Framework Agreement Software Security - Lot 2: Software Supply Chain Management

If the company is registered in the commercial register or a comparable register in the country of origin, Submiission of a copy of the extract from the commercial register or equivalent proof from the respective country of origin (not older than 90 days at the time of expiry of the tender deadline) at the request of the client after expiry of the tender deadline. For foreign documents that are not written in German or English, a simple translation into German or English must be enclosed

Self declaration to undertake to take out and maintain business liability insurance with the coverage amounts specified below in the event of an award. Insurance coverage shall be provided without restriction and in full for the entire duration of the contact. The sum insured is available twice per annum. Financial loss: At least EUR 1,0 million. Please use the relevant form "Appendix 01_Self-declarations and evidence".

Self-declaration regarding the company's turnover from the business area for security audits in the last three completed financial years. Minimum requirement Turnover from the business area "software supply chain management" (area of activity of the contract to be awarded) - average annual turnover of at least EUR 300,000.00 (net) Please use the relevant form "Appendix 01_Self-declarations and evidence".

At least three references from reference provider (RP) for the performance of comparable services (software supply chain management) since January 1, 2023, (it is sufficient that the comparable services were also provided in the reference period in the specified reference project, e.g., a reference that began on January 1, 2022, and ended on February 1, 2023, would be sufficient). Only references to audits on open source projects are permitted. Each reference must be either completed or ongoing. In the case of an ongoing reference. specifications of the planned/contractual project duration and information on the current status must be included It is irrelevant whether the reference provider is a public or private company. For verification purposes, the reference details must include the contact details of a responsible person at the respective company, i.e., name, telephone number, and/or email address. Minimum requirements for each reference: 1. Since January 1, 2023 2. Completed and ongoing reference; if ongoing, specifications of the planned/contractual project duration and information on the current status of the reference project must be included 3. The respective reference must software supply chain management Please use the relevant form "Appendix 01_Self-declarations and evidence".