{"id":56877,"contractFolderID":"5401cf0a-0f9a-4e69-9673-86070296180a","noticeNumber":"2026-056877","eFormsId":"66b53d83-06e4-450f-8bbc-6eec3de75c6a","procedureId":14954,"hideFromOrganisationUsersWhileDraft":false,"datePublished":"2026-09-13T08:05:03.248841Z","hilmaState":3,"hilmaErrorState":0,"tedState":5,"tedPublicationId":"630821-2026","esentoolNotice":{"id":"66b53d83-06e4-450f-8bbc-6eec3de75c6a","versionId":"01","procedureId":"5401cf0a-0f9a-4e69-9673-86070296180a","status":"PUBLISHED","updatedAt":"2026-09-14T02:03:51+00:00","submittedAt":"2026-09-11T07:45:38+00:00","publicationId":"630821-2026","publicationDate":"2026-09-14T00:00:00+00:00","noticeType":"29","legalBasis":"32014L0024","languages":["FIN"]},"espdRequestReferences":[],"validationStates":[],"eForm":{"regulatoryDomain":[{"value":"32014L0024"}],"noticeTypeCode":{"listName":"result","value":"can-standard"},"contractFolderID":{"value":"5401cf0a-0f9a-4e69-9673-86070296180a"},"issueDate":{"value":"2026-09-11+00:00"},"issueTime":{"value":"07:45:38+00:00"},"procurementProjectLot":[{"procurementProject":{"name":[{"languageID":"FIN","value":"DigiFinland Oy -  IT-konsultointi 2023-2028 (DPS) - Tietoturvatestaus"}],"id":{"value":"612620"},"procurementTypeCode":{"listName":"contract-nature","value":"services"},"description":[{"languageID":"FIN","value":"Hankinnan kohteena on DigiFinland Oy:n hankkeiden ja palveluiden tietoturvan tarkastukset ja auditoinnit, joka sisältää teknisen tietoturvatestauksen sekä arkkitehtuurikatselmoinnit (alustapalvelut/infra, järjestelmäintegraatiot). Auditoinnissa käytetään mm. turvallisuuden auditointikriteeristöjä PiTuKri, Katakri ja GDPR, sekä soveltuvin osin kansainvälisiä viitekehyksiä ja parhaita käytäntöjä, kuten OWASP (esim. OWASP Top 10) ja CIS Controls.\n\nTyö tehdään noudattaen DigiFinlandin sisäisiä tiedon käsittelyohjeita (julkinen, sisäinen ja salainen). Tarvittaessa työssä voidaan käsitellä myös turvaluokiteltua tietoa (TL) asiakkaan ohjeiden sekä soveltuvan lainsäädännön mukaisesti.\n\nAuditointi toteutetaan siten, että auditoitavan palvelun tai palvelukokonaisuuden tietoturvan taso kyetään määrittelemään. Valittu toimittaja eli auditoija tekee palvelulle ns. eettisen hakkeroinnin, jossa auditoija etsii ohjelmallisesti palvelun haavoittuvuuksia ja muita tietoturvaongelmia DigiFinlandin osoittamasta kohteesta tai arvioi palvelun arkkitehtuuria tietoturvan näkökulmasta.\n\nAuditoija tekee tietoturvaselvityksen, jossa mahdolliset palvelun haavoittuvuudet ja muut tietoturvaan liittyvät ongelmat on yksilöity ja niiden ratkaisemiseen annetaan ohjeet. Tämä selvitys käydään läpi DigiFinlandin edustajien ja palvelun rakentaneiden IT-toimittajien kanssa.\n\nAuditoinnit kohdistuvat DigiFinlandin olemassa oleviin palveluihin (tällä hetkellä Omaolo, Navigaattoripalvelut sekä hoidon perusteet) sekä mahdollisiin tuleviin palveluihin. Hankintayksikön sitoumuksettoman arvion mukaan kukin palvelu auditoidaan kerran kalenterivuodessa. Hankinnan arvioitu kokonaisarvo on noin 300 000 €."}],"additionalCommodityClassification":[{"itemClassificationCode":{"listName":"cpv","value":"48000000"}}],"mainCommodityClassification":[{"itemClassificationCode":{"listName":"cpv","value":"72000000"}}],"realizedLocation":[{"address":{"country":{"identificationCode":{"listName":"country","value":"FIN"}},"region":{"value":"anyw-cou"}}}],"procurementAdditionalType":[{"procurementTypeCode":{"listName":"contract-nature","value":"supplies"}},{"procurementTypeCode":{"listName":"social-objective","value":"work-cond"}}],"plannedPeriod":{"durationMeasure":{"unitCode":"YEAR","value":4.0}}},"id":{"schemeName":"Lot","value":"LOT-0000"},"procurementIdentifier":"QQ/26/014954/000","tenderingProcess":{"governmentAgreementConstraintIndicator":{"value":false},"auctionTerms":{"auctionConstraintIndicator":{"value":false}},"contractingSystem":[{"contractingSystemTypeCode":{"listName":"dps-usage","value":"none"}},{"contractingSystemTypeCode":{"listName":"framework-agreement","value":"none"}}]},"tenderingTerms":{"awardingTerms":{"awardingCriterion":[{"subordinateAwardingCriterion":[{"ublExtensions":[{"extensionContent":{"eformsExtension":{"awardCriterionParameter":[{"parameterCode":{"listName":"number-weight","value":"per-exa"},"parameterNumeric":{"value":60.0}}]}}}],"description":[{"languageID":"FIN","value":"Hinta 60%"}],"awardingCriterionTypeCode":{"listName":"award-criterion-type","value":"price"},"name":[{"languageID":"FIN","value":"Hinta"}]},{"ublExtensions":[{"extensionContent":{"eformsExtension":{"awardCriterionParameter":[{"parameterCode":{"listName":"number-weight","value":"per-exa"},"parameterNumeric":{"value":40.0}}]}}}],"description":[{"languageID":"FIN","value":"Laatu 40%"}],"awardingCriterionTypeCode":{"listName":"award-criterion-type","value":"quality"},"name":[{"languageID":"FIN","value":"Laatu"}]}]}]},"ublExtensions":[{"extensionContent":{"eformsExtension":{"strategicProcurement":[{"applicableLegalBasis":{"listName":"cvd-scope","value":"false"}}]}}}],"fundingProgramCode":{"listName":"eu-funded","value":"no-eu-funds"},"appealTerms":{"presentationPeriod":{"description":[{"languageID":"FIN","value":"Lainsäädännön mukaisesti 14 vrk valitusaika."}]},"appealReceiverParty":{"partyIdentification":[{"id":{"schemeName":"organization","value":"ORG-0002"}}]}}}}],"contractingParty":[{"contractingActivity":[{"activityTypeCode":{"listName":"authority-activity","value":"gen-pub"}}],"contractingPartyType":[{"partyTypeCode":{"listName":"buyer-legal-type","value":"pub-undert"}}],"party":{"partyIdentification":[{"id":{"schemeName":"organization","value":"ORG-0001"}}],"serviceProviderParty":[{"serviceTypeCode":{"listName":"organisation-role","value":"ted-esen"},"party":{"partyIdentification":[{"id":{"schemeName":"organization","value":"ORG-0005"}}]}}]}},{"contractingActivity":[{"activityTypeCode":{"listName":"authority-activity","value":"health"}}],"contractingPartyType":[{"partyTypeCode":{"listName":"buyer-legal-type","value":"spec-rights-entity"}}],"party":{"partyIdentification":[{"id":{"schemeName":"organization","value":"ORG-0003"}}],"serviceProviderParty":[{"serviceTypeCode":{"listName":"organisation-role","value":"ted-esen"},"party":{"partyIdentification":[{"id":{"schemeName":"organization","value":"ORG-0005"}}]}}]}}],"tenderingProcess":{"procedureCode":{"listName":"procurement-procedure-type","value":"restricted"},"processJustification":[{"processReasonCode":{"listName":"accelerated-procedure","value":"false"}}],"noticeDocumentReference":[{"id":{"schemeName":"notice-id-ref","value":"42feb037-d2b7-4893-a1ee-005c6db7528d-01"}}]},"ublExtensions":[{"extensionContent":{"eformsExtension":{"noticeResult":{"lotResult":[{"tenderLot":{"id":{"schemeName":"Lot","value":"LOT-0000"}},"tenderResultCode":{"listName":"winner-selection-status","value":"selec-w"},"receivedSubmissionsStatistics":[{"statisticsNumeric":{"value":9.0},"statisticsCode":{"listName":"received-submission-type","value":"tenders"}}],"lowerTenderAmount":{"currencyID":"EUR","value":164100.0},"higherTenderAmount":{"currencyID":"EUR","value":283500.0},"settledContract":[{"id":{"schemeName":"contract","value":"CON-0001"}}],"lotTender":[{"id":{"schemeName":"tender","value":"TEN-0001"}}],"id":{"schemeName":"result","value":"RES-0001"}}],"lotTender":[{"id":{"schemeName":"tender","value":"TEN-0001"},"tenderLot":[{"id":{"schemeName":"Lot","value":"LOT-0000"}}],"tenderRankedIndicator":{"value":true},"tenderVariantIndicator":{"value":false},"subcontractingTerm":[{"termCode":{"listName":"applicability","value":"no"}}],"tenderReference":[{"id":{"value":"Tarjouksen nimi: Netum Oy tarjous - DigiFinland Oy - IT-konsultointi 2023-2028 (DPS) - Tietoturvatestaus"}}],"legalMonetaryTotal":{"payableAmount":{"currencyID":"EUR","value":164100.0}},"tenderingParty":[{"id":{"schemeName":"tendering-party","value":"TPA-0001"}}]}],"settledContract":[{"issueDate":{"value":"2026-08-10Z"},"awardDate":{"value":"2026-06-23Z"},"contractReference":[{"id":{"value":"612620"}}],"lotTender":[{"id":{"schemeName":"tender","value":"TEN-0001"}}],"title":[{"languageID":"FIN","value":"DigiFinland Oy - IT-konsultointi 2023-2028 (DPS) - Tietoturvatestaus, Netum Oy"}],"signatoryParty":[{"partyIdentification":[{"id":{"schemeName":"organization","value":"ORG-0003"}}]}],"id":{"schemeName":"contract","value":"CON-0001"},"procurementIdentifier":"QQ/26/014954/CON001"}],"totalAmount":{"currencyID":"EUR","value":300000.0},"tenderingParty":[{"tenderer":[{"id":{"schemeName":"organization","value":"ORG-0004"}}],"id":{"schemeName":"tendering-party","value":"TPA-0001"}}]},"organizations":{"organization":[{"company":{"postalAddress":{"countrySubentityCode":{"listName":"nuts","value":"FI1B1"},"streetName":{"value":"PL 1386"},"postalZone":{"value":"00101"},"cityName":{"value":"Helsinki"},"country":{"identificationCode":{"listName":"country","value":"FIN"}}},"partyName":[{"name":{"languageID":"FIN","value":"Hansel Oy"}}],"partyLegalEntity":[{"companyID":{"value":"0988084-1","schemeID":"002"}}],"contact":{"telephone":{"value":"+358 294444200"},"electronicMail":{"value":"kilpailutus@hansel.fi"}},"websiteURI":{"value":"http://www.hansel.fi"},"partyIdentification":{"id":{"schemeName":"organization","value":"ORG-0001"}}},"groupLeadIndicator":{"value":true},"awardingCPBIndicator":{"value":true},"acquiringCPBIndicator":{"value":false}},{"company":{"postalAddress":{"countrySubentityCode":{"listName":"nuts","value":"FI1B1"},"streetName":{"value":"Radanrakentajantie 5"},"postalZone":{"value":"00520"},"cityName":{"value":"Helsinki"},"country":{"identificationCode":{"listName":"country","value":"FIN"}}},"partyName":[{"name":{"languageID":"FIN","value":"Markkinaoikeus"}}],"partyLegalEntity":[{"companyID":{"value":"3006157-6","schemeID":"002"}}],"contact":{"telephone":{"value":"+358 295643300"},"electronicMail":{"value":"markkinaoikeus@oikeus.fi"}},"websiteURI":{"value":"http://www.oikeus.fi/markkinaoikeus"},"partyIdentification":{"id":{"schemeName":"organization","value":"ORG-0002"}}}},{"company":{"postalAddress":{"countrySubentityCode":{"listName":"nuts","value":"FI1B1"},"streetName":{"value":"Siltasaarenkatu 8-10"},"postalZone":{"value":"00530"},"cityName":{"value":"Helsinki"},"country":{"identificationCode":{"listName":"country","value":"FIN"}}},"partyName":[{"name":{"languageID":"FIN","value":"DigiFinland Oy"}}],"partyLegalEntity":[{"companyID":{"value":"2859355-7","schemeID":"002"}}],"contact":{"telephone":{"value":"+358 404855422"},"electronicMail":{"value":"hankinnat@digifinland.fi"},"name":{"value":"Minna Kulovaara"}},"websiteURI":{"value":"http://digifinland.fi"},"partyIdentification":{"id":{"schemeName":"organization","value":"ORG-0003"}}},"groupLeadIndicator":{"value":false},"awardingCPBIndicator":{"value":false},"acquiringCPBIndicator":{"value":false}},{"company":{"postalAddress":{"countrySubentityCode":{"listName":"nuts","value":"FI19B"},"streetName":{"value":"Yliopistonkatu 58 B"},"postalZone":{"value":"33100"},"cityName":{"value":"Tampere"},"country":{"identificationCode":{"listName":"country","value":"FIN"}}},"companySizeCode":{"listName":"economic-operator-size","value":"medium"},"partyName":[{"name":{"languageID":"FIN","value":"Netum Oy"}}],"partyLegalEntity":[{"companyID":{"value":"1100539-2","schemeID":"002"}}],"partyIdentification":{"id":{"schemeName":"organization","value":"ORG-0004"}}}},{"company":{"postalAddress":{"countrySubentityCode":{"listName":"nuts","value":"FI1B1"},"streetName":{"value":"Mannerheiminaukio 1a"},"postalZone":{"value":"00100"},"cityName":{"value":"Helsinki"},"country":{"identificationCode":{"listName":"country","value":"FIN"}}},"partyName":[{"name":{"languageID":"FIN","value":"Hansel Oy (Hilma)"}}],"partyLegalEntity":[{"companyID":{"value":"FI09880841","schemeID":"002"}}],"contact":{"telephone":{"value":"029 55 636 30"},"electronicMail":{"value":"tekninen@hankintailmoitukset.fi"},"name":{"value":"eSender"}},"websiteURI":{"value":"http://hankintailmoitukset.fi"},"partyIdentification":{"id":{"schemeName":"organization","value":"ORG-0005"}}}}]},"transmissionDate":{"value":"2026-09-11+00:00"},"transmissionTime":{"value":"07:45:39+00:00"},"noticeSubType":{"subTypeCode":{"listName":"notice-subtype","value":"29"}}}}}],"procurementProject":{"name":[{"languageID":"FIN","value":"DigiFinland Oy -  IT-konsultointi 2023-2028 (DPS) - Tietoturvatestaus"}],"id":{"value":"612620"},"procurementTypeCode":{"listName":"contract-nature","value":"services"},"description":[{"languageID":"FIN","value":"Hankinnan kohteena on DigiFinland Oy:n hankkeiden ja palveluiden tietoturvan tarkastukset ja auditoinnit, joka sisältää teknisen tietoturvatestauksen sekä arkkitehtuurikatselmoinnit (alustapalvelut/infra, järjestelmäintegraatiot). Auditoinnissa käytetään mm. turvallisuuden auditointikriteeristöjä PiTuKri, Katakri ja GDPR, sekä soveltuvin osin kansainvälisiä viitekehyksiä ja parhaita käytäntöjä, kuten OWASP (esim. OWASP Top 10) ja CIS Controls.\n\nTyö tehdään noudattaen DigiFinlandin sisäisiä tiedon käsittelyohjeita (julkinen, sisäinen ja salainen). Tarvittaessa työssä voidaan käsitellä myös turvaluokiteltua tietoa (TL) asiakkaan ohjeiden sekä soveltuvan lainsäädännön mukaisesti.\n\nAuditointi toteutetaan siten, että auditoitavan palvelun tai palvelukokonaisuuden tietoturvan taso kyetään määrittelemään. Valittu toimittaja eli auditoija tekee palvelulle ns. eettisen hakkeroinnin, jossa auditoija etsii ohjelmallisesti palvelun haavoittuvuuksia ja muita tietoturvaongelmia DigiFinlandin osoittamasta kohteesta tai arvioi palvelun arkkitehtuuria tietoturvan näkökulmasta.\n\nAuditoija tekee tietoturvaselvityksen, jossa mahdolliset palvelun haavoittuvuudet ja muut tietoturvaan liittyvät ongelmat on yksilöity ja niiden ratkaisemiseen annetaan ohjeet. Tämä selvitys käydään läpi DigiFinlandin edustajien ja palvelun rakentaneiden IT-toimittajien kanssa.\n\nAuditoinnit kohdistuvat DigiFinlandin olemassa oleviin palveluihin (tällä hetkellä Omaolo, Navigaattoripalvelut sekä hoidon perusteet) sekä mahdollisiin tuleviin palveluihin. Hankintayksikön sitoumuksettoman arvion mukaan kukin palvelu auditoidaan kerran kalenterivuodessa. Hankinnan arvioitu kokonaisarvo on noin 300 000 €."}],"additionalCommodityClassification":[{"itemClassificationCode":{"listName":"cpv","value":"48000000"}}],"mainCommodityClassification":[{"itemClassificationCode":{"listName":"cpv","value":"72000000"}}],"realizedLocation":[{"address":{"country":{"identificationCode":{"listName":"country","value":"FIN"}},"region":{"value":"anyw-cou"}}}],"procurementAdditionalType":[{"procurementTypeCode":{"listName":"contract-nature","value":"supplies"}}]},"id":{"schemeName":"notice-id","value":"66b53d83-06e4-450f-8bbc-6eec3de75c6a"},"noticeLanguageCode":{"value":"FIN"},"versionID":{"value":"01"},"ublVersionID":{"value":"2.3"},"customizationID":{"value":"eforms-sdk-1.13"},"tenderResult":[{"awardDate":{"value":"2000-01-01Z"}}]},"hilmaStatistics":{"LOT-0000":{"energyEfficiencyConsidered":false,"lowCarbon":false,"circularEconomy":false,"biodiversity":false,"sustainableFoodProduction":false,"justWorkingConditions":true,"employmentCondition":false,"codeOfConduct":false,"innovationConsidered":false,"solutionNewToBuyer":false,"solutionNewToMarketOrIndustry":false,"smeParticipationConsidered":false,"validationState":0}},"etsCreator":{"id":"0b1adeb0-4928-43f0-3965-08dbb81564ad","name":"Cloudia Kilpailutus"},"isUIReadOnly":true,"tendering":2,"requirements":[],"links":[],"attachments":[],"linkedNotices":["176487-2025","673045-2026","692184-2026","765044-2026"],"isDpsCan":false,"isFrameworkAgreement":null,"isFrameworkAgreementCan":false,"hasReferenceToProcedure":null,"originalSdkVersion":"eforms-sdk-1.13","dateCreated":"2026-09-11T08:00:40.5946917Z","dateModified":"2026-11-04T04:05:05.7830098Z"}