-

Information Systems Security Assessments for New Extension Projects (Consultancy Agreement No.: C12012)

NEW EXTENSION PROJECTS

 

Prequalification for
Information Systems Security
Assessments for New Extension Projects
Consultancy Agreement No.: C12012

 

Expressions of Interest are invited from suitably qualified Applicants for the works and services described below. This procurement is subject to the World Trade Organization Agreement on Government Procurement. 

 

The MTR Corporation Limited (the Corporation) invites qualified contractors to express their interest in tendering for Consultancy Agreement C12012 – Information Systems Security Assessments (ISSA) for New Extension Projects.

 

The Consultant shall act as an Independent Assessor on behalf of the Corporation to carry out ISSA Services on designated contracts’ deliverables/outputs in the New Extension Projects to ensure end-to-end compliance with Information Security requirements and provide professional advice to the Corporation on adequacy level of protection to reviewed systems from cybersecurity threats.

 

2.1 This Contract will use NEC4 Professional Service Contract Option A (priced contract with activity schedule).

 

2.2 The Consultant shall perform the role of an Information Systems Security Independent Assessor to review and assess the designs and implementations of around 30 numbers of contracts including E&M systems and Building Services which some have already been commenced, and some are to be commenced in Hong Kong with a project duration of around 8 years.

 

2.3 The major specification of the services to each stage of the abovementioned contracts shall include submitting assessment services plan, conducting desktop assessments and landscape reviews, performing vulnerability assessments and penetration tests, conducting executive presentations, closing out findings and reporting.

 

Consultancy Agreement No.	Tender Issue	Tender Return	Consultancy Award	Completion of Services
C12012	Q4/2024	Q1/2025	Q1/2025	Q4/2032

 

 

For Applicants registered under the E-Tendering System, please click the following link and log into the System for expression of interest:
http://www.hkextender.com

 

For Applicants not registered under the E-Tendering System, please click the following link and search for the advertisement notice in respect of this project for expression of interest:
http://www.hkextender.com/process/GuestLogon.asp

 

Suitable Applicants shall receive a prequalification invitation via the E-Tendering System.  The Consultants shall complete and submit all required information and details via the E-Tendering System no later than the time and date specified in the prequalification invitation letter.

 

All invitations and submissions for prequalification shall be carried out through the E-Tendering System at http://www.hkextender.com.

 

For enquiries, please contact Mr. Derek Lau, Chief Project Commercial Manager via dereklau@mtr.com.hk or Ms. Toby Kwok, Senior Project Commercial Manager via tobykwok@mtr.com.hk. 

 

As part of the required information each Applicant shall be required to submit audited accounts covering the three years prior to the date set for submission. When an Applicant is a joint venture then each partner shall submit separate accounts.

 

Applicants responding to this advertisement are deemed to have complied with the Personal Data (Privacy) Ordinance in the collection and transfer of personal data to MTR Corporation Limited. All information submitted including personal data, shall be used by MTR Corporation Limited for the prequalification of tenderers for this project.

 

Applicants shall note and make themselves aware of the Corporation’s ethical and probity requirements which shall be applied throughout the tender and contract periods. Further, Applicants shall not, and shall ensure that its directors, employees, agents and sub-contractors shall not, offer or give any advantage as defined in the Prevention of Bribery Ordinance (Cap. 201) to any employee or agent of MTR Corporation Limited. Any breach or non-compliance with this paragraph by the Applicant shall, without affecting its liability for such breach or non-compliance, result in its application not being considered.