Search

  • Search

    Detection and response technology and services

    Veikkaus Oy

    Detection and response technology and services

    1. Competition notice published

      24. feb. kl. 10:4424. februar 2026 kl. 10:44

    2. Questions deadline

      16. mars kl. 10:0016. mars 2026 kl. 10:00

    3. Tender submission deadline

      31. mars kl. 09:0031. mars 2026 kl. 09:00

    4. Opening date

      31. mars kl. 09:0531. mars 2026 kl. 09:05

    5. Tender validity period

      30. juni kl. 09:0030. juni 2026 kl. 09:00

    Brief

    Finland: Tenders/Veikkaus Oy/Detection and response technology and services

    Expired

    The competition has expired without a winner being announced.

    Brief

    IT-drift og support

    Veikkaus Oy needs managed Detection and Response services and related technology components to strengthen and evolve its security operations capabilities. The services should be cloud-native, scalable, and automation-driven, utilizing AI and ML for continuous advancement of security operations, aiming for proactive, data-driven protection and improved operational efficiency across on-premises and multicloud environments. Tenderers must sign a non-disclosure agreement to access full tender documents. Tenders will be evaluated based on Price (60%) and Quality (40%), with Quality points divided into Service Requirements (30 points), Technology Requirements (20 points), Integrations (6 points), Preliminary Project Plan (60 points), and Key Personnel Interview (72 points).

    About the bid

      Veikkaus is initiating a tendering process for modern security services and related technology components to strengthen and evolve its security operations capabilities. Veikkaus seeks managed Detection and Response services on top of cloud-native, scalable, and automation-driven solutions that utilize Artificial Intelligence (AI) and Machine Learning (ML) to enable continuous advancement of security operations. The goal is to achieve proactive, data-driven protection and improved operational efficiency across all business environments – both on-premises and in our multicloud-cloud setup. Veikkaus requires the signing of a non-disclosure agreement in order for the tenderers to gain full access to the documents attached to the request for tenders (Annex 8 Integrations & Annex 12 Log Sources). Tenderers must send the signed non-disclosure agreement (Annex 13) to: hankinnat@veikkaus.fi . After submission, Veikkaus will provide the confidential materials to the tenderer who has signed the agreement.Main features of the procedure1. GENERAL The legislation concerning the public procurement is applied to the procurement. Type of procedure is open procedure. 2. CONTRACT NOTICE A contract notice has been published on the website www.hankintailmoitukset.fi and http://ted.europa.eu. The contract award notice shall be published after the award decision. 3. SUBMITTING THE TENDER AS A GROUP OF ECONOMIC OPERATORS AND SUBCONTRACTING The tenderer may submit the tender as a group of economic operators. In this case, however, it is required that the enterprises that belong to the group undertake with joint liability to fulfill the obligations and responsibilities of the contract. If the group is awarded with the contract, all group members shall sign the contract. The members of the group may not be changed during the procurement procedure or contract period. The group and the supplier with subcontractors is required to have the technical, economic and financial and other capacities to provide the goods and services in accordance with the contract for the whole contract period. During the tender competition and during the contract period, the supplier may be requested to provide proof on commitments and contracts that they have made with the notified subcontractors and which may affect the supplier’s capacity to meet the obligations of the contract. The group may be requested to provide corresponding proof on how the relationships between the members of the group have been arranged. If the tenderer uses subcontractors, it shall be responsible for the work of its subcontractors as of their own work. If the tenderer participates in the procurement process independently, using the services of its subcontractors as a part of its tender and being responsible for their work, the tenderer must state in the Subcontractors form how the subcontractor participates in producing the service. During the contract period, replacing subcontractors is possible only if it does not result to significant or material changes of the contract, and only with the consent of the contracting authority. 4. USING RESOURCES OF OTHER ENTITIES The tenderer or a group of economic operators may use the resources of other entities to fulfill the requirements of the invitation to tender without taking into account the legal nature of their relationship. The resources of other entities must be de facto at the disposal of the tenderer or the group of economic operators during the procurement process and the contract period. Such resources may include, for example: 1) Relying professional experience of other economic entity, which for example belong to the same group of companies, provided that this entity is named in the tender as a subcontractor for the tenderer or the group of economic operators, and it de facto participates in supplying the service; 2) the use of other company's personnel to fulfill the requirements concerning professional qualifications, provided that these persons de facto participate in supplying the service; 3) resources concerning economic and financial standing; 4) resources concerning technical capabilities, provided that such resources are de facto utilized to fulfill the requirements of the procurement. 5. PROCESSING OF TENDERS 5.1 SUITABILITY OF TENDERS Before the tenders are processed it shall be assessed whether the tenderers meet the technical, professional and economic and financial requirements presented in clause/form "Exclusion and suitability (ESPD)". The tenderer’s suitability shall be examined using the information provided in the tender, other financial statements (if separately requested) and the information available from risk rating reports. Tenderers who do not meet the minimum requirements set in the Call for Tenders shall be excluded from the tender competition. A tenderer who has been convicted of or in which any person with powers of representation, decision making or control has been convicted of an offence as referred in EU Public Procurement Directive 57 article, section 1 or to extortionate work discrimination as stated in the Criminal Code of Finland, chapter 47 section 3(a) shall also be excluded from the tender competition. A tenderer to whom a criterion for exclusion as referred to in Public Procurement Act may also be excluded from the tender competition. 5.2 COMPLIANCE OF TENDERS WITH THE CALL FOR TENDERS The solution and services tendered shall comply with the content of the Call for Tenders and its annexes. All the requested information and required annexes must be annexed to the tender. In examining the compliance of the tender the tender is assessed based on the entire content of the tender. Tenders that are not in compliance with the Call for Tenders or in accordance with the conditions of the tendering procedure shall be excluded from the tender competition. 5.3 EVALUATION OF TENDERS The evaluation of the tenders shall be made according to chapter "Grounds for decision". 5.4 AWARD DECISION AND ITS NOTIFICATION The award decision shall be sent for the information of all the tenderers via email. The contract does not come into force as a result of the notification of the decision, but requires a separate written contract.

      Contact name
      Procurement
      Contact phone
      +358 943701
      Contact email
      hankinnat@veikkaus.fi
      Address
      PL 1, 01009 Veikkaus

    Custom Assessment Criteria

    Start a free trial to ask your own questions about the tender and get AI-generated answers.

    Award Criteria

    • Description

      Price: 282 total points

      Evaluation Method

      The cheapest offer gets full points according to the weight value, and the points of others are proportional to the offer of the lowest tenderer.

    • Description

      Quality: 188 total points. Quality points will not be scaled or normalised. Each Tenderer will receive exactly the number of quality points earned on the basis of its responses, in accordance with the scoring rules described in the procurement documents.

      Evaluation Method

      Quality points will not be scaled or normalised. Each Tenderer will receive exactly the number of quality points earned on the basis of its responses, in accordance with the scoring rules described in the procurement documents.

      Sub-criteria

      Description

      Service Requirements total 30 points

      Description

      Technology Requirements total 20 points

      Description

      Integrations total 6 points

      Description

      Preliminary Project Plan total 60 points

      Description

      Key Personel Interview total 72 points

    Qualification requirements

    • Description

      Leverandøren er registrert i relevante fag- eller handelsregistre i etableringsstaten.

      Documentation Requirement

      Leverandøren skal dokumentere at den er registrert i relevante fag- eller handelsregistre i etableringsstaten.

    Previous Contract Winners

    Start a free trial to see who has won similar tenders for this buyer.

    See the full notice

    Contracting authority
    Veikkaus Oy
    Title
    Detection and response technology and services
    Type
    CompetitionPrequalification
    Main code
    72000000IT services: consulting, software development, Internet and support
    Supplemental codes
    48000000Software package and information systems

    Supplemental codes added by Cobrief

    72220000Systems and technical consultancy services
    72250000System and support services
    72600000Computer support and consultancy services

    Active similar competitions

    • Istekki Oy

      IT-sikkerhet

      Tietoturvapalveluiden teknologiaratkaisut 2026-2034 (DPS)

      Istekki Oy tarvitsee tietoturvapalveluiden teknologiaratkaisuja dynaamisen hankintajärjestelmän (DPS) kautta, jonka arvo on enintään 29 miljoonaa euroa ja joka on voimassa vuoteen 2034 asti. Hankinta koskee datapalveluita, kuten neuvontaa, ohjelmistokehitystä, internetiä ja järjestelmätukea. Tarjoukset arvioidaan hinnan (50 %) ja laadun (50 %) perusteella, mutta painoarvot voivat vaihdella 0–100 % välillä DPS:n sisäisissä kilpailutuksissa.

      Dynamic purchasing system22. mai 2026
      3. nov. 2034(100+ days)
      €29,000,000

    • Digitaliseringsstyrelsen

      Programvareprodukter og lisenser

      Data Diode

      Digitaliseringsstyrelsen needs Data Diode solutions for a 3-year contract, with a maximum total value of 13.5 million DKK, to be installed and operated within the Agency's data centers in Denmark. The contract includes the initial delivery of certified Data Diode appliances (hardware and associated software) that meet Common Criteria or EUCC at EAL4 or higher, along with licenses, documentation, and support. These solutions must provide one-way traffic from the Agency's isolated Root CA environment to other network zones, preventing reverse data transfer, and support integration with existing infrastructure for file transfer, time information, monitoring, and logging. The supplier's obligations include initial delivery of four Data Diode appliances for production and staging environments in two data centers, ongoing support and maintenance, security patching, product lifecycle management, hardware replacement, and ordered services such as installation, configuration, and key ceremonies. There is an option to extend deployment to a third data center and to extend the contract and replace hardware. Award criteria are Price (40%) and Quality (60%). A minimum annual turnover of 13.5 million DKK in the latest financial year and positive equity are required.

      Competition8. sep. 2026
      14. okt. 2026(4 days)
      DKK 13,500,000

    • Digitaliseringsstyrelsen

      Programvareprodukter og lisenser

      Qualified Signature Creation Device (QSCD)

      Digitaliseringsstyrelsen needs Qualified Signature Creation Devices (QSCD) for a national qualified trust service over 10 years, with a maximum total value of 24,000,000 DKK. The contract includes the initial delivery of certified QSCD hardware, ongoing services (support, maintenance, security patching, and hardware replacements), ordered services (time-based services and options), and cross-cutting services (documentation and security). The QSCD must be installed and operated within the Agency's data centers (currently two, with an option to extend to a third) and integrate with existing infrastructure, including the Agency's certificate authority, authorisation server, and signing components. The contract includes an option to upgrade throughput capacity and an option to extend deployment to a third data center. Offers will be evaluated based on quality (60%) and price (40%). Suppliers must have a total annual turnover of at least 24,000,000 DKK in the latest available financial year and positive equity in the latest available annual report/financial statements.

      Competition8. sep. 2026
      14. okt. 2026(4 days)
      DKK 24,000,000

    • Adda Inköpscentral AB

      IT-sikkerhet

      IT-säkerhet - Incidenthantering (IRT) 2024

      Adda Inköpscentral AB behöver tjänster inom IT-säkerhet och incidenthantering (IRT) genom ett dynamiskt inköpssystem med ett maximalt totalt kontraktsvärde på 100 miljoner kronor. Tjänsterna omfattar proaktiv kontraktering av incidenthanteringstjänster som kan anpassas efter myndigheters specifika behov och IT-säkerhetsstrategi. Leverantörer måste ha erfarenhet av att leverera liknande IRT-tjänster, vilket ska styrkas med två referensuppdrag från de senaste tre åren. Det första referensuppdraget ska omfatta incidenthantering av IT-säkerhetsincidenter på minst 400 arbetstimmar, inklusive analys, åtgärd, återställning och forensiska undersökningar, för en organisation med minst 500 användare och minst 5 geografiska platser, där leverantören inte var IT-driftsleverantör. Det andra referensuppdraget ska fokusera på SCADA, ICS och OT-system, omfatta minst 150 arbetstimmar, inklusive analys, åtgärd, återställning och forensiska undersökningar, för en extern part på flera geografiska platser, där leverantören inte var IT-driftsleverantör. Båda referensuppdragen ska ha hanterat en IT-säkerhetsincident klassificerad som minst en "Betydande incident". Dessutom krävs ett ledningssystem för informationssäkerhet (LIS) enligt ISO 27001 eller motsvarande, vilket kan styrkas med ett giltigt certifikat eller genom dokumentation som visar uppfyllnad av åtta specifika punkter för systematiskt informationssäkerhetsarbete.

      Dynamic purchasing system7. nov. 2024
      30. nov. 2040(100+ days)
      SEK 100,000,000