中国电建集团中国电建电建海投公司维特罗300MW风电项目项目塞尔维亚维特罗300MW风电项目网络安全顾问服务采购项目公开询比采购公告

Procurement Reference No.: PCDJHT00000240009-2026-S0007VETROZELENA D.O.O.Cybersecurity Advisory Servicesprocurement projectRequest for Quotation(RFQ) DocumentsPurchasing Agent：VETROZELENA D.O.O.August 2026Serbia·（Belgrade）
Public Request for QuotationProcurement Notice1. Procurement ProjectVETROZELENA D.O.O. intends to procure Cybersecurity Advisory Services for theVetrozelena 300MW Wind Farm Project in Serbia through a Public RFQ process. Theconsultancy services are planned to be funded through the Purchaser’s own funds.2. Project Overview and scope of procurement(1) Project Name: Vetrozelena 300MW Wind Farm Project, Serbia(2) Project Overview: The Project has a total installed capacity of 300 MW and isplanned to comprise 48 wind turbines, each with a capacity of 6.25 MW. The Project islocated in central Serbia, approximately 40 km from Belgrade, the capital city, and coversan area of approximately 4,500 hectares. The Project is currently progressing through thefinancing stage. Cybersecurity due diligence has been conducted on behalf of the lendersand recommendations have been issued regarding cybersecurity arrangements.(3) Scope of Procurement: The scope of work covers cybersecurity advisory services.Based on the findings and recommendations of the lenders’ cybersecurity due diligence,the consultant shall assist the Project in establishing a cybersecurity managementframework aligned with the requirements of international financial institutions. Theservices shall include project mobilisation, cybersecurity environment review, critical assetidentification, network architecture assessment, data flow analysis, cybersecurity riskassessment, development of security control measures, cybersecurity governancearrangements and establishment of an Information Security Management System (ISMS)framework.The consultant shall support the preparation of an asset inventory, network topologydiagrams, data flow diagrams, asset criticality assessments, cybersecurity risk assessmentreports, cybersecurity governance structures and cybersecurity management planframeworks, and provide technical support required during the financing process.(4) Service Duration: The expected duration of the consultancy services is sixteen (16)weeks. The commencement date shall be determined upon contract execution. Theconsultant shall submit all interim and final deliverables in accordance with the agreed
project schedule.(5) Quality Requirements: The Consultant shall assist the Project Company inestablishing and implementing the cybersecurity management framework, includingorganizing cybersecurity coordination meetings with the Project Company, contractors andother relevant stakeholders, providing guidance on the preparation of the requiredcybersecurity documentation, and preparing the reports and records required by theEmployer and the applicable laws and regulations of the Republic of Serbia.All consultancy deliverables shall support the Project financing process andeffective cybersecurity governance throughout the construction and operation phases of theProject. To this end, all deliverables shall be consistent with internationally recognisedcybersecurity practices, comply with the applicable laws and regulations of the Republicof Serbia, satisfy the cybersecurity requirements of the Lenders, and address therecommendations arising from the cybersecurity due diligence.3. Supplier Qualification RequirementsThe Supplier is required to satisfy the following qualification requirements:1. Legal Requirements The supplier shall be a legally established entity with thecapability and resources required to perform cybersecurity advisory services.2. Professional Requirements: The supplier shall possess relevant experience incybersecurity consulting for energy, power, industrial control system or large-scaleinfrastructure projects and demonstrate competence in IT/OT cybersecurity riskassessment and governance framework development.3. Performance Requirements: The Supplier shall supply at least three (3) overseascybersecurity advisory projects of a similar nature. Suppliers with experience in EasternEurope or IEC 62443-related projects will be given preference.4. Financial Requirements: The Supplier shall have a sound commercial reputationand financial standing and shall provide supporting documentation, such as auditedfinancial statements or audit reports for the preceding three years.5. Standards: The Supplier shall demonstrate experience in applying internationallyrecognized cybersecurity standards and frameworks, including ISO/IEC 27001, IEC 62443and the NIST SP 800 series, in cybersecurity assessments, compliance reviews, governanceframework development and/or remediation programs. The Supplier shall also operate a
company-wide HSEQ (Health, Safety, Environment & Quality) management systemintegrating quality, health and safety, and environmental ma nagement into a single system.Such HSEQ system shall be routinely audited by independent auditors and fully certifiedto ISO 14001, ISO 9001 and ISO 45001. Each deliverable shall be prepared in accordancewith the Supplier ’ s HSEQ processes, including review by the Project Manager,verification by an independent senior technical reviewer and approval for issue by theProject Director.4. Obtaining Procurement DocumentsAny supplier interested in participating in this public RFQ process shall obtain theprocurement documents through the PowerChina Procurement and Tendering DigitalPlatform（https://bid.powerchina.cn/bidweb/#/login） before the deadline specified in theprocurement notice. The procurement documents shall be available free of charge.Suppliers shall complete registration and authentication procedures on the platform inaccordance with the applicable requirements and shall bear all costs associated withparticipation in this procurement process. The Purchaser shall not be liable for any lossarising from a supplier’s failure to obtain the procurement documents or complete therequired registration procedures.Where a supplier is unable to access the procurement platform due to networkrestrictions, system compatibility issues or other objective reasons, the supplier mayrequest the procurement documents via email before the document acquisition deadline.Upon confirmation by the Purchaser, the procurement documents and any supplementarydocuments may be provided electronically via email.The designated contact email address is:liangzhaopeng@powerchina.cnSuppliers shall indicate the supplier's name, contact person, telephone number andproject name in the email request. Procurement documents transmitted by the Purchaservia the designated email address shall have the same validity as those issued through theprocurement platform.5. Submission of Proposal1. The deadline for submission of Proposals (the “Submission Deadline”) is 18:30Beijing Time (12:30 Central European Summer Time, CEST) on 18 August 2026.

Suppliers shall submit their electronic Proposals through the PowerChina Procurement andTendering Digital Platform (the “Platform”) before the Submission Deadline.(1) This procurement process will be conducted online through the PowerChinaProcurement and Tendering Digital Platform. The preparation, encryption and submissionof electronic Proposals shall be completed by Suppliers through the Platform. Suppliersshall obtain the required digital certificate and familiarize themselves with the Platformprocedures in advance. Detailed instructions are available on the Platform homepage. Anyfailure to successfully submit a Proposal due to reasons attributable to the Supplier shallbe borne solely by the Supplier.(2) Proposal opening will be conducted automatically by the Platform after theSubmission Deadline through electronic decryption of the submitted Proposals. Suppliersshall monitor the Platform for proposal opening results and related notifications.2. In the event of any change to the Submission Deadline, submission method orsubmission location, the Purchaser shall promptly notify all Suppliers who have obtainedthe Procurement Documents in writing.3. If a Supplier is unable to submit its Proposal through the Platform due to networkrestrictions, system failures, regional access limitations or other objective circumstances,the Supplier shall promptly notify the Purchaser in writing and provide an explanation ofthe relevant circumstances. Subject to the Purchaser’s confirmation, the Supplier maysubmit a duly signed and stamped electronic Proposal (PDF format) to the designated emailaddress below. Proposals submitted by email must be received by the Purchaser before theSubmission Deadline. Late submissions will not be accepted.Designated Proposal Submission Email Address:liangzhaopeng@powerchina.cn4. For Proposals submitted by email with the Purchaser’s prior confirmation, the timeof receipt recorded by the designated email system shall be deemed the official submissiontime. The Purchaser shall issue an acknowledgement of receipt by email. Proposalssubmitted through the designated email channel in accordance with this Clause shall betreated as valid submissions for evaluation purposes and shall have the same evaluationstatus as Proposals submitted through the Platform.6. Proposal Opening and Evaluation

The proposal opening and evaluation process shall be conducted within approximatelythree (3) Business Days following the Proposal Submission Deadline, i.e., from 19 August2026 to 21 August 2026. The Purchaser shall organize the opening of Proposals and appointan evaluation committee to review and evaluate all submitted Proposals.Where clarification, explanation or supplementary information is required during theevaluation process, the relevant Supplier shall provide a response within the timeframespecified by the Purchaser. Failure to respond as required may result in the Proposal beingevaluated based on the information originally submitted or otherwise handled inaccordance with the Procurement Documents.7. Evaluation Principles1. The evaluation shall be conducted in accordance with the principles of fairness,impartiality, equal competition and selection based on merit.2. Due consideration shall be given to the Suppliers’ experience in providingcybersecurity advisory services for energy, power, industrial control system (ICS) andinfrastructure projects, as well as their understanding of cybersecurity requirementsapplicable to project financing.3. Particular attention shall be paid to the Suppliers’ professional capabilities,proposed project team, implementation methodology, international project experience,relevant project references and the reasonableness of the proposed pricing.4. The Purchaser does not undertake to award the contract to the Supplier offering thelowest price.5. The Purchaser reserves the right to terminate the procurement process if none ofthe submitted Proposals adequately meets the requirements of the Project.8. Evaluation MethodologyDetailed evaluation criteria and scoring methodology are set out in Appendix 1 –Evaluation Methodology.9. Proposal RequirementsDetailed submission requirements are provided in Appendix 2 – Proposal Forms.10. Contact InformationPurchasing Agent： VETROZELENA DOO BEOGRAD-NOVI BEOGRADAddress： ACB 1700 - 8th floor - Omladinskih brigada 90v
Postcode： 11070Contacts： Liang ZhaopengTelephone number： 010-88986220;381 62 8634 351Email： liangzhaopeng@powerchina.cn11. Discipline Inspection and SupervisionAny Supplier or other interested party who considers that there has been any violationof applicable procurement rules or disciplinary requirements in connection with thisprocurement process may lodge a written complaint with the Discipline Inspection Officeof PowerChina Resources Ltd. at +86 10 8898 6399.03 August 2026

报名入口：https://bid.powerchina.cn/notice/detail?id=2409497165&type=%E6%8B%9B%E9%87%87%E5%85%AC%E5%91%8A&typeName=%E6%8B%9B%E9%87%87%E5%85%AC%E5%91%8A&index=0-3&path=/consult/notice&companyType=3&bidType=0