Public Procurement
ENISA, as an Agency of the European Union, possesses its own legal personality and may enter into contractual relationships with persons, companies and other legal entities. It is therefore subject to the provisions of the Financial Regulation applicable to the general budget of the European Union , the ENISA Financial Regulation and the relevant EU procurement directives for the award of public contracts.
Active procurements
Calls for Tender
Cyber Threat Intelligence support services
Deadline: Sep 03, 2024
OPEN Tender Procedure (3 LOTS)
LOT 1 - Provision of expert monitoring and collection services
Maximum budget: € 1.400.000,00 over 4 years
- Define and review Data Collection requirements: Define and specify the data collection requirements necessary to support the Cyber Threat Intelligence (CTI) and Open-Source Intelligence (OSINT) efforts. Identify the precise data sources essential for fulfilling the intelligence objectives and determine the sources from which this data will be sourced.
- Collection planning and Validation mechanism: Develop a detailed plan linking the intelligence objectives with appropriate data sources. A formal validation mechanism, subject to ENISA's approval, must be established to incorporate any additional sources the contractor proposes.
LOT 2 - Provision of CTI analysis support services
Maximum budget: € 1.500.000,00 over 4 years
- Daily Monitoring: Employ advanced tools and methodologies to conduct comprehensive daily monitoring across both open and closed sources.
- Level-One (L1) Intelligence Reporting: Perform basic-level analysis of the collected cyber events. This includes tagging each event with relevant details such as country, sector, threat actor, EU relevancy score (methodology to be provided by ENISA), threat type, etc. and a brief description of the event. The analysed data will serve as input to a variety of tailored reports.
- Daily Delivery of Cyber Event Bundles: Deliver a daily bundle of cyber events to ENISA, compiled from the monitoring tasks and the Level-One (L1) Intelligence Reporting. This bundle will include cyber events shared in open sources and threat reports from vendors, accompanied by a basic level of data ingestion as outlined in the First Level Intelligence Reporting section.
LOT 3 - Acquisition of licenses and subscriptions for cyber threat intelligence feeds and platforms
Maximum budget: € 700.000,00 over 4 years
The service provider will be tasked with provisioning CTI licenses and subscriptions on behalf of the Agency. Each year, the Agency and the provider will agree on the list of subscriptions and licenses to be acquired
***
Each of the 3 LOTs will conclude with a single framework contract. Tenderers are welcome to bid for one or more LOTs.
The tender documentation will soon be available via the F&T portal, which gives exclusive access to the eSubmission portal for submitting your offer - please use this link once the Contract Notice has been published in the OJEU.
The tender documentation and annexes are also provided below (by first clicking on the tender title link above) for reference purposes only and cannot be considered as the formal documentation.
Please note that questions for clarification can ONLY be sent via the questions and answers section of the Funding and Tenders portal.
Supporting ENISA for the provision of cybersecurity services to the EU
Deadline: Sep 23, 2024
OPEN Tender Procedure (28 Lots)
Interested tenderers may bid for one Lot - or more Lots.
LOTs 1 to 27: Supporting ENISA for the provision of cybersecurity services (per Member State):
Maximum budget per LOT: €900.000,00 over 3 years
LOT 28 – Supporting ENISA for the provision of cybersecurity services - EU WIDE:
Maximum budget: €4.000.000,00 over 3 years
Objective:
The aim of this call for tenders is the conclusion of framework service contracts for each of the 28 Lots (one per Member State and one across all MS), with economic operators capable of supporting ENISA in the delivery of cybersecurity services for every EU Member State as well as across EU.
Potential contractors are expected to provide support to the contracting authority in the provisioning of cybersecurity services for Member States (including services by means of intra-muros and extra-muros experts, on demand services, subscription services and incident response retainers).
Services to be provided shall include:
i) cyber security services which will contribute to increased preparedness and resilience of the Union’s essential and important entities (as defined in the proposal for a Directive of the European Parliament and of the Council on measures for a high common level of cybersecurity across the Union) for e.g. technical capabilities assessment (Ex-ante services) and;
ii) cyber security services which help the organization to respond to an actual incident, for e.g. supporting the technical response to an incident (Ex-post services).
The formal tender documentation is available via the EU Funding & Tenders Portal where you can also submit your offer - please use the following link:
The tender documentation and annexes are also provided below for reference purposes only and cannot be considered as the formal documentation.
Please note that questions for clarification can ONLY be sent via the questions and answers section of th F&T platform.
Subscribe to an always updated RSS feed of Calls for Tender
Pre Information Notices
Calls for Expression of Interest
CEI List of Individual External Experts to Assist ENISA
Deadline: Aug 08, 2025
ENISA seeks to establish a reserve list of subject matter experts, from which collaborators may be selected to assist the Agency in carrying out the work activities foreseen in the yearly Work Programme and particularly in the following fields:
-
Strategic Objective 01: “Empowered and engaged communities across the cybersecurity ecosystem”
-
Strategic Objective 02: “Cybersecurity as an integral part of EU policies”
-
Strategic Objective 03: “Effective cooperation amongst operational actors within the Union in case of massive cyber incidents”
-
Strategic Objective 04: “Cutting-edge competences and capabilities in cybersecurity across the Union”
-
Strategic Objective 05: “High level of trust in secure digital solutions”
-
Strategic Objective 06: “Foresight on emerging and future cybersecurity challenges”
-
Strategic Objective 07: “Efficient and effective cybersecurity information and knowledge management for Europe”
Please download the "Technical Description" file (below) to learn more details about the requirements of the Agency. ENISA welcomes applications from experts from many sectors, i.e. academia, research, industry, EU institutions, International Organisations etc. The "CEI Application Form" (in excel protected format) is available for download by slecting the red button top right of this page labelled "Apply to this CEI".
IMPORTANT: To be eligible to apply, you must be a citizen or permanent resident of an EU member state or EEA and be able to be remunerated to a bank account in one of these countries. UK applicants cannot be accepted following Brexit. This CEI is open to ‘natural persons’ only. ‘Legal persons’ (companies) cannot apply.
PLEASE NOTE: The CEI List of Individual External Experts is a tool used solely for the purposes of assessing and identifying suitable experts for a potential future contractual working relationship with ENISA. It is emphasised that inclusion in the list does NOT mean that you are considered to be an official representative of ENISA or in any way entitled to represent the Agency.
It therefore follows, by just being invited onto the ENISA List of Experts, that you are not authorised to speak on behalf of ENISA at public forums or present yourself as an ENISA representative/employee/advisor or expert in any way, shape or form (including on Curriculum Vita, social media etc.).
Any verified breaches of these restrictions may result in your listing being immediately deleted.
CONFIRMATION OF APPLICATION:
** Due to an ongoing internal technical issue and to ensure that you recieve written confirmation that your application has been received, we ask that you send a SEPARATE email to [email protected] with your name, stating that you have just lodged your application via the CEI specific address.
Subscribe to an always updated RSS feed of Calls for Expression of Interest
Calls for Proposal
Subscribe to an always updated RSS feed of Calls for Proposal