ENTSO-E Security Plan External Auditing Services (ESPEAS)
Published deadline passed
The published deadline has passed. For multi-stage competitions a later tender deadline may still apply — check the notice or portal for the current phase.
Revisjon og økonomisk kontroll
TSCNET Services GmbH, based in Munich and ISO 27001:2022 certified, seeks a qualified third-party Regulatory Information Security Auditor to perform audits aligned with EU energy sector regulations. The contractor must be an experienced ISO 27001:2022 Lead Auditor with strong service delivery and expertise in regulatory audits. Audits must comply with frameworks from ENTSO-E and ACER, and adapt to evolving EU and national cybersecurity, data protection, and energy governance requirements. The contract is expected to span at least four years.
About the bid
- Contact phone
- +49 8945554101
- Contact email
- procurement@tscnet.eu
- Address
- Weihenstephaner Str. 9, 81673 München
TSCNET Services GmbH, based in Munich and ISO 27001:2022 certified, seeks a qualified third-party Regulatory Information Security Auditor to perform audits aligned with EU energy sector regulations. The contractor must be an experienced ISO 27001:2022 Lead Auditor with strong service delivery and expertise in regulatory audits. Audits must comply with frameworks from ENTSO-E and ACER, and adapt to evolving EU and national cybersecurity, data protection, and energy governance requirements. The contract is expected to span at least four years.
Custom Assessment Criteria
Start a free trial to ask your own questions about the tender and get AI-generated answers.
Award Criteria
Found no award criteria in the contract notice.
Qualification requirements
Description
Knockout criterion: ENTSO-E Security Plan experience based on ISO 27001:2022 and ISO 27002:2022 Information Security Standards applicable to TSCNET Services GmbH and its suppliers contracted for IT support, software development and hosting services. Conducting Type II Effectiveness Audits using control sets based on the aforementioned ISO Standards, performed and officially reported on by a certified ISO 27001:2022 Lead Auditor.
Documentation Requirement
No documentation requirements specified.
Description
Current entry in the professional or commercial register of the country of origin or presentation of a corresponding certificate.
Documentation Requirement
Professional or commercial register certificate. File name: 20250801_Tender_ESPEAS_02_CRE_Commercial_Register_Extract_company name.pdf
Description
The Applicant must demonstrate financial capacity, inter alia, by showing that his average annual turnover for the last three completed financial years is at least twice the contract value of the subject matter of this contract notice.
Documentation Requirement
Self declaration. File name: 20250801_Tender_ESPEAS_08_FinTO_Annual Turnover Declaration_company name.pdf
Description
References to services comparable to the advertised service. The following information must be provided for each reference: Client, Date of contract award, Order and final invoice value, Representation of project size and volume, Main service contents, Start and end of services, Number of applicant's employees working on the project, Naming of the responsible persons on the applicant’s side and on the reference client’s side, Providing the contact details of the reference client.
Documentation Requirement
The applicant must use the form (Reference Form) provided by the contact point. File name: 20250801_Tender_ESPEAS_04_Ref_Reference List_company name.docx
Description
Information on the average number of employees employed in the last three completed financial years, broken down by trades/fields of activity, and certifications of key personnel responsible for service delivery.
Documentation Requirement
Self-declaration. File name: 20250801_Tender_ESPEAS_09_Edu_Educational & Professional Qualifications_company name.pdf
Description
Confirmation by the applicant through self-declaration that the applicant is able to carry out the contract execution in English, including all documents and correspondence.
Documentation Requirement
Self-declaration. File name: 20250801_Tender_ESPEAS_05_Self_Self-declaration (Capacity, Resources, Quality_company name.pdf)
Description
Confirmation by the applicant through self-declaration that the applicant is able to provide project managers who speak fluent English (at least B2 or equivalent) in sufficient numbers to process the order.
Documentation Requirement
Self-declaration. File name: 20250801_Tender_ESPEAS_05_Self_Self-declaration (Capacity, Resources, Quality_company name.pdf)
Description
Confirmation by the applicant through self-declaration that the applicant is able to provide on-site work managers who speak fluent English (at least B2 or equivalent).
Documentation Requirement
Self-declaration. File name: 20250801_Tender_ESPEAS_05_Self_Self-declaration (Capacity, Resources, Quality_company name.pdf)
Description
Confirm that the Applicant has systems, processes, and personnel in place to maintain consistent quality. Provide assurance to the contracting authority that the Applicant can meet the technical specifications and performance standards required.
Documentation Requirement
Self-declaration. File name: 20250801_Tender_ESPEAS_05_Self_Self-declaration (Capacity, Resources, Quality_company name.pdf)
Previous Contract Winners
Start a free trial to see who has won similar tenders for this buyer.
See the full notice
- Contracting authority
- TSCNET Services GmbH
- Title
- ENTSO-E Security Plan External Auditing Services (ESPEAS)
- Type
- Main code
- Supplemental codes
- Location
- München, Kreisfreie Stadt
- Duration
- 48 months