IT Security Partner

1.1 Purpose

Norsk Tipping ́s aim with this procurement is to join up with a partner who can deliver a modern and comprehensive system that contributes to ensuring Norsk Tipping ́s values against all forms of security breaches.

1.2 Need that shall be covered

The procurement shall cover the need for a comprehensive system that prevents security breaches and ensures quick and efficient handling of security incidents. The area is complex and in continuous development, which sets high requirements for flexibility and adaptability. A collaborating partner must therefore have documented ability to quickly identify and adapt to new threats and attack techniques, both as regards detection and protection from security incidents.

The coming contract is planned for four (4) years, with an option for an extension for a further 1+1 year. The total possible contract period is therefore six (6) years.

Since the last procurement, both the threat picture and the geo-political framework conditions have changed significantly. At the same time Norsk Tipping ́s operative model for IT systems has evolved. The data centre at Hamar remains a central part of infrastructure, but there has been extensive modernisation, as well as changes in both service placement and operating models for systems and games.

The new agreement must therefore be flexible and adapted to changes in technology, architecture and delivery models. Furthermore, it shall be easy to regulate in accordance with variations in traffic and transaction amounts, both up and down. The price models shall also be designed so that they can smoothly handle changed needs throughout the contract period.

Increased use of services provided as cloud services and new business models means that both systems and communication structures are more globally integrated. At the same time, the use of private, public and hybrid cloud solutions introduces new security challenges that must be dealt with through requirements, clear management and continual risk assessment.

Based on this, Norsk Tipping is looking for a security partner with documented experience and high professional competence within ensuring complex and modern IT environments with a high transaction volume. The chosen partner will have a central role in securing and developing modern methods, processes and technologies for the prevention, detection and handling of security events.

The tenderer's ability to use new technology – especially within artificial intelligence – will be important both for better detection and to prevent events from occurring. The list below shows some of the relevant areas:

·        Security Monitoring 24/7/365 (SOC services)

·        Event Notification/Handling

·        Client Security

·        Server security

·        Network security

·        Cloud security

·        E-mail security

·        Threat Intelligence

·        Vulnerability notification/handling

·        Security Testing

·        Red/Blue/Purple Team Capabilities

·        IRT Services

·        etc.

Norsk Tipping has other agreements that are limited to this agreement. Examples of such agreements are services for DDoS protection as well as agreements for specialised components within security, networks and servers. Good interaction and effective coordination with other suppliers and solutions will therefore be decisive for goal achievement.