Upgrade of Oracle licenses for additional data protection of the Human Resources Management Information System "HRMIS"

The subject of this public procurement is procurement of licenses from Oracle by specification with included support for 12 months, as well as a service for basic installation and configuration of the specified advanced features of the Oracle database and Oracle applications.

Short description:

The subject of this public procurement is procurement of licenses from Oracle by specification with included support for 12 months, as well as a service for basic installation and configuration of the specified advanced features of the Oracle database and Oracle applications.

Long description:

Ministry of Information Society and Administration needs to procure the following features:

Licenses

Product / Service Metric License type Term Quantity

Advanced Security CPU Full Perpetual 7

Software Update License & Support CPU 1 year 7

Audit Vault and DB firewall CPU Full Perpetual 7

Software Update License & Support CPU 1 year 7

Active Data Guard CPU Full Perpetual 7

Software Update License & Support CPU 1 year 7

Diagnostics Pack CPU Full Perpetual 7

Software Update License & Support CPU 1 year 7

Services

Oracle Advanced Security - Data Masking and Subseting. An initial analysis is required by the service provider to introduce this security feature into the database. The following activities should be implemented:

• Recommendations and technical support in the process of detecting and classifying sensitive data to understand the risk and to apply legal restrictions on personal data protection.

• Preparation of a report which will elaborate the steps for best-case scenario in designing data protection policies based on the analyzes conducted by MISA

• Preparation of a report which will elaborate the steps for further implementation of the designed policies

SQL*Net Encryption (Network Encryption) When introducing this security option in the database in cooperation with the ICT sector of the Ministry an analysis should be made of the network traffic and access to the base server and create a report with recommendations for the required configuration thereof.

Oracle Advanced Security - Oracle Audit Vault and Oracle Database Firewall:

● Basic installation of Oracle Audit Vault and Oracle Database Firewall software

● Executing the basic post installation configurations

● Analysis of the current state and preparation of a report on recommendations as the best case-scenario for the implementation of Oracle Audit Vault for new audit policies (eg GDPR) and preparation of a recommendation to define the Audit Vault database in terms of data required for audit reports on the topic personal data protection or prevention of access to data if it is contrary to predefined user policies (prevention of access to data after working hours or from undefined locations).

Oracle Active Data Guard:

● Basic production base configuration and preparation for synchronization of the production base backup. Prerequisites for the procedure itself are the installation of Oracle software on the backup server and a copy of the production database for configuration synchronization, which should be provided by MISA.

● The backup database will be open in read only mode and can be used to prepare reports and random SQL statements, without burdening the production system

● Database upgrade with minimal unavailability time.

● Prevention of corrupt data blocks replication.

Oracle Diagnostic Pack:

● Preparation of a best-case scenario report for configuring Automated Database diagnostics; Database performance monitoring; Automatic notification in case of detected problems in diagnostics or performance measurement; Automatic repository with historical data on the base load; History of sessions in the database. This way you can see which sessions and what sessions were operating in the performance issues time period

The application solution and the databases are under an active maintenance contract, and MISA and the contracting authority will provide adaptive support for the necessary analyzes, changes and configurations.

The Selected supplier is obliged to deliver the subject of the contract within 20 working days from the day of concluding the contract.

Bid-securing declaration

The economic operator shall lodge a Bid-securing declaration attached to the bid.

With the declaration, the economic operator shall state that:

- shall not withdraw its bid before the expiration of validity period therein,

- shall accept the correction of arithmetic errors by the commission,

2.2.1 The Contracting Party shall exclude any economic operator from the public procurement procedure if it determines that the economic operator, or the person who is a member of the executive or oversight body of said economic operator or who is authorized to represent or adopt decisions or to perform oversight over the economic operator, has been sentenced with an enforceable judgement in the last 5 years on committed crime that involves elements of the following crimes stipulated under the Criminal Code:

- participation in criminal organization,

- corruption,

-tax and payroll tax evasion,

-terrorism or criminal acts related to terrorist activities,

- money laundering and financing terrorism, and

- child labor and human trafficking.

2.2.2. The contracting party shall exclude any economic operator from the public procurement procedure, if an economic operator:

- has unpaid taxes, payroll taxes or other public charges, except in cases when the economic operator has been permitted to pay taxes, payroll taxes or other public charges by means of deferred payment in compliance with special provisions and performs regular payment thereof;

- undergoes bankruptcy or liquidation proceeding;

- has been sentenced with secondary penalty - prohibition for participation in public call procedures, procedures for awarding public procurement contracts and public-private partnership contract;

- has been has been sentenced with secondary penalty – temporary or permanent prohibition to perform a particular activity;

- has been sentenced with misdemeanor sanction – prohibition to perform profession, activity or duty, or temporary prohibition to perform a particular activity, or

- issues false information/data or fails to submit information/data requested by the Contracting Party.

2.2.3 The Contracting Party shall exclude the economic operator from the public procurement procedure if the economic operator is listed under the list of issued negative references under Article 101 paragraph (3) of the Law on Public Procurements by the final deadline for delivery of bids or participation requests.

2.2.4 The Contracting Party shall exclude the economic operator from the public procurement procedure in cases when the exclusion condition is enlisted under the tender documentation:

a) if the contracting party has valid reasons to determine that the economic operator has signed contracts with other economic operator with purpose or effect to distort competition. The determination of the contracting party stipulated under this item shall be considered valid if the Commission for Protection of Competition notifies the contracting party that it will initiate a misdemeanor procedure within a deadline of 15 days, based on notice lodged by the contracting party;

b) if the economic operator has demonstrated significant or constant shortcomings in meeting key duties in previous public procurement contracts or previous concession and public-private partnership contracts signed with said contracting party, which, in turn, resulted in unilateral contract termination, damage claims or undertaking of other similar sanctions by the contracting party;

c) if the economic operator exercises illegal influence over the contracting party’s decision or for acquisition of confidential information that would give said economic operator illegal advantage in the public procurement procedure.

TERMS AND CONDITIONS

I. In order to prove its capacity to implement the relevant public procurement contract in terms of its technical or professional capability, the economic operator must meet the following minimum requirements:

1) To have professional full-time/hired professional staff at all time for the entire duration of the contract, with the following professional qualifications:

a) At least one full-time or hired person for database administration with a minimum of 5 years work experience, in maintaining an Oracle database, with an adequate database certificate. Oracle Database 12c Administrator Certified Professional or equivalent

b) At least one (1) full-time or hired person holding a valid Oracle Database SQL Certified Expert SQL Certificate, with a minimum of 5 years work experience or equivalent

c) At least one (1) full-time or hired person holding a valid ITIL Foundation Examination Certificate or equivalent

d) At least one (1) full-time or hired person holding a valid Certified SAFe® 5 Agilist Certificate or equivalent

e) At least one (1) full-time or hired person holding an ISO / IEC 27001 Lead Auditor Certificate for ISO 27001

f) At least one (1) full-time or hired person with a certificate of completed training on personal data protection under the current Law on Personal Data Protection

All listed persons must have a permanent residence in Macedonia, to be fluent in Macedonian and have a work permit. One person can hold more than one certificate and cover more than one of the required job positions.

2) The Bidder should have a professional staff available at all times for the entire duration of the agreement, holding the above professional qualifications

3) Statement regarding the elements of the Contract that the Bidder intends to subcontract to a subcontractor.

- ISO 9001:2015 Quality Management Systems or equivalent

EVIDENCE

II. The Economic operator must prove its capacity to meet the minimum requirements by submitting the following:

1) For the fulfillment of the terms and conditions under Item I sub item 1 referring to professional qualifications of the professional staff, shall be proved by the Bidder by submitting the following documentation:

Regarding the manner of engagement if the person is employed, the Bidder is required to submit a proof of full time employment (M1/M2 form), and if he plans to recruit a professional staff, it is necessary to submit a Statement, stating the person he intends to hire with their consent therein, with the additional written consent by the person he intends to hire. In order to prove the relevant experience of the professional staff, as well as a copy of the certificates for the persons for whom they are listed as a minimum requirement

The bidder must submit Statements from the professional staff that they hold the required minimum years of relevant experience in accordance with the requirement of the condition and by indicating the relevant projects in compliance with the relevant term and condition, a company for which the expert has worked with the period of his engagement, whereat the years of relevant work experience will be calculated from the year of the first relevant project.

2) Statement that in case the Bidder is selected as a Selected Supplier, the Bidder will have a professional staff available at all times for the entire duration of the Agreement, with the listed professional qualifications, and the same will be hired in the Project Team

3) Statement regarding the elements of the Contract that the Bidder intends to subcontract to a subcontractor.

Note:

* All listed documents, except the recommendations, certificates and proof of full-time employment, are prepared and electronically signed by the economic operator and they do not have to be certified by a competent authority.

* Certificate means a document issued by the relevant manufacturer and/or an authorized certification center by the manufacturer confirming the acquired knowledge of the Certificate Holder. Documents for attended trainings will not be accepted as evidence of acquired knowledge/expertise.

* For M1 / M2 form that will be submitted, the Bidder needs to cover (highlight in dark) the personal identification numbers of the persons, ie they should not be visible in accordance with the Law on Personal Data Protection.

a) The contracting authority will pay the total price of the Bid on the basis of an adopted record for quality delivery of the subject of procurement and within 30 days from the date of receipt of the invoice in the registry office of the Contracting Authority thereat.

The signing of the minutes should be in accordance with the accounting period, deadlines and quantities specified in the technical specification, i.e. the time plan of activities therein.

Electronic Auction: Yes

MISA

Bidders can follow the public opening through the e-nabvki.gov.mk system or in person at the MISA headquarters. All participants must register in the system e-nabavki.gov.mk and bids are submitted exclusively through the same system

Criteria for awarding the Contract:

-Lowest price