File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
TABLE OF PARTICULAR CHARACTERISTICS SUPPLEMENTING THE MODEL SPECIFICATION
HOSTED IN THE FIAP CONTRACTOR'S PROFILE
S
A
C 1. AWARDING AUTHORITY
LI
Director of the Fundación para la Internacionalización de las Administraciones
B
Ú Contracting Públicas, F.S.P. (Foundation for the Internationalisation of Public
P
authority Administrations, F.S.P.) (hereinafter, “FIAP” or “the Entity”), without prejudice
S
E to the delegation for the formalisation of the contract and such subsequent acts
N
O as may be agreed
CI Contract
Ana Cirujano Hernandez
A Manager
R
T Participation in this procurement procedure shall be subject to compliance with
S
NI the applicable regulations on sanctions and restrictions established under
MI Ukrainian legislation.
D
A In this regard, the following shall not be eligible to participate or be awarded
S
A contracts:
L Natural persons who are nationals of States subject to restrictions under
E
D applicable Ukrainian legislation, unless they can prove legal residence in
N Ukraine
Ó Legal entities established or registered under the legislation of such States
CI
Legal entities established under Ukrainian legislation whose ultimate beneficial
A
Z owner, member, or shareholder holding 10% or more is a natural or legal
LI
A rest
E
ri
li
c
g
t
i
i
b
o
i
n
li
s
ty
a nd person subject to the aforementioned restrictions
N
O regulatory
CI compliance Likewise, natural or legal persons, as well as their ultimate beneficial owners,
A members, or shareholders, who are subject to sanctions prohibiting
N participation in public procurement procedures under Ukrainian sanctions
R
E legislation, shall be excluded.
T
N
I The above restrictions shall not apply where the assets of the affected persons
A
L have been transferred to the management of the competent authority of
A Ukraine in accordance with legally established procedures.
R
A
P
N
Compliance with these requirements may be verified at any stage of the
Ó procedure and may result in the exclusion of the tenderer in the event of non-
CI compliance.
A
D
N
U
2. OBJECT AND LOTS.
F
Acquisition and Installation of software licenses for cybersecurity tools
intended to assess the security status of the information and communication
Purpose
systems of Ukrainian governmental bodies, through vulnerability analysis and
penetration testing.
48730000-4 Security Software Packages
48731000-1 File Security Software Packages
CPV code 48732000-8 Data Security Software Packages
48000000-8 Software and Information Systems Packages
72263000-6 Software Implementation Services
Yes ☐
Division into lots
No ☒
Página 1 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
S 3. DESCRIPTION, PROCEDURE AND FORM OF CONTRACTING
A
C
LI Description Mixed: Supply (main) and Service (auxiliary)
B
Ú Procedure Open (contract subject to harmonised regulation)
P Processing Ordinary
S
E
N 4. DURATION
O
CI Start date From the day after the signing of the contract
A Duration 36 months.
R
T Extensions 0.
S
Duration of each
NI N/A because the extension of the contract is not envisaged.
MI extension
D Total duration 36 months.
A
S Partial terms No
A
L
E
5. TENDER BUDGET
D
N BTB (excluding 223.560,00 €
Ó applicable taxes)
CI
BTB (including 270.507,60 €
A
Z applicable taxes)
LI
A Components Amount of service/supply
N
O
CI Unit prices referred to the different services or to the units that are delivered or
A executed when the needs to be satisfied are known. It is understood that this
N
Pricing system budget includes all the services described in the Tender Documents and
R
E additional services offered, as well as direct costs, indirect costs, and industrial
T
N profit.
I
A
L Yes: ☐
A Partial prices
R No ☒
A
P Yes, pursuant to Article 103 of the Public Sector Contracts Act (LCSP). ☐
N
Price review
No ☒
Ó
CI Yes:
A
D
N The estimated amounts of the Contract do not constitute a contract
U
commitment by the Entity, representing only an indicative reference
F
without any obligation for the Entity being derived from said reference,
Estimated
since the performance of actions forming the subject matter of the contract
maximum
will be subordinated solely to its needs.
budget for ☐
continuing
Consequently, the price is dependent on the Entity’s needs for the
performance
duration of the contract
based on needs
The final price of the contract will be the result of adding the different
services provided during the term of the contract, which in no case may
exceed the estimated value although it might not reach initial estimates.
No ☒
Página 2 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
S
A
C Sub-total Sub-total
LI
Name
Estimated
(excluding (including applicable
B consumption
Ú applicable taxes) taxes)
P
S
E Acunetix On Premise 1 license (3 years) 129.720,00€ 156.961,20€
N
O Premium Enterprise
CI Burp Suite
A 17 users (3 years) 30.360,00€ 36.735,60€
Professional
R
T Nessus Vulnerability
S 1 license (3 years) 16.560,00€ 20.037,60€
NI Scanner
MI Nexpose Vulnerability
512 IPs (3 years) 46.920,00€ 56.773,20 €
D Scanner
A
S
A
L
6. CONTRACTUAL AMENDMENTS
E
D Yes ☐
N Applicable
Ó No ☒
CI
A
Z 7. ESTIMATED VALUE
LI
A Estimated value 223.560,00 €
N
O
CI
A
N 8. SUBMISSION OF PROPOSALS
R
E Deadline for
T submitting Unless extended later, the deadline for submission of tenders is 30 days
N
I offers
A
L
A
R
A Envelope Documentation
P
N Envelope 1: Alternatively:
Ó Administrative DEUC or Annex I.B
CI
documentation Annex I.A
A
D Envelope 2: Offer
N
U evaluation criteria
F quantifiable by Annex II: Proposal of criteria that can be evaluated through the
using application of formulas.
mathematical
formulas
Only the proposed successful bidder must provide proof of these criteria prior
to the award:
Selection criteria
Resource allocation requirements
Accreditation
Award criteria
time
Other special conditions.
However, exceptionally, the contracting authority may require proof of these
criteria in advance for the proper conduct of the procedure.
Página 3 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
9. SAMPLES
Yes ☐
S
A Applicable
C No ☒
LI
B
Ú
10. SELECTION CRITERIA: QUALIFICATION, SOLVENCY AND OTHER QUALIFICATIONS
P
S
E It shall be demonstrated through the bidder’s annual
N
O turnover, referring to the best fiscal year within the last 3
CI
Economic and
Requirement
available years, in an amount equal to or greater than 100%
A
R financial of the average annual estimated value of the contract.
T solvency Annual Personas
S Annex I
NI turnover físicas
Means of proof
MI Personas Annual accounts approved and deposited
D jurídicas in the corresponding registry.
A
S
A At least one contract within the last three years, of the same
L
or similar material nature to the subject of the contract,
E Technical and Requirement
D amounting to 25% of the average annual estimated value of
N professional the contract.
Ó solvency
CI
Contracts of a
Invoices, contracts, or certificates of good performance of
A the contracts for the required amount. In contracts not
Z similar nature Means of proof
LI subject to harmonized regulation, this is not required; only
A the accreditation of the allocation of resources is required.
N
O
CI Professional
A Not applicable.
qualification
N
R
E
T 11. CRITERIA FOR AWARDING BIDS
N
I
A 11.1 AUTOMATICALLY QUANTIFIABLE OR FORMULA-BASED EVALUATION CRITERIA
L
A The highest score will be given to the offer with the lowest
R figure of the validly issued offers.
A
P
N The calculation of the rest of the scores will be done according
Ó
Description to the following formula, rounded in accordance with the
CI
A criteria established in the model specifications.
D
N
U If the offer figure matches the PBL/maximum budget, the score
F CO1: Sum of
will be 0
unit prices
Clasification = P · A / B
Where:
Formula P
A: lowest offer
B: offer to evalue
Maximum Score 70
Página 4 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
The shortest offered deployment time will be considered,
S defined as the time required for the acquisition, installation,
A configuration, and validated commissioning of the licenses
C
LI covered by the contract.
B Description
Ú
P For these purposes, deployment will be considered
S CO2: complete when the licenses are active, the software is
E Effective
N installed and configured, and at least one initial functional
O deployment scan has been validated by the contracting entity.
CI time
A Offer (effective deployment deadline) Puntos
R
T ≤ 2 weeks 30
S
NI
Formula > 2 y ≤ 4 weeks 15
MI
D > 4 y ≤ 6 weeks 5
A
> 6 weeks 0
S
A
L
12. ABNORMAL OR DISPROPORTIONATE DISCHARGES
E
D
N
The calculation of the derecognition shall be carried out exclusively with
Ó
CI regard to the objective criteria.
A
Z
LI The following two requirements must be fulfilled cumulatively:
A Financial offer: In accordance with the following calculations:
N
O o When, with only one tenderer, it is lower than the base tender
CI budget by more than 25 percentage units.
A
o When there are two bidders, the one that is more than 20
N
R percentage units lower than the other bid.
E
T o Where there are three tenderers, tenders which are more than
N 10 percentage units below the arithmetic mean of the tenders
I
A submitted. However, the highest bid shall be excluded from
L
Calculation the calculation of this average if it is more than 10 percentage
A
R units higher than the average.
A
P o When there are four or more tenderers, those that are more
N than 10 percentage units lower than the arithmetic mean of
Ó
the tenders submitted. However, if among them there are bids
CI
that are more than 10 percentage units higher than this
A
D average, a new average shall be calculated only with the bids
N
U that are not in the aforementioned situation. In any case, if the
F number of remaining bids is less than three, the new average
shall be calculated on the three lowest bids.
That the score obtained in the remaining objective criteria other than
price is 85 % higher than the average of the three lowest bids.
13. ASSISTANCE BODY
Management
Chairmanship
Alternate: Team Leader
Legal Technician at Legal Services
Legal member Alternate: Legal Technician at Legal Services
Página 5 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
Technical Logistics Technician
member 1 Sustituto: Team Leader
S
A Technical Coordinating technician
C
LI member 2 Alternate: Project technician
B Financial Economic technician
Ú
P member Alternate: Economic technician
S
E Legal Services Technician
N Secretariat Alternate: Legal Services Technician
O
CI
A
R
T
S 14. GUARANTEES.
NI
Definitive and complementary guarantee for the amount of
MI Amount
10% of the award price to be evidenced prior to the award
D Financial
A During the execution of the contract and any extensions
Period
S thereof
A
L
E 15. SPECIFIC REQUIREMENTS AND CONDITIONS FOR SUCCESSFUL BIDDERS
D
N
Ó
CI
Preference to communications through email as a form of interrelation,
A
Z delivering all documents generated in electronic format, preferably email or
LI Requirements
through a server, also allowing greater transparency and ease of access to
A
N documentation.
O
Accreditation Documentary evidence by mail, with the safeguard of professional secrecy.
CI
Avoid the environmental footprint and encourage digitalization in a sector
A Justification
N where the use of paper is still common, to the detriment of transparency.
R
E
T
N
I 16. DOCUMENTATION REQUIREMENTS PRIOR TO AWARD
A
L The successful bidder must submit, if it has not been provided previously,
A within a period of TEN (10) working days from the day following the day in
R
A which the request was sent, the following documentation
P
N
Term
Ó If the successful bidder in the award proposal does not submit the required
CI documentation in a timely manner, the contracting authority may award the
A contract to the second best bid, and so on.
D
N 1. Annex I, if it has not been provided previously
U
2. ID
F
3. Positive certification issued by the Tax Administration, accrediting that
they are up to date in compliance with their tax obligations
Spanish natural 4. Certification issued by the Social Security Treasury, accrediting that
person bidder 1 they are up to date in the fulfilment of their obligations with the Social
Security
5. Certificate of bank ownership less than 3 months old.
6. Tax Residence Certificate
7. Documentation accrediting the selection criteria.
1 These documents may vary depending on the legal nature of the bidder (natural person, legal entity,
national, foreigner, non-EU foreigner, joint venture, etc.). To consult the specific documents that must
be submitted, consult the Model Specifications. However, if you are proposed as a successful bidder,
we will indicate the specific documents that you must submit.
Página 6 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
8. Documentation accrediting the constitution of the insurance and
guarantees
S
9. Responsible declaration confirming the existence of a standard
A
C administrative and technical support service applicable to contracts of
LI
a similar nature, without the need to provide a dedicated staff structure
B
Ú
P
1. Annex I, if it has not been provided previously
S
E 2. ROLL YOU alternatively:
N
O o Deed deposited and registered in the Commercial Registry
CI o Power of Attorney Deed
A o ID of the parent
R
T 3. Positive certification issued by the Tax Administration, accrediting that
S
NI they are up to date in compliance with their tax obligations
MI Bidder for a 4. Certification issued by the Social Security Treasury, accrediting that
D Spanish legal they are up to date in the fulfilment of their obligations with the Social
A entity Security
S
5. Certificate of bank ownership less than 3 months old.
A
L 6. Documentation accrediting the selection criteria.
E
D 7. Documentation accrediting the constitution of the insurance and
N guarantees
Ó 8. Responsible declaration confirming the existence of a standard
CI
administrative and technical support service applicable to contracts of
A
Z a similar nature, without the need to provide a dedicated staff structure
LI
A 1. Annex I, if it has not been provided previously
N 2. Reciprocity report according to article 68 of the LCSP.
O
CI 3. Passport or equivalent ID of the proxy
A 4. Certificate of bank ownership less than 3 months old.
N 5. Tax Residence Certificate
R Foreign natural
E 6. Documentation accrediting the selection criteria.
T person bidder
N 7. Documentation accrediting the constitution of the insurance and
I guarantees
A
L 8. Responsible declaration confirming the existence of a standard
A administrative and technical support service applicable to contracts of
R
A a similar nature, without the need to provide a dedicated staff structure
P
N
1. Annex I, if it has not been provided previously
Ó 2. Report issued by the Permanent Diplomatic Mission or the Consular
CI Office of Spain of the place of domicile of the company, in which it is
A
registered, subject to the accreditation of the company, that it is
D
N registered in the local professional, commercial or similar Registry or,
U
F failing that, that it acts, trades or operates regularly in the area(s) of
activity covered by the object of the contract
Bidder foreign 3. Reciprocity report according to article 68 of the LCSP.
legal entity 4. Passport or equivalent ID of the proxy
5. Certificate of bank ownership less than 3 months old.
6. Documentation accrediting the selection criteria.
7. Documentation accrediting the constitution of the insurance and
guarantees
8. Responsible declaration confirming the existence of a standard
administrative and technical support service applicable to contracts of
a similar nature, without the need to provide a dedicated staff structure
17. PERFORMANCE.
Place of
According to PPT
performance
Página 7 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
Period According to PPT
S
A 18. RÉGIMEN DE PAGO
C
LI Payment terms single payment upon delivery and acceptance of all the services covered by
B the contract
Ú
P The above payments will be made once the service has been provided
S and the corresponding invoice has been presented
E
N The IBAN number held by the contractor to which FIAP is to transfer
O the amount on the invoices shall be entered on the invoice. PAYMENT
CI
Terms and BY TRANSFER ONLY
A
R Conditions Payment term: 30 calendar days from the acceptance or verification of
T
S the goods or services
NI
Invoices shall meet all legal requirements.
MI
The invoice shall always include the file number and, where
D
A applicable, the order number.
S Direct payment
A Yes. In accordance wit Additional Provision 51 of the Public Sector Contracts
to
L Act
E subcontractors
D
N
Bidders who have tax residence outside of Spain, whether or not they belong
Ó Other to Member States of the European Union must present the certificate of tax
CI considerations. residence for the purposes of the agreement to avoid double taxation between
A
Spain and the country of residence.
Z
LI
A
N 19. PENALTIES
O Yes. The following: In the event that the successful bidder delays the
CI
presentation of the services beyond the duration established in the Documents
A Delay in
N or a deadline improved by the bidder in his offer, the FIAP F.S.P. may sanction
R provision of
the successful bidder with an amount corresponding to 5% of the contract
E service
T amount for each week of delay, which will accrue directly from the invoice
N
I presented for payment.
A
L Yes. The following: In the event that any of the supplies or services lack
A technical rigor or do not comply with the functionalities in the Specifications
R
that govern this tender, the FIAP F.S.P. will proceed to require the correction
A
P of the supply or the service performed within a period of one week. If after a
N Defective
second review by both the Costa Rican authorities and responsible persons at
Ó performance
CI FIAP, the supply or service still does not satisfy the anticipated requirements,
A the FIAP may penalize the successful bidder with an amount corresponding to
D
N 5% of the price of the product, which will be accrued directly from the next
U invoice.
F
20. TERMINATION OF THE CONTRACT
Appear sanctioned in the EU International Sanctions Lists for money
Specific causes laundering.
Being sanctioned with a prohibition to contract by any national agency.
21. RESOURCES.
Special appeal in 15 working days, before the Central Administrative Court of Contract
☒
contracting matters Appeals.
Improper lifting 1 month, before the Secretariat of State for Cooperation. ☐
22. DATA PROCESSING AND TRANSFERS.
Personal data Yes: The performance requires personal data processing on behalf of the
☐
processing data controller by the contractor
Página 8 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
No ☒
S Yes: Performance requires personal data transfers to the contractor on
C A Data transfers to behalf of the data controller ☐
LI third parties
No ☒
B
Ú
P
S
E
N
O
CI
A
R
T
S
NI
MI
D
A
S
A
L
E
D
N
Ó
CI
A
Z
LI
A
N
O
CI
A
N
R
E
T
N
I
A
L
A
R
A
P
N
Ó
CI
A
D
N
U
F
Página 9 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
ANNEX I.A: ALTERNATIVE RESPONSIBLE STATEMENT TO THE DEUC
S
Nombre
A
C Apellidos
LI
B DNI o equivalente
Ú
En nombre propio ☐
P Representación
S En representación de la siguiente Entidad ☐
E
N Denominación
O social
CI
NIF
A
R Domicilio social
T
S Teléfono
NI
Correo electrónico
MI
D
A I DECLARE
S
A
L That, both as a bidder and in the event of being awarded the contract,
E
D
N
1. Code of Ethics.
Ó
CI I express my commitment to the highest standards regarding compliance with legal, ethical, and moral
A
norms, adopting the necessary measures to prevent and detect fraud, corruption, and conflicts of
Z
LI interest, and, therefore, I respect the principles and values of FIAP, which are reflected in its "Code of
A
N Ethics" (https://www.FIAP.org/wp-content/uploads/2024/11/CO.00.-Codigo-Etico-Noviembre-2024-
O WEB-1.pdf)
CI
A
N If I become aware of any conduct that could be suspected of non-compliance and/or irregularity in the
R
development of FIAP's activities, understood as conduct contrary to the "Code of Ethics," I will report
E
T it through the FIAP ethics channel. (https://www.FIAP.org/canal-etico/). Additionally, I will report any
N
I potential conflict of interest that affects me personally or that may affect third parties professionally
A
associated with FIAP as soon as I become aware of it, by sending an email to the FIAP Ethics
L
A Committee (conflicto.intereses@FIAP.es).
R
A
P Any failure to comply with the provisions of this clause, due to failure to disclose a conflict of interest
N (breaching the duty to inform), false disclosures, or any other violation of the provisions of this clause,
Ó
CI may result in liability and, where appropriate, the adoption of appropriate disciplinary measures.
A Sanctions, where applicable, may range from early termination of the contract to exclusion from
D
participation in public procurement procedures for a period of 10 years.
N
U
F
2. Human Rights: I declare that all actions arising from the contract will respect human rights and
children's rights, in accordance with current regulations in Spain, the European Union, and the
United Nations.
3. Legality: It is subject to the specifications of this tender and the rest of the contractual documents,
without any exception or reservation.
4. Jurisdiction: It is subject to the laws, jurisdiction and Spanish courts and tribunals of any order.
5. Jurisdiction: In the event of a dispute relating to this contract, the contract shall be subject to the
courts and tribunals of the judicial district where the contracting authority is based, waiving any
applicable foreign jurisdiction.
Página 10 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
S 6. Capacity
A
C Natural persons: They have the proper legal capacity.
LI
B Legal entities:
Ú o The bidder is validly incorporated and can participate in the tender in accordance with
P
its corporate purpose.
S
E o The bidder's representative has the proper legal capacity.
N
O 7. Prohibitions on contracting. The bidder declares that it, its representatives or related persons:
CI They are not prohibited from contracting by themselves or by extension as a result of the
A
application of article 71.3 of the LCSP.
R
T It is not included in the European Union's Early Detection and Exclusion System (EDES).
S
NI You are not subject to any of the prohibitions on contracting provided for in the regulations of
MI your country of origin, if it is different from Spain.
D The tenderer further declares that the goods and services covered by the contract are eligible
A
on the basis of their origin and are not subject to any restrictions or prohibitions.
S
A
L
E
D 8. Representation: The signatory of this declaration holds the due representation of the bidder who
N submits the proposal.
Ó
CI
A 9. Beneficial Ownership of the Company (legal entities only):
Z
LI
A The bidder declares that the beneficial owner of the company2 is the following (repeat as many
N
O times as there are beneficial owners):
CI First Name
A Last Name
N
R National Identity
E
T
Document (DNI) or
N equivalent
I
A
L
A The bidder undertakes to provide, if requested, the Certificate of Beneficial Ownership of the
R Company3 or an equivalent document that proves the previous point, if, due to nationality or
A
P similar circumstances, this document does not exist in the country where the company's
N registered office is located.
Ó
CI
A The bidder accepts the omission or falsification of this information, as well as its failure to
D update it during the contract execution phase, as grounds for exclusion from the procedure
N
U and as grounds for unilateral termination of the contract.
F
10. Anti-corruption: The bidder, its representatives or related persons
They have not and will not offer money, commission, or gift in order to:
o That personnel of the Entity with competence related to a tender or contract do or fail
to do something related to their functions.
2 According to the anti-money laundering regulations, Law 10/2010, the beneficial owners of an entity
are considered to be any natural person who meets any of the following criteria:
• Directly or indirectly owns more than 25% of the entity's share capital or voting rights.
• Exercises effective control of the entity through other means, such as direct or indirect
control of management or decision-making.
• Is the beneficial owner of the entity or the economic transaction carried out.
3 Official document that identifies individuals who, directly or indirectly, own more than 25% of a
company's shares.
Página 11 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
o To use the influence of their position before another employee of the Entity with the
competence described, so that they do or refrain from doing something related to their
S
functions.
A
C If they infringe the previous point, they empower this Entity to terminate all contracts signed
LI
with the bidder and the companies in its group.
B
Ú They undertake not to agree on prices with other bidders.
P
S
E 11. SME: Check an option. If an option is not selected, it is understood that it does not apply.
N
O ☐ The bidder is an SME
CI
☐ The bidder is not an SME
A
R
T
S 12. Nationality: Check an option. If an option is not selected, it is understood that the bidder is
NI Spanish.
MI
☐ The bidder is Spanish.
D
A ☐ The tenderer is a foreign national from an EU or EEA country.
S The tenderer is a foreigner from a country that does not belong to the EU or the EEA but
A
L does belong to the GPA. He undertakes to provide, when required:
E
D Report issued by the Permanent Diplomatic Mission or Consular Office of Spain of
N the place of domicile of the company, in which it is stated, after accreditation by the
Ó ☐ company, that they are registered in the local professional, commercial or similar
CI
Registry or, failing that, that they act regularly in local traffic in the field of the
A
Z activities to which the object of the Contract extends.
LI
If the contract is not subject to harmonized regulation, reciprocity report referred to
A
N in article 68 of the LCSP.
O
CI The tenderer is a foreign national from a country that does not belong to the EU, EEA or
A ACP. He undertakes to contribute, when required:
N
Report issued by the Permanent Diplomatic Mission or Consular Office of Spain of
R
E the place of domicile of the company, in which it is stated, after accreditation by the
T ☐
N company, that they are registered in the local professional, commercial or similar
I Registry or, failing that, that they act regularly in local traffic in the field of the
A
L activities to which the object of the Contract extends.
A
R Reciprocity report referred to in Article 68 of the LCSP.
A
P
N
13. Disability: Check an option. If an option is not selected, it is understood that it does not apply.
Ó The tenderer does not employ 50 or more workers and, consequently, is not obliged to
CI ☐
have 2% of workers with disabilities or to adopt alternative measures.
A
D The tenderer employs 50 or more workers and, consequently, is obliged to have and fulfils
N ☐
the obligation to 2% of workers with disabilities or adopt alternative measures.
U
F
14. Equality: Check an option. If an option is not selected, it is understood that it does not apply.
The bidder is not obliged to have an equality plan because it is not in any of the cases
☐
provided for in the new DT 12 of LO 3/2007 and RD-Law 6/2019.
The bidder is obliged and fulfils the obligation to have an equality plan as it is not in any of
☐
the cases provided for in the new DT 12 of LO 3/2007 and RD-Law 6/2019.
15. Confidentiality: Check an option. If an option is not selected, it is understood that it does not
apply.
☐ The tender submitted does not contain confidential data.
The tender submitted contains this confidential data.
Document Pages Justification
☐
Página 12 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
16. Outsourcing: Check an option. If an option is not selected, it is understood that it does not apply.
☐ The bidder does not subcontract any part of the contract to third parties.
S
A The bidder subcontracts this:
C
Part of the contract to be subcontracted
LI
B Subcontractor
Ú
P ☐ NIF
S Domicile
E
N Contact (phone, mail, etc.)
O
CI
It shall notify the contracting authority of any changes to this information during the performance of
A
R the main contract, and all necessary information on new subcontractors.
T
S
NI 17. Business groups: Check an option. If an option is not selected, it is understood that it does not
MI
apply.
D
A ☐ The bidder does not belong to any group of companies.
S The bidder belongs to the following group of companies:
A
L ☐ It does not apply for this tender with any company in the group
E
D The following companies are submitted to this tender together with the
N ☐ ☐ following group companies:
Ó
CI
A
Z If an option is not selected, it is understood that it does not apply.
LI
A
N 18. UTE: If an option is not selected, it is understood that it does not apply.
O
CI ☐ The bidder does not participate in this tender in a Temporary Joint Venture (UTE).
A The bidder participates in a Temporary Union of Companies (UTE) in this tender with these
N
R companies:
E
Enterprise Participation percentage
T
N
I
A
L
A
☐
R The following are appointed as the sole representative of the UTE:
A
P
N In the event that a legal person is appointed as the representative of the union, a
Ó
representative who is a natural person with sufficient powers to act on behalf of the union
CI
A must also be appointed
D
N
U
F 19. Solvency: The bidder has the corresponding classification, where applicable, or that it meets the
requirements of economic, financial and technical or professional solvency required, under the
conditions established by this CCP and in order to prove it:
☐ It will not be based on the solvency and means of other entities.
It will be based on the solvency and means of these entities:
Solvency that is appealed
Entrepreneur whose solvency is resorted
to
☐
NIF
Domicile
Contact (phone, mail, etc.)
If an option is not selected, it is understood that it does not apply.
Página 13 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
20. Turnover: The annual turnover referred to any of the last three years is:
S
Year Annual turnover
A
C €
LI
B
Ú
P
S
E
N
O Date, signature and ID of the declarant
CI
A
R
T
S
NI
MI
D
A
S
A
L
E
D
N
Ó
CI
A
Z
LI
A
N
O
CI
A
N
R
E
T
N
I
A
L
A
R
A
P
N
Ó
CI
A
D
N
U
F
Página 14 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
ANNEX I.B: DECLARATION OF RESPONSIBILITY COMPLEMENTARY TO THE ESPD
S
DECLARE
A
C
LI
That, both as a bidder and in the event of being awarded,
B
Ú
P
1. Legality: It is subject to the Specifications of this tender and the rest of the contractual documents,
S
E without any exception or reservation.
N
O
CI The tenderer further declares that the goods and services covered by the contract are eligible on
A the basis of their origin and are not subject to any restrictions or prohibitions.
R
T
S
2. Code of Ethics:
NI
MI
D I am committed to the highest standards in relation to compliance with legal, ethical and moral norms,
A adopting the necessary measures to prevent and detect fraud, corruption and conflicts of interest, and
S therefore respect the principles and values of FIAP, which are set out in its "Code of Ethics"
A
L (https://www.FIAP.org/wp-content/uploads/2024/11/CO.00.-Codigo-Etico-Noviembre-2024-WEB-
E
1.pdf)
D
N
Ó In the event that I am aware of any conduct that could be suspected of non-compliance and/or
CI
irregularity in the development of FIAP's activities, understood as conduct contrary to the "Code of
A
Z Ethics", I will report through FIAP's ethical channel (https://www.FIAP.org/canal-etico/). In addition, I
LI
will inform about any possible conflict of interest, which affects me personally or that may affect third
A
N parties professionally linked to FIAP, as soon as I become aware of them, by sending an email to the
O
FIAP Ethics Committee (conflicto.intereses@FIAP.es).
CI
A
N Any failure to comply with the provisions of this clause, due to non-disclosure of a conflict of interest –
R
E in breach of the duty to inform – due to false disclosures, or any transgression of the provisions of this
T clause may lead to the demand for responsibilities and, where appropriate, to the adoption of the
N
I corresponding disciplinary measures. The sanctions, where appropriate, may vary from early
A
L termination of the contract to exclusion from participation in public procurement procedures for a period
A of 10 years
R
A
P 3. Legality: It is subject to the Specifications of this tender and the rest of the contractual documents,
N
Ó without any exception or reservation.
CI
A 4. Jurisdiction: It is subject to the laws, jurisdiction and Spanish courts and tribunals of any order.
D
N
U 5. Jurisdiction: In the event of a dispute in relation to this contract, it is submitted to the courts and
F
tribunals of the judicial district of the seat of the contracting authority, waiving the foreign
jurisdictional jurisdiction that may correspond.
6. Beneficial Ownership of the Company (legal entities only):
The bidder declares that the beneficial owner of the company4 is the following (repeat as many
times as there are beneficial owners):
First Name
Last Name
National Identity
Document (DNI) or
equivalent
Página 15 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
The bidder undertakes to provide, if requested, the Certificate of Beneficial Ownership of the
S
A Company5 or an equivalent document that proves the previous point, if, due to nationality or
C similar circumstances, this document does not exist in the country where the company's
LI
registered office is located.
B
Ú
P
The bidder accepts the omission or falsification of this information, as well as its failure to
S
E update it during the contract execution phase, as grounds for exclusion from the procedure
N
O and as grounds for unilateral termination of the contract.
CI
A 7. Anti-corruption: The bidder, its representatives or related persons
R
T They have not and will not offer money, commission, or gift in order to:
S
NI o That personnel of the Entity with competence related to a tender or contract do or fail
MI to do something related to their functions.
D o To use the influence of their position before another employee of the Entity with the
A
competence described, so that they do or refrain from doing something related to their
S
A functions.
L
If they infringe the previous point, they empower this Entity to terminate all contracts signed
E
D with the bidder and the companies in its group.
N They undertake not to agree on prices with other bidders.
Ó
CI
A 8. Disability: Check an option. If an option is not selected, it is understood that it does not apply.
Z The tenderer does not employ 50 or more workers and, consequently, is not obliged to
LI ☐
A have 2% of workers with disabilities or to adopt alternative measures.
N
The tenderer employs 50 or more workers and, consequently, is obliged and complies with
O ☐
CI the obligation to have 2% of workers with disabilities or to adopt alternative measures.
A
N
R 9. Equality: Check an option. If an option is not selected, it is understood that it does not apply.
E
The bidder is not obliged to have an equality plan because it is not in any of the cases
T ☐
N provided for in the new DT 12 of LO 3/2007 and RD-Law 6/2019.
A
I
The tenderer is obliged to have an equality plan and complies with this obligation, as it does
L
☐ not fall under any of the cases provided for in the new DT 12ª of LO 3/2007 and RD-law
A
R 6/2019.
A
P
N 10. Confidentiality: Check an option. If an option is not selected, it is understood that it does not
Ó
apply.
CI
A ☐ The tender submitted does not contain confidential data.
D
The tender submitted contains this confidential data.
N
U Document Pages Justification
F ☐
11. Business groups: Check an option. If an option is not selected, it is understood that it does not
apply.
☐ The bidder does not belong to any group of companies.
The bidder belongs to the following group of companies:
☐ It does not apply for this tender with any company in the group
☐ The following companies are submitted to this tender together with the
☐ following group companies:
5 Official document that identifies individuals who, directly or indirectly, own more than 25% of a
company's shares.
Página 16 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
If an option is not selected, it is understood that it does not apply.
S
A
C
LI
12. Turnover: The annual turnover referred to any of the last three years is:
B
Ú Year Annual turnover
P
€
S
E
N
O Date, signature and ID of the declarant
CI
A
R
T
S
NI
MI
D
A
S
A
L
E
D
N
Ó
CI
A
Z
LI
A
N
O
CI
A
N
R
E
T
N
I
A
L
A
R
A
P
N
Ó
CI
A
D
N
U
F
Página 17 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
ANNEX II: OFFER OF OBJECTIVE CRITERIA
S
Name
A
C Surnames
LI
B DNI or equivalent
Ú
In his own name ☐
P Representation
S On behalf of the following Entity ☐
E
N Company name
O
NIF
CI
A
Registered office
R Telephone
T
S Email
NI
MI
DECLARES:
D
A
S Being aware of the conditions and requirements for the award of the Acquisition and Installation
A
L of software licenses for cybersecurity tools intended to assess the security status of information
E and communication systems of Ukrainian government agencies, through vulnerability analysis
D
N
and penetration testing, undertakes to perform the service in strict accordance with the
Ó aforementioned requirements and conditions, for the following prices and award criteria:
CI
A
Z Offered price (excluding taxes) €
LI
Offered price (with taxes) €
A
N
O
CI
A
N Maximum unit price Unit price offered (excluding
R Denomination
E (excluding applicable taxes) applicable taxes)
T
N
I
A Acunetix On Premise Premium 129.720,00 €
L
A Enterprise
R Burp Suite Professional 30.360,00 €
A
P Nessus Vulnerability Scanner 16.560,00 €
N Nexpose Vulnerability Scanner 46.920,00 €
Ó
CI
A
D
N CO2: Effective deployment time
U
☐ ≤ 2 weeks
F
☐ > 2 and ≤ 4 weeks
☐ > 4 and ≤ 6 weeks
☐ > 6 weeks
For the preparation of this offer, the obligations derived from the current provisions on
employment protection, gender equality, working conditions, prevention of occupational risks
and socio-occupational insertion of people with disabilities have been taken into account, and
the obligation to hire a specific number or percentage of people with disabilities Amounts
including taxes must include the taxes applicable in the country where the contract is to be
performed and the origin of the product/service.
The bid must be in euros, with up to two decimal places.
If the currency of the bid is not specified or a currency other than euros is specified, the bid
shall be deemed to be in euros.
Página 18 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
If more than 2 decimal places are specified, the following decimal places will not be taken into
account.
S
A The bid must be completed in the empty cells. Any changes or modifications to the rest of the
C content will be considered null and void.
LI
B Special attention should be paid to rounding, as under no circumstances may a price higher
Ú than the maximum established be submitted, as this will be grounds for exclusion.
P
S
E Date, signature and ID of the bidder (and company stamp, if applicable)
N
O
CI
A
R
T
S
NI
MI
D
A
S
A
L
E
D
N
Ó
CI
A
Z
LI
A
N
O
CI
A
N
R
E
T
N
I
A
L
A
R
A
P
N
Ó
CI
A
D
N
U
F
Página 19 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
ANNEX III: GUARANTEE FORM
S
Name
A
C Surnames
LI
B DNI or equivalent
Ú
In his own name ☐
P
S On behalf of the following Entity, with sufficient powers to bind it in this
Representation
E
N act, as it appears from the number of powers that are outlined at the ☐
O bottom of this document.
CI
Company name
A
R NIF
T
S Registered office
NI
MI
ENDORSE
D
A
S A…………………………………………………… with NIF…………………………… by virtue of the
A provisions of Article 108 of Law 9/2017, of 8 November, on Public Sector Contracts, with the
L
E requirements established in Articles 55 and following of Royal Decree 1098/2001, of 12 October, to
D respond as a definitive guarantee of compliance with the guaranteed, for the amount of [●] EUROS
N
(…………………………..€).
Ó
CI
A The guarantor entity declares under its responsibility that it complies with the requirements set out in
Z
LI article 56.2 of the General Regulations of the Law on Public Administration Contracts.
A
N
O This endorsement is granted:
CI jointly and severally with respect to the principal obligor
A
N with express waiver of the benefit of excusion, order and division
R with a commitment to pay at the first request of the Entity
E
T and subject to the terms provided for in the legislation on contracts of the Public
N
I Administrations, in its implementing regulations and in the regulations governing the General
A
Deposit Fund.
L
A
R
This guarantee will be in force until the guarantor, or whoever is legally authorised to do so on their
A
P behalf, authorises its cancellation or return in accordance with the provisions of the Law on Public
N Administration Contracts and complementary legislation
Ó
CI
A
D
N
U
F
Página 20 de 21
V5_2026-02-10
File: DEMA-2026-027
Purpose: Acquisition and Installation of software licenses for
cybersecurity tools intended to assess the security status of information
and communication systems of Ukrainian government agencies, through
vulnerability analysis and penetration testing.
Project number : Internal code FIAP 253500 Cybersecurity Ukraine
ANNEX IV: MODEL SURETY INSURANCE CERTIFICATE
S
Certificate number: ……………………………
A
C
LI
………………………………………………… , with NIF ................................, in the name and
B
Ú representation of....................................... , with NIF .............................................(hereinafter,
P
"INSURER") and domicile for the purposes of notifications and requirements
S
E in.............................................. , with sufficient powers to bind you in this act, as it results from the
N
sufficient powers of attorney that are outlined at the bottom of this document
O
CI
A
R
T ENSURES
S
NI
MI
D A.................................................................. with NIF........................................... (hereinafter,
A "INSURED" or "POLICYHOLDER"), as policyholder, before........................................ , with
S NIF.............................................. (hereinafter, "BENEFICIARY"), up to the amount
A
L of............................................. EUROS (..................................€) under the terms and conditions
E
established in Law 9/2017, of 8 November, on Public Sector Contracts, implementing regulations and
D
N specifications of particular administrative clauses governing the procedure of Acquisition and
Ó Installation of software licenses for cybersecurity tools aimed at evaluating the security status of
CI
information and communication systems of Ukrainian government agencies, through vulnerability
A
Z analysis and penetration testing of as a definitive guarantee to respond to obligations, penalties and
LI
other expenses that may arise in accordance with the aforementioned rules and other administrative
A
N conditions vis-à-vis the insured.
O
CI
The insured declares, under his or her responsibility, that he or she complies with the requirements
A
N set out in article 57.1 of the General Regulations of the Law on Public Administration Contracts.
R
E
T Failure to pay the premium, whether single, first or following, will not entitle the INSURER to terminate
N
I the contract, nor will it be extinguished, nor will the INSURER's coverage suspended, nor will the
A
L INSURER be released from its obligation, in the event that the BENEFICIARY must make the
A guarantee effective.
R
A
P The INSURER may not oppose to the BENEFICIARY the exceptions that may correspond to it against
N
Ó the POLICYHOLDER.
CI
A The INSURER undertakes to indemnify the BENEFICIARY at the first request of the latter, under the
D
N terms established in the Law on Public Administration Contracts and implementing regulations.
U
F
This surety insurance will be in force until the BENEFICIARY, or whoever is legally authorized to do
so on his behalf, authorizes its cancellation or return, in accordance with the provisions of the Law on
Public Administration Contracts and complementary legislation.
Página 21 de 21
V5_2026-02-10
La vista PDF está disponible solo para usuarios registrados.