Procurement of information security and data protection consultancy services

The Norwegian Agency for Public and Financial Management (DFØ) is the contracting authority for this procurement. The procurement is carried out by DFØ’s unit, the Norwegian public sector cloud marketplace (MPS), which facilitates the procurement and use of cloud services in the public sector. Strengthening the overall cybersecurity posture of the public sector is a key objective of MPS. MPS actively collaborates with national and international partners, including European and Nordic central purchasing bodies, EU/EEA institutions, and professional environments within cybersecurity and standardisation (including ENISA, EDPB, NIST, and MITRE), as well as relevant national stakeholders such as the Norwegian National Security Authority (NSM), the National Cyber Security Centre (NCSC), and KiNS. The purpose is to ensure up-to-date market insight, knowledge sharing, and the development of robust solutions for the public sector. DFØ invites tenders for the provision of one senior cybersecurity consultant. The assignment includes advising on how the public sector should organise and procure cybersecurity services, including incident handling and proactive security work. The consultant shall also assist in defining security requirements for cloud services (IaaS, PaaS, and SaaS), to be included in contracts with various suppliers. Furthermore, the consultant will contribute to translating complex cybersecurity needs into concrete and actionable decision-making material for senior management and decision-makers across the public sector. The assignment also includes advising on relevant products, services, and supplier strategies within cybersecurity, including managed security services. The consultant may utilise supporting resources where necessary but retains full responsibility for the quality, progress, and overall delivery of the services.