Qualification System for the Artificial Intelligence (AI) Services

An Post, a government authority located in Ireland, is establishing a qualification system for artificial intelligence services. The agency requires a system that incorporates robust security controls to protect the confidentiality, integrity, and availability of its information. These controls must include encryption for all sensitive data at rest and in transit using industry-standard protocols, unique user access management with role-based access, and bi-annual access reviews. The requested scope of work covers several specific technical security measures to safeguard the agency's infrastructure. Bidders must implement multi-factor authentication for remote and privileged access, firewalls with documented rules, network segmentation, and anti-malware solutions with automatic updates. The system also requires baseline hardening configurations, vulnerability and patch management, regular penetration and application security testing, and data loss prevention controls to monitor and prevent unauthorized transfers. Eligibility is strictly limited to onshore organizations located in Ireland. The agency expects the performance of the work to take place offsite. Bidders can submit their responses digitally via email or through an online portal. The agency is currently looking for proposals to determine the budget for this system. Bidders must submit all questions regarding this opportunity no later than May 29, 2026.