European Union Agency for Cybersecurity (ENISA)

Call for tenders ENISA/2025/OP/0002 – Development, consultancy, support & maintenance services for IT assets

Framework contract, 48 months, budget €15.000.000

The total estimated budget for the framework contract is fifteen million € over a maximum duration of four years. The estimated partition of the aforementioned amount is the following:

• Four million Euro for the software development services.

• Eleven million Euro for software support and maintenance services.

Minimum level of capacity

1. Average yearly turnover of the last three financial years above EUR 3.700.000,00

2. The tenderer must prove experience in the field of high-quality software development services based on CMS Drupal and Plone in cloud-based and on-prem environments:

At least six (6) software development projects with budget over 60.000,00€ each in the past 3 years in at least three different customers. At least one of the customers should be a public sector entity. Each project should be developed either on Drupal (v9 and higher) or Plone (v5.2 and higher). Total number of projects developed in Drupal should be at minimum two (2). Total number of projects developed in Plone should be at minimum two (2). If a project includes development in both CMS the tenderer may state it as Plone and Drupal project (counting for both). At least three (3) projects should be deployed in cloud (Azure or AWS).

3. The tenderer must prove experience in implementing support and maintenance in complex technology stacks:

At least four (4) support and maintenance projects in the past three (3) years with a minimum project duration of 1 year and estimated value of 100.000,00€. Technology stack of customers who received support and maintenance services from the tenderer must include at minimum the following technologies under the Agency’s technology stack (see Annex A): RHEL, Drupal, Plone, MS Azure, Maria DB, POSTGRESQL, Mattermost.

4. The tenderer must prove to have a team of persons capable and available of carrying out the tasks and delivering the results as described and within the time frame in the Technical Specifications.  The team of members should be consisted of the following minimum members by level of experience as presented in section 2.8 of ‘’Part 2 Technical specifications’’:

L1: Junior Developer (6) Tester (3) Junior QA Consultant (1)

L2: Business Analyst (3) UX/UI specialist (2) Senior Developer (4) QA Senior Consultant (1) System Administrator (5) DB Admin (2)

L3: Application Architect (1) Technology Expert (1) Project Manager (3) Security Manager (1) QA Manager (1)

L4: Contract Manager (1)