technologies, systems, solutions,\n architectures and security-related questions.
The service shall complement the\n Customer's internal cybersecurity capabilities by providing independent expert judgement,\n specialized technical expertise and threat-informed analysis to support secure decision-making,\n risk management and operational resilience.
The Supplier shall provide access\n to cybersecurity specialists with relevant expertise across infrastructure, cloud,\n applications, identity and access management, emerging technologies, adversarial techniques\n and offensive security methodologies.\n Internal identifier: TS238559\n 5.1.1 PurposeMain nature of the contract: Services\n Main classification (cpv): 72220000 Systems and technical consultancy services\n Additional classification (cpv): 72000000 IT services: consulting, software development, Internet and support\n Additional classification (cpv): 72600000 Computer support and consultancy services\n \n 5.1.2 Place of performancePostal address: Langelinie Allé 47 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n \n \n 5.1.3 Estimated duration\n \n 5.1.5 ValueEstimated value excluding VAT: 9.200.000 Danish krone\n Maximum value of the framework agreement: 11.420.000 Danish krone\n \n 5.1.6 General informationReserved participation: Participation is not reserved.\n Procurement Project not financed with EU Funds.\n The procurement is covered by the Government Procurement Agreement (GPA): yes\n This procurement is also suitable for small and medium-sized enterprises (SMEs): yes\n Additional information: Participation in the tender procedure may only take place by electronic means via\n the electronic tendering system used by the contracting entity. For access to the\n procurement documents, the candidate must be registered or register as a user. If\n the application contains several versions of the same document, the latest uploaded\n version will apply.
All communication in connection with the tender procedure,\n including questions and answers, must take place through the electronic tendering\n system. Reference is made to the tender specifications and appendix B for information\n concerning questions and answers.
Interested operators are requested to keep\n updated via the electronic tendering system. If the candidate encounters problems\n with the system, please contact support by submitting a ticket at the following link\n https://contact.mercell.com/?lang=en or by calling (+45) 70 20 80 14.
As its application,\n the candidate must submit an ESPD as preliminary documentation of the circumstances\n set out in section 148(1), paras (1)-(3) of the Danish Public Procurement Act (udbudsloven).\n It is not necessary for the candidate to sign the ESPD document. For groups of operators\n (e.g. a consortium), a separate ESPD must be submitted for each participating operator.\n Where the candidate is a group of operators, the ESPD document of each participant\n in the group must be signed by the participant in question. The candidate heading\n the group and submitting the application is not required to sign its ESPD document.\n If the candidate relies on the capacities of other entities, an ESPD must be submitted\n for and signed by each of the entities on which it relies.
Before the award\n decision is made, the tenderer to whom the contracting entity intends to award the\n contract must provide documentation of the information submitted in the ESPD pursuant\n to sections 151-152, cf. section 153 of the Danish Public Procurement Act. As an alternative\n to the documentation mentioned in sections 153-155, 157 and 158 of the Danish Public\n Procurement Act, the applicant and tenderer may submit to the contracting entity a\n certificate of registration in an official list of approved economic operators, see\n section 156 of the Danish Public Procurement Act, issued by the competent authority.\n The contracting entity only accepts certificates of registration in an official list\n from applicants and tenderers established in the country holding the official list.
The\n contracting entity will select the number of candidates by applying the selection\n criteria stated in this contract notice, unless the contracting entity receives no\n more than the stated number of compliant requests for participation.
The\n difference between the estimated value and the maximum value is due to the uncertainty\n of the final value of the individual orders placed under the framework agreement.\n The estimated value thus reflects the contracting entity’s estimate of the expected\n purchase under the framework agreement, whereas the maximum value reflects the highest\n value of all contracts to be performed within the term of the framework agreement.\n This takes into account, partly, the contracting entity’s expectations based on the\n most likely purchase under the framework agreement, partly, the expected uncertainty\n of such estimate. In relation to the estimated value, particular attention is drawn\n to the fact that the tenderers are not guaranteed any minimum purchase under the framework\n agreement, and the estimate therefore implies no commitment on the part of the contracting\n entity to make a minimum purchase under the framework agreement. Decisive for the\n estimated value of the framework agreement will be unexpected need for the services\n covered by the Agreement.
It is specifically pointed out to the tenderer\n that the tenderer is bound by the prices offered, irrespective of the turnover specifically\n achieved under the framework agreement. This means that the tenderer is also bound\n by the prices offered if the specific turnover deviates from the estimated value,\n both upwards and downwards.
It should be noted that each candidate may only\n submit one application for prequalification.
The contracting entity may use\n the procedure of section 159(5) of the Danish Public Procurement Act in the event\n that applications or tenders do not comply with the formal requirements of the tender\n documents.
It should be noted that the indicated term of the agreement will\n commence on signature of the framework agreement.
In addition to the indicated\n duration of contract, an expiry phase that is flexible in time will be required when\n the contract is at an end in order to ensure an undisturbed continuation of the services\n in connection with a possible re-tender.
The agreement is not divided into\n lots, as a further division would undermine the close cooperation with a particularly\n trusted partner envisaged by this procurement. Due to the nature of the services,\n the supplier must necessarily have access to highly sensitive information, which makes\n a single-provider structure justified and proportionate.\n \n 5.1.7 Strategic procurement\n 5.1.9 Selection criteriaSources of selection criteria: Notice\n Criterion: References on specified servicesDescription of selection criterion: The candidate must submit the ESPD with the following information:
A list\n of the 5 most significant comparable services that the candidate has carried out in\n the latest 3 years before the expiry of the deadline for application.
Only\n references relating to services carried out at the time of the deadline for application\n will be given importance in the evaluation of whether the requirements regarding technical\n and professional capacity have been complied with, see below. Hence, in the case of\n an ongoing task, only the part of the services already performed at the time of the\n deadline for application will be included in the evaluation of the reference.
Each\n reference is requested to include a brief description of the deliveries made. The\n description of the delivery should include a clear description of the services to\n which the delivery relates and the candidate’s role(s) in the performance of the delivery.\n The reference is furthermore requested to include the financial value of the delivery\n (amount), the date of delivery and the name of the customer (recipient).
When\n indicating the date of the delivery, the candidate is requested to indicate the date\n of commencement and finalisation of the delivery. If this is not possible, for example\n if the tasks were performed on a continuous basis under a framework agreement, the\n candidate is asked to indicate how the date is specified.
No more than 5\n references may be stated, irrespective of whether the candidate is a single operator,\n whether the candidate relies on the technical capacity of other entities, or is a\n group of operators (e.g. a consortium). Where more than 5 references are stated, only\n the most recent 5 references will be taken into account. Any additional references\n will be disregarded. If it is not possible to decide which references are the most\n recent 5 references, the references will be selected by drawing lots.
In\n this procedure, the candidate may rely on the technical capacity of other operators\n to fulfil the suitability requirements. The operator(s) making its/their technical\n capacity available to the candidate must sign a letter of commitment, see further\n in the tender specifications. The form is enclosed as an attachment to the tender\n specifications.
If the candidate relies on the professional experience of\n other entities for the performance of specific parts of the services comprised by\n the contract, such specific parts of the services under the contract must be performed\n by the entity on which the candidate relies.
The ESPD serves as provisional\n documentation that the candidate fulfils the requirements in respect of technical\n and professional capacity.
Before the award decision is made, the candidate\n to whom the contracting entity intends to award the contract must submit documentation\n that the information stated in the ESPD is accurate.
No additional documentation\n of technical and professional capacity will be required from the candidate. However,\n the contracting entity reserves the right to contact the tenderer or the customer\n stated in the reference for verification of the information stated in the reference,\n including the dates of the reference indicated.
Minimum requirement: as a\n minimum requirement for participation, the candidate must provide documentation of\n at least one (1) reference for the provision of specialized cybersecurity advisory\n and assessment services.\n \n Criterion: References on specified servicesDescription of selection criterion: Criteria for selection among the suitable candidates. The shortlisting of candidates\n invited to tender will be based on an evaluation of which candidates have documented\n the most relevant specialized cybersecurity advisory and assessment services in relation\n to the main services put up for tender.
The relevance assessment will be made\n on the basis of the extent to which the references, combined, document experience\n in the provision of services that are comparable to the main services put up for tender.\n
In the evaluation of which candidates have documented the most relevant services,\n the contracting entity will award points to the candidates on a scale from 1-5 for\n each main service, based on the extent to which the references, combined, document\n relevant experience in providing the main services. On this basis, the candidate will\n be awarded a total score calculated as the average number of points awarded for the\n main services.
In the selection, the contracting entity will place particular\n emphasis on the following main services:
• Demonstrated experience with delivery\n of similar services into central banking, financial sector or similar regulated environments
•\n Demonstrated experience with providing a multidisciplinary team across relevant areas\n such as technical assessment, advisory, AI assurance, operational resilience and incident\n readiness
• Demonstrated experience in technical assurance/technical validation\n activities in live, business-critical or production environments
• Demonstrated\n experience in delivering similar services including communication with both technical\n and non-technical customer resources
• Demonstrated experience with delivering\n similar services in various it-environments, ex. Cloud, outsourced, on-prem and in-house\n devel-oped systems\n The criteria will be used to select the candidates to be invited for the second stage of the procedure\n \n Information about the second stage of a two-stage procedure:Minimum number of candidates to be invited for the second stage of the procedure: 5\n Maximum number of candidates to be invited for the second stage of the procedure: 5\n The procedure will take place in successive stages. At each stage, some participants may be eliminated\n \n \n 5.1.10 Award criteriaCriterion:\n \n Description: Cfr. Appendix A to the tender specificaitons.\n Category of award weight criterion: Weight (percentage, exact)Award criterion number: 30\n \n \n Criterion:\n \n Description: Cfr. Appendix A to the tender specifications\n Category of award weight criterion: Weight (percentage, exact)Award criterion number: 40\n \n \n Criterion:\n Name: Collaboration model\n Description: Cfr. Appendix A to the tender specifications\n Category of award weight criterion: Weight (percentage, exact)Award criterion number: 20\n \n \n Criterion:\n Name: Risk management and information security\n Description: Cfr. Appendix A to the tender specifications\n Category of award weight criterion: Weight (percentage, exact)Award criterion number: 10\n \n \n \n 5.1.11 Procurement documentsAddress of the procurement documents: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=460124&TID=200420571&B=\n \n 5.1.12 Terms of procurementTerms of the procedure:Security clearance is required\n Description: The winning tenderer's proposed team shall have security clearance before commencing\n the Services.\n \n Terms of submission:Electronic submission: Required\n Address for submission: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=460124&TID=200420571&B=\n Languages in which tenders or requests to participate may be submitted: English\n Electronic catalogue: Not allowed\n \n Tenderers may submit more than one tender: Not allowed\n Deadline for receipt of requests to participate: 02-10-2026 10:00 +00:00\n \n Terms of contract:The execution of the contract must be performed within the framework of sheltered employment programmes: No\n Conditions relating to the performance of the contract: The contract has incorporated the corporate social responsibility considerations,\n as appropriate, as laid down in the conventions on the basis of which the principles\n of the UN Global Compact are worded and as laid down in the OECD Guidelines for Multinational\n Enterprises.
If the contract is awarded to a group of operators (such as\n a consortium), the participants of the group must undertake joint and several liability\n and appoint a joint representative.\n Electronic invoicing: Required\n Electronic ordering will be used: no\n Electronic payment will be used: yes\n \n \n 5.1.15 TechniquesFramework agreement:Framework agreement, without reopening of competition\n Maximum number of participants: 1\n \n Information about the dynamic purchasing system:No dynamic purchase system\n \n \n 5.1.16 Further information, mediation and reviewReview organisation: Klagenævnet for Udbud\n Information about review deadlines: Pursuant to the Danish Act on the Complaints Board for Public Procurement, etc. (lov\n om Klagenævnet for Udbud m.v.) (the Act is available (in Danish) at www.retsinformation.dk),\n the following deadlines apply to the lodging of complaints:
Complaints of\n not having been selected must be submitted to the Danish Complaints Board for Public\n Procurement before the expiry of 20 calendar days, see section 7(1) of the Act, from\n the day after submission of notification to the candidates concerned of the identity\n of the successful tenderer where the notification is accompanied by an explanation\n of the grounds for the decision in accordance with section 2(1), para (1) of the Act\n and section 171(2) of the Danish Public Procurement Act.
In other situations,\n complaints of award procedures, see section 7(2) of the Act, must be lodged with the\n Danish Complaints Board for Public Procurement before the expiry of:
1) 45\n calendar days after the contracting entity has published a notice in the Official\n Journal of the European Union that the contracting entity has entered into a contract.\n The deadline is calculated from the day after the day when the notice was published.
2)\n 30 calendar days calculated from the day after the day when the contracting entity\n has notified the candidates concerned that a contract based on a framework agreement\n with reopening of competition or a dynamic purchasing system has been entered into\n if the notification has included an explanation of the relevant grounds for the decision.
3)\n 6 months after the contracting entity entered into a framework agreement calculated\n from the day after the day when the contracting entity notified the candidates and\n tenderers concerned, see section 2(2) of the Act and section 171(4) of the Danish\n Public Procurement Act.
4) 20 calendar days calculated from the day after\n the contracting entity has submitted notification of its decision, see section 185(2)\n of the Danish Public Procurement Act.
Not later than at the time of lodging\n a complaint with the Danish Complaints Board for Public Procurement, the complainant\n must notify the contracting entity in writing that a complaint has been lodged with\n the Danish Complaints Board for Public Procurement and whether the complaint was lodged\n during the standstill period, see section 6(4) of the Act. In cases where the complaint\n was not lodged within the standstill period, the complainant must furthermore indicate\n whether a suspensory effect of the complaint has been requested, see section 12(1)\n of the Act.
The e-mail address of the Complaints Board for Public Procurement\n is klfu@naevneneshus.dk.
The Complaints Board’s own complaints procedure\n is available at https://naevneneshus.dk/start-din-klage/klagenaevnet-for-udbud/vejledning/.\n Organisation providing additional information about the procurement procedure: Danmarks Nationalbank\n Organisation providing offline access to the procurement documents: Danmarks Nationalbank\n Organisation providing more information on the review procedures: Konkurrence- og Forbrugerstyrelsen\n Organisation receiving requests to participate: Danmarks Nationalbank\n Organisation processing tenders: Danmarks Nationalbank\n \n \n \n 8 Organisations8.1 ORG-0001Official name: Danmarks Nationalbank\n Registration number: 61092919\n Department: Danmarks Nationalbank\n Postal address: Langelinie Allé 47 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n Contact point: Astrid Jepsen\n Email: amje@nationalbanken.dk\n \n Buyer profile: https://eu.eu-supply.com/ctm/company/companyinformation/index/281426\n Roles of this organisation:\n Organisation providing additional information about the procurement procedure\n Organisation providing offline access to the procurement documents\n Organisation receiving requests to participate\n Organisation processing tenders\n \n \n 8.1 ORG-0002Official name: Klagenævnet for Udbud\n Registration number: 37795526\n Postal address: Nævnenes Hus, Toldboden 2 \n \n \n Country subdivision (NUTS): Østjylland (DK042)\n \n Email: klfu@naevneneshus.dk\n \n Internet address: https://klfu.naevneneshus.dk/\n Roles of this organisation:\n \n \n 8.1 ORG-0003Official name: Konkurrence- og Forbrugerstyrelsen\n Registration number: 10294819\n Postal address: Carl Jacobsens Vej 35 \n \n \n Country subdivision (NUTS): Byen København (DK011)\n \n \n \n Internet address: http://www.kfst.dk\n Roles of this organisation:Organisation providing more information on the review procedures\n \n \n 8.1 ORG-0004Official name: Mercell Holding ASA\n Registration number: 980921565\n Postal address: Askekroken 11 \n \n \n Country subdivision (NUTS): Oslo (NO081)\n \n \n Email: publication@mercell.com\n \n \n Internet address: http://mercell.com/\n Roles of this organisation:\n \n \n \n Notice informationNotice identifier/version: f104f4f6-8fc3-4624-b286-6968e40f18d1 - 01\n \n Notice type: Contract or concession notice – standard regime\n Notice dispatch date: 01-09-2026 08:00 +00:00\n Notice dispatch date (eSender): 01-09-2026 08:00 +00:00\n Languages in which this notice is officially available: English \n Notice publication number: 00603665-2026\n OJ S issue number: 169/2026\n Publication date: 02-09-2026\n \n \n","opsummeringDA":{"card":{"titel":"Tender for a framework agreement on the delivery of Cybersecurity advisory and assessment services","ordregiver":"Danmarks Nationalbank","ordregiverId":"61092919 ","ordregiverIdDatavasket":"61092919","publiceringsdato":"2026-09-02+02:00","cpvKode":"72220000","cpvTitel":"Konsulentvirksomhed i forbindelse med systemer og teknik","formulartype":"Konkurrencevilkår","formulartypeKode":"competition","tidsfrister":["2026-10-02T10:00:00Z"],"alleOrdregivere":["Danmarks Nationalbank"],"anslaaetVaerdi":"9200000","anslaaetVaerdiValuta":"DKK","beskrivelse":"Danmarks Nationalbank (the Customer) seeks to establish a framework agreement with one Supplier for the provision of specialized cybersecurity advisory and assessment services.\nAs the operator and overseer of critical financial infrastructure in Denmark, Danmarks Nationalbank supports essential processes and systems that require a high level of security, resilience, and trust.\nThe Customer continuously introduces new technologies, vendors, services and architectural changes that may impact its security posture. To ensure informed decision-making and maintain an appropriate level of cyber resilience, the Customer seeks access to independent technical experts capable of evaluating cybersecurity risks from an adversarial perspective.\nThe purpose of the agreement is to provide the Customer with on-demand access to highly skilled technical cybersecurity experts with offensive security backgrounds, capable of delivering rapid, pragmatic and risk-based assessments of new technologies, systems, solutions, architectures and security-related questions.\nThe service shall complement the Customer's internal cybersecurity capabilities by providing independent expert judgement, specialized technical expertise and threat-informed analysis to support secure decision-making, risk management and operational resilience.\nThe Supplier shall provide access to cybersecurity specialists with relevant expertise across infrastructure, cloud, applications, identity and access management, emerging technologies, adversarial techniques and offensive security methodologies.","bkSubTypeKode":"16","bkSubType":"Udbudsbekendtgørelse – det generelle direktiv, standardordningen","erAendring":false},"indholdsType":"HENTET_FRA_TED","sekundaereOrdregivere":[],"udforelsesstedNutsCode":["DK011"],"udforelsesstedSubLand":["Byen København"],"udforelsesstedLand":["Danmark"],"udforelsesstedBy":["Copenhagen Ø"],"tilbudsfrister":[],"intressentfrister":[],"deltagelsefrister":["2026-10-02T10:00:00Z"],"svarfrister":[],"antalParts":0,"antalLots":1,"udbudsDokumenter":["https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=460124&TID=200420571&B="]},"opsummeringEN":{"card":{"titel":"Tender for a framework agreement on the delivery of Cybersecurity advisory and assessment services","ordregiver":"Danmarks Nationalbank","ordregiverId":"61092919 ","ordregiverIdDatavasket":"61092919","publiceringsdato":"2026-09-02+02:00","cpvKode":"72220000","cpvTitel":"Systems and technical consultancy services","formulartype":"Competition","formulartypeKode":"competition","tidsfrister":["2026-10-02T10:00:00Z"],"alleOrdregivere":["Danmarks Nationalbank"],"anslaaetVaerdi":"9200000","anslaaetVaerdiValuta":"DKK","beskrivelse":"Danmarks Nationalbank (the Customer) seeks to establish a framework agreement with one Supplier for the provision of specialized cybersecurity advisory and assessment services.\nAs the operator and overseer of critical financial infrastructure in Denmark, Danmarks Nationalbank supports essential processes and systems that require a high level of security, resilience, and trust.\nThe Customer continuously introduces new technologies, vendors, services and architectural changes that may impact its security posture. To ensure informed decision-making and maintain an appropriate level of cyber resilience, the Customer seeks access to independent technical experts capable of evaluating cybersecurity risks from an adversarial perspective.\nThe purpose of the agreement is to provide the Customer with on-demand access to highly skilled technical cybersecurity experts with offensive security backgrounds, capable of delivering rapid, pragmatic and risk-based assessments of new technologies, systems, solutions, architectures and security-related questions.\nThe service shall complement the Customer's internal cybersecurity capabilities by providing independent expert judgement, specialized technical expertise and threat-informed analysis to support secure decision-making, risk management and operational resilience.\nThe Supplier shall provide access to cybersecurity specialists with relevant expertise across infrastructure, cloud, applications, identity and access management, emerging technologies, adversarial techniques and offensive security methodologies.","bkSubTypeKode":"16","bkSubType":"Contract notice – general directive, standard regime","erAendring":false},"indholdsType":"HENTET_FRA_TED","sekundaereOrdregivere":[],"udforelsesstedNutsCode":["DK011"],"udforelsesstedSubLand":["Byen København"],"udforelsesstedLand":["Denmark"],"udforelsesstedBy":["Copenhagen Ø"],"tilbudsfrister":[],"intressentfrister":[],"deltagelsefrister":["2026-10-02T10:00:00Z"],"svarfrister":[],"antalParts":0,"antalLots":1,"udbudsDokumenter":["https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=460124&TID=200420571&B="]}}