Purchase of an Audit Service for the Purpose of Checking Tender

• Country: Azerbaijan
• Summary: Purchase of an Audit Service for the Purpose of Checking the Information Security Management System
• AZT Ref No: 134478789
• Deadline: 17 Feb 2026
• Financier: Self Financed
• Purchaser Ownership: Government
• Tender Value: AZN 22066.00
• Notice Type: Tender
• Document Ref. No.: 2026/AT/00254/V1
• Purchaser's Detail:
  Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details.

  Login to see details
• Description:
• Information, the National Depository Center of the Republic of Azerbaijan (hereafter - NDC), the Central Bank of the Republic of Azerbaijan (hereafter - ARMB) "Ensuring information security in subjects whose activities are controlled in financial markets" In accordance with the requirements of the Information Security Management System (ITIS) implemented in the NDM, following the above-mentioned regulatory requirements of the ARMB, the activity of the NDM and the business processes that are part of this activity, plans an external audit of full compliance. Audit service providers must have international accreditation and at least 3 (three) years of experience in auditing information security in financial markets. Suppliers must have at least 2 (two) employees certified at the international level in the field of information security audit (ISO/IEC 27001 Lead Auditor, ISACA's Certified Information Systems Auditor or The GIAC Systems and Network Auditor (GSNA) by GIAC). The framework of the audit service is the verification and assessment of full compliance with the ARMB's "Requirements for ensuring information security in the subjects whose activity is controlled in the financial markets" according to the following points: • No. 3 Item- Information security management system • Item No. 4- Organizational control measures • Item No. 5- Human resources control measures • Item No. 6- Physical security control measures • Item No. 7- Technological control measures • Item No. 8- Reporting Audit service project stages • Evaluation of the current compliance level. • Conducting GAP analysis in terms of compliance with the mentioned regulatory requirements. • Initial compliance report and preparation and presentation of the improvement project document. • Final evaluation of the implementation of the improvement project. • Presentation of final report and ITIS development roadmap....
• Documents:

 Tender Notice