Supporting ENISA for the provision of cybersecurity services to Moldova and Ukraine

The purpose of this Call for Tenders is to provide support to ENISA in the implementation of the EU Cybersecurity Reserve for Moldova and Ukraine and specifically in the delivery of response (ex-post) and preparedness (ex-ante) cybersecurity services related to incident prevention and response. These services, provided by ENISA, are …

CPV: 72000000 IT-Dienste: Beratung, Software-Entwicklung, Internet und Hilfestellung, 71700000 Kontroll- und Überwachungsleistungen, 72253200 Systemunterstützung, 79710000 Dienstleistungen von Sicherheitsdiensten
Ausführungsort:
Supporting ENISA for the provision of cybersecurity services to Moldova and Ukraine
Vergabestelle:
European Union Agency for Cybersecurity (ENISA)
Vergabenummer:
ENISA/2025/NP/0006

1. Buyer

1.1 Buyer

Official name : European Union Agency for Cybersecurity (ENISA)
Legal type of the buyer : EU institution, body or agency
Activity of the contracting authority : General public services

2. Procedure

2.1 Procedure

Title : Supporting ENISA for the provision of cybersecurity services to Moldova and Ukraine
Description : The purpose of this Call for Tenders is to provide support to ENISA in the implementation of the EU Cybersecurity Reserve for Moldova and Ukraine and specifically in the delivery of response (ex-post) and preparedness (ex-ante) cybersecurity services related to incident prevention and response. These services, provided by ENISA, are intended to complement efforts at both national and Union level to further improve Moldova’s and Ukraine’s readiness and capability to respond to cybersecurity incidents or crises.
Procedure identifier : e04965b1-9fb7-4d67-a176-ce667d08717c
Internal identifier : ENISA/2025/NP/0006
Type of procedure : Negotiated without prior call for competition

2.1.1 Purpose

Main nature of the contract : Services
Main classification ( cpv ): 72000000 IT services: consulting, software development, Internet and support

2.1.2 Place of performance

Anywhere
Additional information : Please consult the procurement documents.

2.1.3 Value

Estimated value excluding VAT : 500 000 Euro

2.1.4 General information

Legal basis :
Regulation (EU, Euratom) 2024/2509

5. Lot

5.1 Lot technical ID : LOT-0001

Title : Supporting ENISA for the provision of cybersecurity services to Moldova
Description : The purpose of this Call for Tenders is to provide support to ENISA in the implementation of the EU Cybersecurity Reserve for Moldova and specifically in the delivery of response (ex-post) and preparedness (ex-ante) cybersecurity services related to incident prevention and response. These services, provided by ENISA, are intended to complement efforts at both national and Union level to further improve Moldova’s readiness and capability to respond to cybersecurity incidents or crises.
Internal identifier : ENISA/2025/NP/0006-LOT-1

5.1.1 Purpose

Main nature of the contract : Services
Main classification ( cpv ): 72000000 IT services: consulting, software development, Internet and support
Additional classification ( cpv ): 71700000 Monitoring and control services
Additional classification ( cpv ): 72253200 Systems support services
Additional classification ( cpv ): 79710000 Security services

5.1.2 Place of performance

Anywhere
Additional information : Please consult the procurement documents.

5.1.3 Estimated duration

Duration : 6 Month

5.1.5 Value

Estimated value excluding VAT : 250 000 Euro

5.1.6 General information

Procurement Project fully or partially financed with EU Funds.
The procurement is covered by the Government Procurement Agreement (GPA) : no

5.1.10 Award criteria

Criterion :
Type : Quality
Description : Please consult the procurement documents.
Category of award threshold criterion : Weight (percentage, exact)
Award criterion number : 65
Criterion :
Type : Price
Description : Please consult the procurement documents.
Category of award threshold criterion : Weight (percentage, exact)
Award criterion number : 35

5.1.15 Techniques

Framework agreement :
No framework agreement
Information about the dynamic purchasing system :
No dynamic purchase system

5.1.16 Further information, mediation and review

Review organisation : Court of Justice of the European Union
Organisation providing more information on the review procedures : European Union Agency for Cybersecurity (ENISA)
Organisation signing the contract : European Union Agency for Cybersecurity (ENISA)

6. Results

Value of all contracts awarded in this notice : 115 300 Euro
Direct award :
Justification for direct award : Extreme urgency brought about by events unforeseeable for the buyer
Other justification : Pursuant to point 11(1)(c) of Annex I to the Financial Regulation, as interpreted by the case-law, the following conditions need to be met in order for a contracting authority, such as ENISA, to be able to launch an exceptional negotiated procedure: (i) Existence of unforeseeable events bringing about extreme urgencys; (ii) Impossibility for the contracting authority to comply with the time limits in the standard procurement procedure (as laid down in points 24, 26 and 41 of that annex to the Financial Regulation); and (iii) a causal link between the unforeseeable events and the extreme urgency resulting therefrom (in other words, that the justification of this extreme urgency is not attributable to the contracting authority). The first criterion is met as the extremely urgent need to provide support to Ukraine in terms of cybersecurity was brought by unforeseeable event of sudden and immediate withdrawal of U.S. support to Ukraine. For Moldova, the first criterion is met, as the support is needed to support cybersecurity incident response in relation to the elections scheduled now for September 2025. The second criterion is met as well for both Ukraine and Moldova – ENISA would not be able to meet the time limits of the standard procurement procedure, such as the time limits for receipt of tenders and requests to participate, time limits in urgent cases and time limits for procedures  required by the Financial Regulation. Indeed, following such requirements typically takes 8 months. This can take even longer if the Ownership Control Assessments for service providers result in negative outcomes (in other words, service providers are ultimately owned by 3rd countries and are not eligible for providing support under the EU Cybersecurity Reserve). In the latter case, the whole procurement procedure would need to re-start again. During all this time, Ukraine and Moldova would be left without support for handling cybersecurity incidents. Lastly, the third criterion is met – as the extreme urgency is not the contracting authority’s (i.e., ENISA’s) fault (and neither it is Commission’s fault); rather, such urgency has been brought by unforeseeable geo-political events. Therefore, the conditions required by point 11(1)(c) of Annex I to the Financial Regulation are met.

6.1 Result lot ldentifier : LOT-0001

At least one winner was chosen.

6.1.2 Information about winners

Winner :
Official name : GMV SOLUCIONES GLOBALES INTERNET SAU
Tender :
Tender identifier : GMV SOLUCIONES GLOBALES INTERNET SAU
Identifier of lot or group of lots : LOT-0001
Value of the tender : 306 300 Euro
Subcontracting : Yes
Subcontracting value is known : yes
Value of subcontracting : 37 500 Euro
Subcontracting percentage is known : yes
Percentage of subcontracting : 15
Contract information :
Identifier of the contract : ENISA/2025/NP/0006
Date on which the winner was chosen : 21/09/2025
Organisation signing the contract : European Union Agency for Cybersecurity (ENISA)

6.1.4 Statistical information

Received tenders or requests to participate :
Type of received submissions : Tenders submitted electronically
Number of tenders or requests to participate received : 3

8. Organisations

8.1 ORG-0001

Official name : European Union Agency for Cybersecurity (ENISA)
Registration number : ENISA
Department : ENISA.ED - Executive Director,ENISA.ED.CSS - _
Postal address : Agamemnonos 14, Chalandri, Attiki
Town : Athens
Postcode : GR-15231
Country subdivision (NUTS) : Κεντρικός Τομέας Αθηνών ( EL303 )
Country : Greece
Telephone : +30 28 14 40 9711
Internet address : https://enisa.europa.eu/
Roles of this organisation :
Buyer
Organisation providing more information on the review procedures
Organisation signing the contract

8.1 ORG-0002

Official name : Court of Justice of the European Union
Registration number : CURIA
Postal address : Rue du Fort Niedergrünewald
Town : Luxembourg
Postcode : L-2925
Country subdivision (NUTS) : Luxembourg ( LU000 )
Country : Luxembourg
Telephone : +352 4303-1
Internet address : http://curia.europa.eu
Roles of this organisation :
Review organisation

8.1 ORG-0003

Official name : European Commission
Registration number : EUCOM
Postal address : Mondrian (CDMA), Rue du Champ de Mars 21
Town : Brussels
Postcode : B-1050
Country subdivision (NUTS) : Arr. de Bruxelles-Capitale/Arr. Brussel-Hoofdstad ( BE100 )
Country : Belgium
Telephone : +32 2 299 11 11
Roles of this organisation :
TED eSender

8.1 ORG-0004

Official name : GMV SOLUCIONES GLOBALES INTERNET SAU
Size of the economic operator : Large
Registration number : ESA83057034
Postal address : CALLE ISAAC NEWTON 11 PARQUE TECNOLOGICO DE MADRID
Town : TRES CANTOS MADRID
Postcode : 28760
Country subdivision (NUTS) : Extra-Regio NUTS 3 ( ESZZZ )
Country : Spain
Telephone : +34918072100
Roles of this organisation :
Tenderer
Winner of these lots : LOT-0001

Notice information

Notice identifier/version : 59ce4a38-00b5-489e-b799-9268d8481003 - 01
Form type : Result
Notice type : Contract or concession award notice – standard regime
Notice dispatch date : 15/10/2025 12:41 +02:00
Languages in which this notice is officially available : English
Notice publication number : 00681473-2025
OJ S issue number : 199/2025
Publication date : 16/10/2025