The Norwegian Agency for Public and Financial Management (DFØ), through the Norwegian Public Sector Cloud Marketplace (MPS), and Adda Inköpscentral, the Swedish municipalities’ central purchasing body, are now conducting a joint cross-border procurement of cloud-based vulnerability management services. The purpose of the agreement is to provide Norwegian and Swedish public sector entities access to cost-efficient, secure, flexible and state-of-the-art Vulnerability Management solutions that help identify, assess and reduce cybersecurity risk.
Why Vulnerability Management?
Digital transformation and an increasingly challenging threat landscape means that public sector entities must maintain an overview of vulnerabilities in systems, networks and applications. The public sector’s digital infrastructure consists of complex systems, applications and networks that are continuously exposed to cyber threats. A vulnerability management service makes it possible to scan and analyse these environments, identify weaknesses, prioritise remediation, automate and streamline vulnerability management processes. Regular scanning minimises the risk of data breaches, downtime and other costly incidents and helps organisations take a more proactive approach to information security.
Cross-Border Collaboration
This is the first time MPS and Adda have carried out a joint procurement (a “Joint Cross-Border Public Procurement”, or “JCBPP”, pursuant to Directive 2014/24/EU, Article 39 (4), and the Norwegian Procurement Regulations, section 29-2 cf. section 7-8. The project team and steering group consists of representatives from both countries and is built on an established collaboration between MPS and Adda. The cross-border collaboration makes it possible to share experience, develop new working methods, achieve economies of scale, lead standardisation and ensure access to the best, most innovative solutions the market can deliver through a joint agreement.
About Vulnerability Management
The procurement concerns a cloud-based vulnerability management service that should, among other things:
- Scan IT systems, applications and networks for vulnerabilities,
- Analyse and prioritise findings and propose risk-reducing measures,
- Provide public sector entities with access to reporting and dashboards that support governance and compliance with information security requirements and data protection, and
- Support different operating environments, including cloud, hybrid and on-premises environments.
A more detailed description of the service can be found in the announcement below.
About the Framework Agreement
The framework agreement will be non-exclusive and voluntary for entities to use. The framework agreement will have a duration of four years or last until the maximum value of approximately EUR 86 million is reached. The procurement is conducted under Norwegian law as a negotiated procedure in Oslo/Stockholm and is led by MPS. The intention is to enter into agreements with up to three suppliers. In total, more than 1,600 public sector entities in Sweden and Norway will be able to call off under the agreement.
What Happens Next?
The procurement notice has now been published. An information meeting for suppliers will be held on the 22nd of January 2026 at 12:00hrs. The contract is expected to be awarded in summer 2026.
Contact Us!
If you have any questions or would like more information, please contact the Project Manager at the Norwegian Public Sector Cloud Marketplace (MPS):
Halvord Vinger
E-post: [email protected]
Telefon: +47 984 22 566.