How to bid in this country: portals, deadlines, thresholds →
Cybersecurity advisory, audit and implementation services under the Cyber-Safe Water Supply Project
Usługi doradcze, audytowe i wdrożeniowe w zakresie cyberbezpieczeństwa realizowane w ramach projektu „Cyberbezpieczne Wodociągi” — original title
Your path to submission
- Deadline: 6 November at 12:00 — 5 days left.
- You submit on eZamówienia — not here and not by e-mail. ↗ Submission via eZamówienia: account required; above the EU threshold a qualified signature, nationally the 'trusted signature' often suffices — check the wording. Sort out account and signature first — not on submission day.
- Collect your evidence — the eligibility requirements are listed on this page; for many of them the analysis explains how to obtain them.
What the buyer is looking for
CYBERSECURITY ADVISORY AND AUDIT SERVICES: The contracting authority withdrew from division into parts of the subject of the contract covering the implementation of the Information Security Management System (ISMS), business continuity plans (BCP/DRP), security tests and post-implementation audit (Tasks 1, 2, 3, 4 and 5). This decision shall be fully justified on objective organisational and technical grounds. The contracting authority considered it necessary to entrust the entire subject of the contract to a single contractor in order to minimise the risk of dilution of responsibility for the final safety and consistency of the systems implemented. Ordering a post-implementation audit (Task 3) to a separate entity would generate a high risk of competence disputes between the implementation company and the auditing company in the event of non-compliance. The integration of tasks into a…
Show full description
… single contract guarantees to the Contracting Authority that the responsibility for remedying any vulnerabilities identified in the audit lies with one entity, which must remedy them within the framework of a unified budget and project schedule. At the same time, in order to avoid the risk of conflict of interest referred to in Art. 2 of the Public Procurement Act, the Contracting Authority imposed a strict requirement in the terms of the contract for the Contractor to appoint a fully independent audit team. The Contractor must ensure that the persons delegated to carry out the audit (Task 3) do not take part in the implementation work (Tasks 1 and 2) or in the security tests. Such a solution allows to use the market potential of entities with specialized, independent audit divisions, and the Ordering Party guarantees objectivity while maintaining the principle of a single point of responsibility for the entire system. Under the contract, the Contractor is obliged to perform the following tasks: 1) updating and developing the Information Security Management System (ISMS) after completed IT implementations; (2) updating and developing business continuity plans (BCPs) and disaster recovery plans (DRPs) for STIs; 3) conducting a post-implementation information security audit; 4) Conducting social engineering tests; 5) Performing penetration tests – at least 5 days The subject of the contract is to carry out audits, tests, updates and draw up documentation of the ISMS as part of the grant project for the project entitled ‘Improving the level of data protection and resilience of IT and TSO infrastructure’, which is part of the investment under the National Recovery and Resilience Plan financed by the Recovery and Resilience Facility Investment C3.1.1. Cybersecurity – CyberPL, data processing infrastructure and optimisation of the infrastructure of state services responsible for security Cybersecurity – Cybersecurity Waterworks. The grant competition entitled: “Cybersafe Waterworks” number KPOD.05.10-CW.01-001/25
Contract
Type of service
Clement What the numbers say about this buyer
- 26% of this buyer's awards went to companies that had already won here before (138 awards since 2018, spread over 74 companies). That is well below the sector norm (38%) — this buyer switches suppliers more often than others.n = 138 awards since 2018
- 13% of awards went to companies from abroad (138 awards with a known winner country). Sector average: 2%.n = 138
- The median procedure drew 2 bids (68 procedures with a bid count); 49% ended with a single bidder. Sector: median 2 bids.n = 68
- The award came in at a median 34% of the estimated value (6 awards with both estimate and value) — pricing at the estimate is usually too high here.n = 6
- 80% of the bids received came from small and medium-sized enterprises (12 procedures with a bid mix). Sector: 91%.n = 12
From this buyer's documented awards; comparison values from the same sector and country. Not a forecast, not legal advice. As of 01/11/2026.
Who has won at this buyer so far
Across all contract types of this buyer — not just this sector. A city buys software and fire engines through the same purchasing office.
| Company | Awards | Period |
|---|---|---|
| Zakład Zagospodarowania Odpadów Komunalnych w Bełżycach Sp. z o.o. | 11 | 2023–2024 |
| PETROJET Sp. z o. o. | 4 | 2022–2025 |
| PRZEDSIĘBIORSTWO GOSPODARKI KOMUNALNEJ I MIESZKANIOWEJ W RYKACH SP. Z O. O. | 3 | 2020–2023 |
| Bergerat Monnoyeur Sp. z o.o. | 3 | 2019–2020 |
| BUD-AN Sp. z o.o. | 3 | 2025 |
Contracting authority contact
Tactics
When contracts were awarded in this country and sector, usually only one or two bids came in. A solid bid has a real chance here. (Based on 1,509 completed awards — not a statement about this procedure.)
This procedure allows 9 days between publication and deadline — typical in this country is 18 (median of 9,435 procedures). Much tighter than usual: the first week counts.
Foreign bidders
In Poland · Education & training, 310 contracts went to foreign companies over the last 3 years (of 20,800 recorded awards) — mostly from Germany, Bulgaria, Spain.
How to bid
Guide: how to apply on e-Zamówienia (Polen) → Registration, signature, fees — from the operator's bidder manual.
Don't miss the next one
Friedrich finds tenders like this for you — every morning at 7:30, each one checked by Claude (Anthropic) for fit, and he learns from your feedback what your company really does.
Register now