Reissued tender of Contract regarding managed detection and response service to DSB

The tender invites a qualified supplier to provide Managed Detection and Response (MDR) services for the Danish State Railways (DSB), with the objective of reinforcing and expanding DSB’s overall cybersecurity posture across its IT and relevant operational technology environments. The mandate calls for a cohesive, scalable and mature MDR solution that will seamlessly integrate with DSB’s existing security framework, including its Security Operations Center (SOC), and augment it with advanced capabilities, methods and technology for monitoring, detection, analysis, response and proactive security activities.

The selected provider will be responsible for continuous, controlled monitoring of security incidents within DSB’s IT and OT landscapes, the efficient and structured handling of identified incidents, the provision of dedicated resources for critical incident management, and access to qualified, contextualised threat intelligence. Additionally, the contractor is expected to carry out proactive threat hunting and other advanced analytical exercises to anticipate, detect and mitigate emerging risks.

Compliance with the contractual specifications, service objectives and all annexed terms is mandatory. The service shall be compliant with the contract specifications and annexes.

This tender concerns the establishment of an agreement for the provision of Managed Detection and Response (MDR) services to DSB, aimed at supporting, strengthening, and further developing the contracting authority's overall cybersecurity capacity across the organization's IT and relevant OT environments. The purpose of the tender is to identify and contract with a supplier capable of delivering a cohesive, scalable, and mature service that integrates with DSB’s existing security organization, including the Security Operations Center (SOC), and complements it with advanced competencies, methods, and technological capabilities in monitoring, detection, analysis, response, and proactive security activities. The tender encompasses a comprehensive service delivery, which includes controlled and continuous monitoring of security incidents, structured and efficient handling of security incidents, access to dedicated resources for managing critical incidents, provision of qualified and contextualized threat intelligence, and execution of proactive analyses such as threat hunting. The delivery must comply with the requirements, service objectives, and other terms specified in the contract and its annexes.
Additional information: Participation in the procurement procedure may only take place electronically via the contracting authority’s electronic tendering system. To gain access to the procurement documents, the applicant must be registered, or register, as a user. If the application contains several copies (versions) of the same document, the most recently uploaded version shall prevail. All communication in connection with the procurement procedure, including questions and answers, must take place via the electronic tendering system. The contracting authority would prefer that questions concerning the prequalification be submitted no later than 4. August 2026 23:59. Questions submitted after this date will be answered provided that they are received in sufficient time for the contracting authority to obtain the necessary information and communicate the answers no later than six days before the expiry of the application deadline. Questions received later than six days before the expiry of the deadline cannot be expected to be answered. Interested parties are requested to keep themselves informed via the electronic tendering system. If the applicant experiences problems with the system, support may be contacted by email at dksupport@eu-supply.com or by telephone. As part of its application, the applicant must submit an ESPD as preliminary evidence of the matters referred to in section 148(1), nos. 1-3 of the Danish Public Procurement Act, cf. section 11 of the Executive Order on procedures for the award of contracts in the fields of water and energy supply, transport and postal services. It is not necessary for the applicant to sign its ESPD document. In the case of an association of undertakings (e.g. a consortium), a separate ESPD must be submitted for each of the participating economic operators. If the applicant is an association, each participant’s ESPD document must be signed by that participant. It is not necessary for the lead applicant submitting the application to sign its ESPD document. If the applicant relies on the capacities of other entities, an ESPD must be submitted for each of the entities on whose capacities it relies, and the ESPD document must be signed by the supporting entity. The applicant must also submit a letter of support in which the entity or entities on whose capacities the applicant relies declare that they are jointly and severally liable with the applicant if the applicant is awarded the contract. The template is included as an appendix to the tender conditions. The applicant will be excluded from participation in the procurement procedure if the applicant is subject to the mandatory grounds for exclusion referred to in sections 135 and 136 of the Danish Public Procurement Act, as well as the grounds for exclusion set out in section 137(1), no. 1 and 2 of the Danish Public Procurement Act, cf. section 10(1), no. 1 of the Executive Order on procedures for the award of contracts in the fields of water and energy supply, transport and postal services, unless the applicant has provided sufficient documentation demonstrating its reliability in accordance with section 138 of the Danish Public Procurement Act, cf. section 10(1), no. 2 of the Implementation Executive Order. The voluntary grounds for exclusion shall be applied in compliance with the principle of proportionality. Accordingly, trivial matters cannot lead to the exclusion of the applicant. However, several instances of matters that are each trivial in themselves may give rise to the exclusion of the applicant. Before the award decision, the tenderer to whom the contracting authority intends to award the contract must provide documentation for the information submitted in the ESPD in accordance with sections 151 and 152(3) of the Danish Public Procurement Act, cf. section 11 of the Implementation Executive Order. The tenderer must also submit a completed and signed solemn declaration of Russian involvement, cf. tender appendix F. If the tenderer relies on supporting entities, each supporting entity must also submit the declaration. If the tenderer is a consortium, all consortium members must submit the declaration. In the event of changes to the composition of the tenderer, the rules set out in section 147 of the Danish Public Procurement Act shall apply in full. With regard to point II.1.5) and point II.2.6), it should be noted that the amount constitutes an estimate of the expected contract value for the full term of the contract. The estimate is based on the contracting authority’s expected consumption during the term of the agreement compared with the expected price level. With regard to point II.2.9), it should be noted that each applicant may submit only one application for prequalification. The contracting authority may request applicants to supplement, clarify or complete the application pursuant to Article 76(4) of the Utilities Directive if the application does not meet the formal requirements of the procurement documents.

Lot: LOT-0000
Title: Reissued tender of Contract regarding managed detection and response service to DSB

Procurement documents
Address of the procurement documents: https://eu.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=457962&TID=200418517&B=