Romania – Computer audit and testing services – SERVICII DE AUDIT DE SECURITATE CIBERNETICĂ

The acquisition is necessary following the approval of Emergency Ordinance no. 155/2024 on the establishment of a framework for the cybersecurity of networks and information systems in the national civil cyberspace, is addressed to public and private organizations in certain sectors of activity, such as: energy, transport, banking sector, financial market infrastructures, health, supply and distribution of drinking water, which provide services considered essential. CNCF "CFR" - SA is registered as an Operator of essential services in the Register of Operators of Essential Services (ROSE) since June 2021, for the sector /subsector Transport/Railway Transport (according to Decision 5620/II/A/ of 23.06.2021 issued by the National Cybersecurity Incident Response Center - CERT RO). At present, in order to comply with the provisions of OUG no. 155/2024, the necessary steps were taken, towards the National Directorate of Cyber Security, to register the company in the Register of essential and important entities. According to the legislation in force, following the preliminary analysis of the company's IT systems and infrastructures, the following systems were identified in the category of essential services: • Railway traffic control and management (traffic supervision and regulation, signaling; traffic planning, train route management) – E11;  "Train Traffic" information system with the components: IRIS – ATLAS – IM, IRIS – CRONOS, IRIS – FOCUS, IRIS – FOCUS – RU, IRIS – CALIPSO, IRIS – INFO – IM, E – TELEX INFOKIOSK, CRONOS VOX, TraficAlert, DRR Maps, Transparency Map Editing, Performance Regime, Accept Programming, IMComm, Polifem Constanța, Tariffs for Additional Services (T.S.A.), WIMO-IM, Free Tracks. • Railway infrastructure maintenance – E 24;  "Railway Infrastructure" IT system with the following components: IRIS – IMA (MP5i), IRIS – IMA (CFR GIS Map), Web – INSPIRE, IRIS – IMA (WebSCB), IRIS – IMA (WebSIMC), IRIS – IMA (WebSafety), WebEMM, ENTRAC, Annual...