[Seite 1]
Questions and answers to Temporary staffing for software testing personnel tender
| # | Date | Questions from Applicants | Answers from TSCNET |
|---|---|---|---|
| 1 | 02.10.2026 | The tender documents stipulate that valid certification to ISO/IEC 27001 is a disqualification criterion. We would like clarification as to whether this requirement must be met by a certificate specifically relating to the tenderer and the specific scope of the contract, or whether, alternatively, equivalent evidence of an implemented information security management system will be accepted. In particular, can documented information security, data protection, compliance and governance structures; group-wide binding security policies; technical and organisational measures; regular internal controls and audits; and an information security management system demonstrably aligned with ISO/IEC 27001 be accepted as equivalent evidence? If not, we would ask you to consider whether, for reasons of proportionality and to ensure fair competition, ISO 27001 certification could be removed from the exclusion criteria and instead be taken into account as an evaluation criterion. Please also advise which specific alternative forms of evidence, if any, must be submitted with the application to participate or the tender. | The requirement for valid certification to ISO/IEC 27001 remains a mandatory eligibility criterion for this tender and cannot be replaced by alternative evidence. Certification to ISO/IEC 27001 constitutes an independent verification by an accredited third party that an organisation’s Information Security Management System (ISMS) has been assessed against a recognised international standard. Whilst documented information security policies, governance structures, technical and organisational measures, internal controls, audits and other security-related practices may contribute to an effective information security framework, TSCNET is not in a position to independently assess whether such measures are equivalent to the level of security guaranteed by an officially certified management system in accordance with ISO/IEC 27001. Consequently, alternative evidence of an implemented ISMS cannot be accepted in lieu of a valid ISO/IEC 27001 certificate, and the certification requirement remains in place as an eligibility criterion for participation in this procurement procedure. |
| 2 | 05.10.2026 | Please confirm whether German commercial register extracts (Handelsregisterauszüge) and German temporary work licences (AÜG-Erlaubnis) may be submitted in German language, or whether certified English translations are required. | We can confirm that extracts from the German commercial register and German AÜG licences may be submitted in German. |
| 3 | 05.10.2026 | We have noted that the document “Annex 7 to the Letter of Tender – Self-Declaration to the Sanctions Regulation” appears to be non-editable and cannot be completed electronically. Could you please provide an editable version of the document or confirm whether we may complete the form in a separate document while maintaining the original structure and wording? | Thank you very much for bringing this to our attention. Please use the newly updated form: “20261005_Annex 7_to LoT_Self-declaration regarding the Sanctions Regulation.docx” |
| 4 | 06.10.2026 | Our company is currently involved in another programme in which TSCNET participates. We would like to ask whether this status could give rise to a conflict of interest, particularly with regard to testing the calculation modules. Would our status as a programme contractor constitute a conflict of interest with regard to testing the calculation modules? If so, would it be acceptable for us to apply for testing activities relating to other software applications? Would this status prevent us from submitting a tender independently? If not, could we participate as a subcontractor of another tenderer? | 07.10.2026: TSCNET will provide a further response. |
| 5 | 07.10.2026 | Is certification to ISO/IEC 27001 a mandatory eligibility criterion (exclusion criterion)? If so: Are equivalent forms of evidence recognised (e.g. a documented ISMS with a self-declaration or an ongoing certification process)? In the case of temporary agency work, the temporary staff work in accordance with the client’s instructions and within the client’s IT infrastructure, and are therefore subject to the client’s ISMS. Is it therefore sufficient for staff to be bound by the information security requirements of TSCNET? | The requirement for valid certification to ISO/IEC 27001 remains a mandatory eligibility criterion for this tender and cannot be replaced by alternative evidence. Certification to ISO/IEC 27001 constitutes an independent verification by an accredited third party that an organisation’s Information Security Management System (ISMS) has been assessed against a recognised international standard. Whilst documented information security policies, governance structures, technical and organisational measures, internal controls, audits and other security-related practices may contribute to an effective information security framework, TSCNET is not in a position to independently assess whether such measures are equivalent to the level of security guaranteed by an officially certified management system in accordance with ISO/IEC 27001. Consequently, alternative evidence of an implemented ISMS cannot be accepted in lieu of a valid ISO/IEC 27001 certificate, and the certification requirement remains in place as an eligibility criterion for participation in this procurement procedure. |
| 6 | 07.10.2026 | Does the required minimum turnover of EUR 900,000 per annum (2023–2025) relate exclusively to the provision of IT and digital specialists, or is turnover from the provision of SAP and engineering specialists, as well as turnover from affiliated companies (temporary staffing), also taken into account? | The minimum annual turnover of EUR 900,000 relates to services comparable to the subject matter of the tender. Turnover from SAP specialists may be included where the services fall within the IT and digital scope. Turnover from engineering specialists may only be included where the services are demonstrably comparable. Turnover from affiliated companies cannot be aggregated unless the bidder formally relies on the relevant company’s capacities in accordance with the tender conditions. |
Page 1 of 1