|
1) Part 1: Cybersecurity Training For Employees Of The Commune Office And Subordinate Units With Testing: A) Conducting A Training Dedicated To Employees Of The Municipal Office And Subordinate Units (Max. 200 Participants) In The Field Of Cyber Security, And Then Conducting Phishing Tests On Their Mailboxes; B) The Training Is Stationary And Will Be Conducted At The Headquarters Of The Ordering Party At Dwitne, Ul. Short 1, 05-326 Dispassed (Wołomin Poviat), C) The Training Should Be Organized For Training Groups Of 20 People (Minimum 10 Groups), D) The Training Unit Is 1 Training Hour (45 Minutes), With The Training To Last Min. 3 Training Hours For The 1St Training Group, E) The Trainings Will Take Place On Business Days From Tuesday To Friday From 7.30 To 15.30 On The Date Agreed With The Ordering Party, F) Training Will Be Conducted In Polish, G) Training Will Be Conducted On The Basis Of The Schedule Approved By The Ordering Party Containing The Substantive Scope, Provided By The Contractor, Provided By The Contractor Before Signing The Contract, The Contractor, H) It Will Provide: Training Materials For Each Electronic Training Participant At The Latest On The Day Of Training, Personal Certificate With A Trainers Signature, Confirming The Completion Of The Training And Its Scope, The Presence Of Training Participants (Daily, Completed Separately Each Day Of Training), List Of Receipt Of Certificates Of Completion Of Training. I) Required Training Agen Cyberspace- Discussion Of The Correct Rules Related To Cybersecurity And Threats To The Network Such As Phishing, Ransomware And Malware,- Types Of Attacks, E.G. Qr Codes, Links, Phishing, Typesquatting, Social Engineering Attacks- Passwords And Password Policy- Principles Of Electronic Mail- Personal Data Protection- Data- Security In Social Media- Remote Work And Its Security- Backups And Copies Of Security) As Part Of The Remuneration, The Contractor Will Provide The Employer With Materials From The Training, Which Will Be Able To Use To Train Absent Persons Or New The Internet, For The Purposes Of Full-Time Training, M) After The Training, The Contractor Will Develop A Script For A Social Engineering Attack, Adapted To The Specifics Of The Employers Activities Within 30 Days, By Sending Prepared Emails. To The Addresses Of The E -Mails Of Employees Of The Commune Office And Subordinate Units (Min. Up To 20% Of The Trained). The Contractor Will Conduct Tests On Agreed Dates, Maintaining The Principles Of Confidentiality And Ethics. Then Send The Contracting Authority A Report On The Analysis Of Employee Response To Tests Containing:- A Detailed Description Of The Attack Scenarios Used.
|
