This opportunity has been awarded. Its page stays for reference.
Similar open opportunities
ENTSO-E Security Plan External Auditing Services (ESPEAS)
At a glance
TSCNET Services GmbH is procuring Auditing services (CPV 79212000) in München, Kreisfreie Stadt (DE212). It has been awarded. Procedure type: Negotiated with prior publication of a call for competition / competitive with negotiation.
From the notice
TSCNET Services GmbH, based in Munich and ISO 27001:2022 certified, seeks a qualified third-party Regulatory Information Security Auditor to perform audits aligned with EU energy sector regulations. The contractor must be an experienced ISO 27001:2022 Lead Auditor with strong service delivery and expertise in regulatory audits. Audits must comply with frameworks from ENTSO-E and ACER, and adapt to evolving EU and national cybersecurity, data protection, and energy governance requirements. The contract is expected to span at least four years.
Key facts
Each fact is from the official notice, last checked 5 November 2026, 07:10 (UTC+01:00).
- Status
- AwardedOfficial notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- Deadline
- No deadline in the noticeOfficial notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- Buyer
- TSCNET Services GmbH, München, DEOfficial notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- Place of performance
- München, Kreisfreie Stadt (DE212)Official notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- Main CPV
- Auditing services (CPV 79212000)Official notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- Procedure
- Negotiated with prior publication of a call for competition / competitive with negotiationOfficial notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- Lots
- 1Official notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
- First published
- 2 November 2026, 15:25 (UTC+01:00)Official notice · checked 5 Nov 2026, 07:10 (UTC+01:00)
Fact sheet
Lots (1)
Lot LOT-0001: ENTSO-E Security Plan External Auditing Services (ESPEAS)
TSCNET Services GmbH (TSCNET) located in Munich, Germany, is an ISO 27001:2022 certified organization providing services 24 hours a day, 7 days a week, 365 days a year, to Contracting Authorities operating critical infrastructure connected to the Central and Eastern European power grid. As part of TSCNET's requestor’s input for Regulatory Information Security Auditor Services, TSCNET wishes to contract a specialist third-party to undertake regulatory information security audits. The third-party needs to be a qualified ISO 27001:2022 Lead Auditor with not only best of breed expertise, but excellent service delivery and multiple years' experience in regulatory audits. The audits must be aligned with the regulatory expectations and frameworks established by: a) ENTSO-E (European Network of Transmission System Operators for Electricity) – https://www.entso-e.eu, which coordinates the operation of Europe’s electricity transmission networks and sets cybersecurity and operational standards for TSOs. b) ACER (European Union Agency for the Cooperation of Energy Regulators) – https://www.acer.europa.eu, which oversees the implementation of EU energy regulations, including cybersecurity and data protection obligations under the Network Code on Cybersecurity and other relevant EU legislation. Given that the contract is expected to span at least four years, TSCNET anticipates that additional compliance requirements may emerge over time. Therefore, the scope of regulatory alignment shall not be limited to ENTSO-E or ACER alone. The selected auditor must demonstrate the capacity to adapt to evolving EU and national regulatory frameworks, including but not limited to cybersecurity, data protection, and energy sector governance, as defined by current and future mandates from ENTSO-E, ACER, and other relevant authorities.
Timeline
- 27 March 2026: Award. Winner: RSM Ebner Stolz GmbH & Co. KG; Award value: €285,570 excl. VAT; Tenders received: 2; Lot LOT-0001.
- 2 November 2026, 15:25 (UTC+01:00): Award notice Notice, version 02 (Contract or concession award notice – standard regime). Official notice
- 2 November 2026, 15:25 (UTC+01:00): Award notice Notice, version 02 (Contract or concession award notice – standard regime). Official notice
Buyer and place
Buyer
TSCNET Services GmbH
München, DE
Place of performance
- München, Kreisfreie Stadt (DE212)
Other parties in the notice
- RSM Ebner Stolz GmbH & Co. KG (Tenderer), München
- RSM Ebner Stolz GmbH & Co. KG (Winner), München
Classification
CPV codes
- 79212000: Auditing services
NUTS regions
- DE212: München, Kreisfreie Stadt
Topics
Topics are Inteliwert’s own classification, assigned automatically for counting markets. They are not a statement by the publisher; the quote shows the passage each one rests on.
- Cybersecurity Assigned by rules
ISO 27001
Official documents
No documents found in the indexed notice.
Questions and answers
Who is the buyer?
TSCNET Services GmbH, München, DE.
What is being procured (CPV)?
Auditing services (CPV 79212000).
Where is the work performed (NUTS)?
München, Kreisfreie Stadt (DE212).
Is it divided into lots?
No, the notice names a single lot.
Which procedure is used?
Negotiated with prior publication of a call for competition / competitive with negotiation.
How do I submit a bid?
On the official notice or the portal it names. Inteliwert does not submit bids. Official notice
Am I eligible?
Inteliwert does not judge eligibility. The selection criteria are in the official notice. Official notice
Source
- Publisher
- Bekanntmachungsservice
- Licence
- CC0 1.0
- Last checked
- 5 November 2026, 07:10 (UTC+01:00)
The official notice is authoritative. Inteliwert shows what the notice states and links to it.