Norway - IT services: consulting, software development, Internet and support - Information Security

Norsk Tipping shall enter into a framework agreement with up to 4 tenderers for information security. 1: Strategic consulting cyber security 2: Security testing 3: Cyber security exercises 4: Security competence, security audits and consultancy ISO27001, 27017, OWASP etc. Norsk Tipping is certified in accordance with ISO 27001 and WLA SCS and requires consultancy services that ensure that the company complies with these standards and ensures a stable and secure operation of our IT services. The aim of this procurement is to enter into a consultancy agreement with one or several tenderers within information security.; The aim of the contract is to continually assist the company with strategic competence, consultancy including assisting Norsk Tipping's Board of Directors, security committee and security environment etc. Norsk Tipping would like to enter into a contract for strategic consultancy in the areas of management and control of information security, cyber security, threat assessments, strengthening the company's information security management system etc.; The aim of the procurement is to cover Norsk Tipping ́s need for testing within the main area of security. This area includes general testing of defence systems, but also testing of quality, resilience and robustness of both existing and new codes, systems as well as equipment. Norsk Tipping emphasises the entire KIT triad and would like, through testing, to achieve knowledge of condition, and what measures must be implemented to increase the security of the test object and the system that this object is included in; The aim of the contract is to see to the company ́s need for training, training and competence. on Norsk Tipping ́s employees within information security. The aim of this is to increase the company's competence in the field and safeguard relevant ISO 27001 requirements that are imposed on the company through their certification.; The contracting authority ́s aims that we would like to be strengthened through this procurement are: the following: "We have strengthened the quality of the company's business critical processes." Norsk Tipping ́s business critical processes consist of: 1) Sales of Games 2) Payment of prizes 3) Execution of games 4) Responsible gambling activity Norsk tipping currently uses a tool for maintaining an overview of employees' implementation of obligatory and voluntary courses on security competence and instructions. The tool is also used for mapping employees ́ insight and understanding of e.g. culture of safety. Norsk Tipping is in addition to being certified iht. ISO 27001 standard, also as the sole companies in Norway certified in accordance with WLA SCS. In order to obtain WLA certification, an ISO 27001 certification is at the bottom. It is a prerequisite that our contract supplier sits in the WLA the standard is good enough to assist Norsk Tipping with consultancy, but does not expect expert competence within the WLA standard.