ODO Consultingsp. z o.o.

The contracting authority commissions, and the contractor accepts for implementation: 1) conducting a comprehensive information security audit, identifying non-compliance and gaps, and defining the actions required to achieve compliance with applicable requirements; preparing an audit report, developing an ISMS, preparing missing policies, procedures and instructions, developing a risk assessment methodology, preparing a Risk Register and Risk Treatment Plan, preparing or comprehensively updating Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) for ORE’s key processes and systems, including preparation of test scenarios; preparing or comprehensively updating procedures for information security audits and cybersecurity incident management; and implementing the ISMS documentation by 31.03.2027. 2) providing advisory, supervisory and operational support services in information security and acting as Cybersecurity Officer for Ośrodek Rozwoju Edukacji in Warszawa for 12 months from the date this agreement is concluded.

Diagnosis (initial audit) and preparation of OSiR Wola for the requirements of the amended Act on the National Cybersecurity System (KSC0(D.T)