MSHB Solid partners, flexible solutions NGAN HANG TMCP SAI GON-HA N()l CONG HOA XA HOI CHU NGHIA VIET NAM Doc lap - T it do - H anh pfanc Ha Noi, Ngay

Transcription

1 MSHB Solid partners, flexible solutions NGAN HANG TMCP SAI GON-HA N()l CONG HOA XA HOI CHU NGHIA VIET NAM Doc lap - T it do - H anh pfanc Ha Noi, Ngay 0 ^ thong 0 3 nam 2022 THlTMCfl THAU Ngan hang TMCP Sai Gon - Ha Noi (SHB) to chuc dau thau goi thau Nang cap true tich hop ESB. Tran trong kinh moi Quy Cong ty tham du chao thau cho goi thau neu tren. Quy Cong ty co the tim hieu them cac thong tin can thiet trong Ho so moi thau kem theo. Ho so dir thau dirge dirge dong thung kin co niem phong va giri den dia chi Trung tarn Mua sam Ngan hang TMCP Sai Gon - Ha Noi, tang 3, Toa nha 81 Tran Hung Bao, Phircmg Tran Himg Bao, Quan Hoan Kiem, Ha Noi. sam Thoi gian nop ho so du thau: Truoc 15h ngay J Moi chi tiet xin lien he: Ong Nguyen Ngoc Cau - Phong Bau thau-trung tam Mua 1. Bien thoai: , may le Bien thoai di dong: T ran trong kinh mol./. NGAN HANG TMCP SAI GON HA N 0 I

2

3 CAC Tir VIET TAT BDL HSMT HSDT VND SHB Hang hoa Bang du lieu ddu M u Ho so mdi thau H6 so du thdu Dong Viet Nam Ngan hang TMCP Sai Gon - Ha Noi Ha tang, dich vu, phan mem phuc vu triln khai theo yeu csu cua SHB 3

4 p h An i YEU CAu VE THU TVC DAU THAu a. t6 ng quat Dieu 1. Thong tin dau thau CHlTONG I CHI DAN D6l Vdi NHA ThAu 1. SHB mdi nha th4u tham gia dau thau g6i thau nang cap true tich hgrp du ligu ESB (sau day goi tdt la "Hang h6a"), ten g6i thiu dugre mo td trong BDL. 2. Thong tin chu diu tur: Thong tin ve chu dau tu, dia chi tru sd, ma so thul, noi nhan h6 so dir thau dugre m61d trong BDL. Dieu 2. Phmmg thirc dau thau SHB t6 chuc d u thau theo phuong thuc mot giai doan mot tui h6 so, cu the: Nha thau nop ho so ky thuat, tai chinh vao mot tui h6 so du thdu. Cac tai lieu can thiet trong ho so du thau theo BDL Dieu 3. Dieu kien tham gia dau thau 1. Co tu each hgrp le nhu quy dinh trong BDL. 2. Chi duoc tham gia trong mot HSDT vdi tu each la nha thau doc lap hoac lien danh, trudng hgrp lien danh phai c6 van ban thoa thuan giua cac thanh vien trong do quy dinh ro thanh vien dung dau lien danh, trach nhiem chung va trach nhiem rieng cua trnig thanh vien d6i vdi cong viec thuoc goi thau. 3. Doi vdi nha thau lien danh thi nang luc, kinh nghiem duoc xac dinh bang tong nang lire, kinh nghiem cua ede thanh vien lien danh nhung phai bao dam tung thanh vien lien danh dap ung nang lire, kinh nghiem doi vdi phan viec ma thanh vien do dam nhan trong lien danh; nlu bat ky thanh vien nao trong lien danh khong dap ung vh nang lire, kinh nghiem doi vdi phki viec dam nhan thi nha thau lien danh duoc danh gia Id khong dap ung yeu cdu. 4. Bdo ddm canh tranh trong dlu thdu nhu quy djnh trong BDL. Dieu 4. Tinh hgp le cua hdng hoa Tat cd cac hdng hoa dugre coi Id hgrp le neu cd xudt xu ro rdng, hgrp phdp, duoc quy dinh trong BDL. 4

5 Dieu 5. Chi phi du thau Nha tmu phai chiu moi chi phi lien quan din qua trinh tham gia dlu thdu, kl tu khi nhan HSMT cho din khi thong bao kit qua ddu tmu, rieng d6i vdi nha tmu trung thau tinh den khi ky hop dong. Dilu 6. HSMT va giai thich lam r6 HSMT 1. HSMT bao gom cac noi dung dirge neu tai cac phln, chuong, dilu kho&i va BDL cua HSMT nay. Viec kilm tra, nghien cuu cac noi dung cua HSMT de chuln bj HSDT thuqc trach nhi?m cua nha thlu. 2. Trucmg hop nha tmu mu6n duoc giai thich lam r5 HSMT thi phai gui vsn ban de nghi din SHB theo dia chi va thoi gian ghi trong BDL (ho5c gui qua ). Sau khi nhan duoc van ban yeu cau lam ro HSMT theo thoi gian quy dinh trong BDL, SHB ss co van ban (hoac ) tra loi va gui cho tat ca cac nha thau nhan HSMT. 3. Trong trucmg hop cln thi It, SHB tl chuc hoi nghi tiln dlu thlu de trao d6i ve nhung noi dung trong HSMT ma cac nha tmu thay chua r5. Noi dung trao doi s6 duoc SHB ghi lai thanh bien ban va lap thanh vdn ban lam r5 HSMT gui cho tat ca nha thau nhan HSMT. Dieu 7. Sira doi HSMT Truong hop cln thilt phai dilu chinh pham vi cung cap hodc dilu chinh yeu cau nao do, SHB se tiln hanh sua d6i HSMT (bao g6m ca viec gia han thoi han nop HSDT nlu can thilt) bang each gui van ban sua doi HSMT toi tat ca cac nha thau nhan HSMT duoc quy dinh trong BDL. Tai lieu nay la mot pmn cua HSMT. B. CHUAN BI HO SO DU* THAU Dieu 8. Ngon ngu* sir dung Ngon ngu duoc su dung trong cac tai lieu cua HSDT la tilng Viet. Cac tai li?u su dung ngon ngu khac phai co ban dich sang tilng Viet va ban tilng Viet la co so phap ly trong HSDT (tai lieu su dung cac ngon ngu khac chi co tinh chat tham khao). Doi vdi Catalog va cac tai lieu ky thuat khac co the su dung bang tilng Anh. Dieu 9. Noi dung HSDT HSDT do nha thau chuan bi phai bao gom 01 ban goc + 02 ban sao + 01 USB duoc dong niem phong theo quy dinh tai Dilu 18 cua HSMT, bao g6m cac noi dung sau: I. Don d\r tmu theo quy dinh tai Dilu 11 Chuong nay. j

6 II. Gid du thlu va bieu gid, ddng tiln dir thlu theo quy dinh tai Bieu 12 va 13 Chucmg nay. III. Bang t6ng hpp thdng so ky thuat dap ung yeu cdu tai M\ic 3-II, Chuomg VI, Ph4n IIHSMT. IV. Tai lieu chung minh tu each hop le, nang luc va kinh nghiem cua nha thlu theo quy dinh tai Bieu 14 Chucmg nay. V. Tai lieu chung minh tinh hop le va su dap ung cua hang hoa theo quy dinh tai Bieu 4 Chuomg nay. VI. Bao dam du thlu theo quy dinh tai Bilu 15 Chuomg nay. Bieu 10. Thay doi tu* each tham gia dau thau Truong hop nha thau edn thay doi tu each (ten) tham gia dau thau so voi khi mua HSMT thi phai thong bao bang van ban tdi SHB. SHB chi xem xet khi nhan dupe van ban thong bao nay truoc thdi dilm dong thlu. Bieu 11. Bom du thau Bon du thau do nha thau chuan bi va duoc dien day du co chu ky cua ngudi dai dien hop phap cua nha thdu (la ngudi dai dien theo phap luat cua nha tmu hoac ngudi dupe uy quyen kem theo giay uy quyen hgp le). Truong hop uy quyen, nha thau gui kem theo giay uy quyen de chumg minh tu each hgp le cua ngudi dupe uy quyen. Bieu 12. Gia du thau va bieu gia I. Gia du thau Ik gia do nha thau neu trong don du thau thuoc HSBT sau khi tru pmn giam gia (neu co). Gia chao phai bao gom toan bo cac chi phi edn thi It de thuc hien goi thau (van chuyen, giao hang tai dia chi cu the, lap dat, cai dat, dao tao, hudng din sir dung...) va cac loai thul theo quy dinh cua phap luat. II. Trudng hop nha thlu co thu giam gia thi co thi nop cung voi HSBT hoac npp rieng song phai dam bdo npp truoc thdi diem dong thlu. Trudng hpp thu giam gia nop cung vdi HSBT thi nha thlu phai thong bao cho SHB trude hoac tai thdi dilm dong thau. Trong thu giam gid cln neu ro npi dung va each thuc giam gia vao cac hang muc cu thi trong bi u gia. Trudng hpp khong neu r5 edeh thuc giam gia thi dupe hieu la giam deu theo ty le cho timg hang muc trong bieu gia. III. Nha thlu phai dien day du cac thong tin phu hpp vao bilu gia nhu don gia, gia tri cho tung hang muc hang hoa va ting gid du thlu. Trong mdi bilu gia, nha thlu phai ghi r5 cac yeu t6 cdu thanh gid chao, bieu gid chi tilt theo quy dinh tai Muc I, Phdn III, Chuong V HSMT. 6

7 BDL. Dieu 13. Dong tien dir thau Gia du thau se duoc chao bdng dong tien duac quy dinh trong BDL. Dieu 14. Tai ligu chirng minh ndng lire va kinh nghiem cua nha thau Tai lieu chung minh ndng luc va kinh nghiem cua nha thau nhir quy djnh trong Dieu 15. Bao dam dir thau va bao dam thyc hi$n hop dong 1. Khi tham gia diu thau, nha thau phai thuc hien bign phap bao dam d\r thau trude thdi diem dong thau theo quy dinh trong BDL. 2. Bao dam du thdu duoc coi la khong hop le khi thuoc mot trong cac trucmg hop sau day: co gia tri thap hon, khong dung dong tien quy djnh, thdi gian hieu luc ngdn hon, khong nop theo dia chi va thoi gian quy djnh trong HSMT, khong dung ten nha thau, khong phai la ban goc va khong co chtt ky hgp 1$ (d6i vdi thu bao dam cua ngdn hang). 3. Nha thau khong trung thdu ss duoc hoan tra bao dam du thdu trong thdi gian quy dinh trong BDL. Doi vdi nha thdu trung thau, bao dam du thdu duoc hoan tra sau khi nha thdu thuc hien bien phap bao dam thuc hien hop dong. 4. Bao dam d\r thdu se khong duqc hoan tra va xu ly theo quy djnh cua phap luat trong cac trudng hop sau day: A. Nha thdu rut HSDT sau khi dong thdu ma HSDT vdn con hi?u luc. B. Trong thdi han 3 ngay kl tu khi nhan duoc thong bao trung thau cua SHB ma khong tidn hanh hoac tu chdi tidn hanh thuong thao, hoan thien hop dong hodc da thuong thao, hoan thien xong nhung tu chdi ky hop dong. 5. Nha thau trung thau phai thuc hien bi?n phap bao dam thuc hien hop ddng quy dinh trong BDL de dam bao nghia vu va trach nhiem cua minh trong viec thuc hi?n hop ddng. Nha thau khong duoc nhan lai bao dam thuc hien hop ddng trong trudng hop tu chdi thuc hien hop dong sau khi hgp ddng co hieu luc. Dieu 16. Thdi gian co higu lire cua HSDT 1. Thdi gian co hieu luc cua HSDT phai dam bao nhu quy djnh trong BDL va duoc tinh tu thdi diem ddng thau; HSDT co thdi gian co hieu luc ng&n lum bi coi la khong hop le va bj loai. 2. SHB co the gui v5n ban yeu cau nha thau gia han thdi gian co hieu luc cua HSDT nhung khong qua 30ngay, kern theo viec yeu cdu nha thdu gia han tuong ung thdi 7

8 gian co hieu lye cua bao dam du thiu. N u nha thlu khong chip nhan viec gia han thi HSDT cua nha thlu nay ss khong dugc xem xet tiep va trong trubng hop nay nha thau dugc nhan lai bao dam du thau. Dieu 17. Quy c ch cua HSDT va chu ky trong HSDT 1. Nha thlu phai chuln bi 01 ban goc va mot s6 ban sao HSDT dugc quy dinh trong BDL va ghi r8 "ban gbc" va "ban sao" tuong ung. Nha thau phai chiu trach nhiem vk tinh chinh xac va phu hgp giua ban sao va ban g6c. Trong qua trinh danh gia, neu SHB phat hien ban sao co 16i ky thuat nhu nh6e, khong ro chu, thieu trang... thi \ky noi dung cua ban goc lam co sb. Truong hgp ban sao co noi dung sai khac so vbi ban goc thi tuy theo mure do sai khac, SHB se quyet dinh xu ly cho phu hgp, ching han sai khac d6 la khong co ban, kh6ng lam thay d6i ban chat cua HSDT thi dugc coi la 16i chap nhan dugc; nhung neu sai khac do lam thay doi ngi dung co ban cua HSDT so voi ban goc thi bi coi la gian lan, HSDT se bi loai. 2. HSDT phai dugc danh may, in bsng muc khong tay dugc, danh s6 trang theo thu ty lien tyc. Don du thau, thu giam gia, bieu gid chao va cac van ban bo sung lam ro HSDT cua nha thau phai dugc dai dien hgp phap cua nha thau ky. 3. Nhung chu viet chen gicra, tay xoa hoac vilt de len ban danh may chi co gia tri khi co chu ky b ben canh cua ngubi ky don du thdu va dugc dong dau (n u co). C. NOP HO SO DV* THAU Dieu 18. Niem phong va each ghi tren tui dung HSDT > HSDT phai dugc dung trong tui cb niem phong ben ngoai (each danh ddu niem phong do nha thau tu quy dinh). Cach trinh bay cac thong tin tren tui dung HSDT dugc quy dinh trong BDL. > Trong trubng hgp HSDT gom nhilu tai lieu, nha thdu can thyc hien viecdong goi toan bq tai lieu sao cho viec tiep nhan va bao quan HSDT cua SHB dugc thuan tien, dam bao sy toan v?n cua HSDT, tranh thdt lac, mdt mat. Nha thdu nen dong goi tdt ca cac tai lieu cua HSDT vao cung mot tui. Trubng hgp can dong goi thanh nhieu tui nho de dl van chuyen thi tren moi tui phai ghi ro sb thu tu tung tui tren tbng sb tui d dam bao tinh thong nhat va tung tui cung phai dugc dong goi, niem phong va ghi theo dung quy dinh. > Nha thau phai chiu trach nhiem ve hau qua hoac sir bat lqi neu khong tuan theo quy dinh trong HSMT nhu khong niem phong hoac lam mat niem phong HSDT trong qua trinh chuyen tbi SHB, khong ghi dung cac thong tin tren tui dung HSDT. SHB se khong chiu trach nhiem ve tinh bao mat thong tin cua HSDT neu nha tmu khong thyc hien dung theo chi din. 8

9 Dieu 19. Thdi h?n ngp HSDT 1. HSDT do nha thlu nop true tilp hodc gui din dia chi cua SHB quy djnh va phai dam bao SHB nhan dupe trude thdi diem dong thau quy dinh trong BDL. 2. SHB c6 thl gia han thdi han nop HSDT (thoi dilm dong thlu) trong trudng hop can tang them so luong HSDT hoac khi sura doi HSMT theo Dieu 7 HSMT nay hodc theo yeu cau cua nha thau khi SHB xet thay can thiet. 3. Khi gia han thdi han nop HSDT, SHB thong bao bang van ban cho cac nha thlu da nop HSDT, trong do ghi ro thdi diem dong thau mdi dl nha thau sua lai thdi gian co hieu l\rc cua HSDT va bao dam du thlu nlu thay can thiet. Nha thlu co the nhan lai va chinh sua HSDT da nop. Trudng hop nha thlu chua nhan lai hoac khong nhan lai HSDT thi SHB quan ly HSDT do theo chi dp quan ly ho so mat. Dieu 20. HSDT npp muon Bit ky tai lieu nao thuoc HSDT ke ca thu giam gia (nlu co) ma SHB nhan dugc sau thdi diem dong thau deu dugc coi la khong hpp le va dugc gui tra lai cho nh^ thau theo nguyen trang, tru tai lieu lam ro HSDT theo yeu clu cua SHB. Dieu 21. Su-a 36i hoac rut HSDT Khi muon sura doi hoac rut HSDT da nop, nha thau phai co v2n ban de nghj va SHB chi chip thuan nlu nhan dugc vdn ban d! nghj cua nha thlu trude thdi dilm d6ng thau; v&n ban de nghi rut HSDT phai dugc gui rieng biet vdi HSDT. D. MO THAU VA DANH GIA HO SO DlT THAU Dieu 22. Md thau - Viec md thlu dugc tiln hanh cong khai ngay sau thdi dilm dong thlu theo ngay, gid, dia diem quy dinh trong BDL trude su chung kiln cua nhurng ngudi co mdt va khong phu thuoc vao su co mat hay vlng mat cua cac nha thau dugc mdi. SHB co the mdi dai dien cua cac ca quan co lien quan den tham du le md thau. - SHB tiln hanh md lln lupt HSDT cua tung nha thlu npp HSDT trude thdi diem dong thau. Nha thau phai chiu trach nhiem ve hau qua hoac sy bat lgi neu khong tuan theo quy dinh trong HSMT nhu nha thlu khong niem phong hoac lam m lt niem phong HSDT trong qua trinh chuyln tdi SHB, khong ghi dung cac thong tin tren tui d\mg HSDT theo hudng din. HSDT cua nha thau co van ban xin nit HSDT da nop (nop rieng biet vdi HSDT va SHB nhan dugc trude thdi dilm dong thlu) va HSDT cua nha thlu nop sau thdi dilm dong thlu se khong dugc md va dugc tra lai nguyen trang cho nha thau. - Viec md HSDT cua tung nha thlu dugc thirc hien theo trinh tu nhu sau: 9

10 a) Kiem tra niem phong HSDT. b) Mb HSDT va doc cac thong tin ve: -T en nha thau. - Sb luong ban gbc, ban chup HSDT. - Gia chao thau - Thai gian co hieu lire cua HSDT. - Gia tri, thcri han hieu lgc va bien phap bao dam du thiu. - Thai gian thuc hien hop dong. - Cac thong tin khac co lien quan. - Bien ban mo thau: Cac thong tin neu tai Diem c Khoan 3 phai duqc ghi trong bien ban mo thau. Bien ban mo thiu phai dugc ky xac nhan bbi dai dien cua SHB va cac nha thiu tham dir lb mo thau. Ban chup Bien ban mb thau dugc gui cho cac nha thau tham du thau. Bilu 23. Lam ro HSDT 1. Sau khi mb thiu, nha thau co trach nhiem lam ro hb sa du thau theo yeu ciu cua ben mbi thau. Truong hgp hb so du thau cua nha thau thieu tai li?u chung minh tu each hgp lb, nang lgc va kinh nghiem thi ben mbi thau yeu cau nha thau lam ro, bo sung tai lieu de chung minh tu each hgp le, nang luc va kinh nghiem. Dbi vbi cac noi dung ve ky thuat, tai chinh neu trong hb sa du thau cua nha thau, viec lam rb phai bao dam nguyen tic khong lam thay dbi ngi dung ca ban cua hb sa du thau da ngp, khong thay doi gia du thau. \ r y y y r 2. Truong hgp sau khi dong thau, neu nha thau phat hien hb so du thau thieu cac tai lieu chung minh tu each hgp lb, nang luc va kinh nghiem thi nha thau dugc phep gui tai li?u dbn ben mbi thiu db l^im ro vb tu each hgp le, nang luc va kinh nghiem cua minh. Tit ca cac tai lieu nay (neu co) phai dugc dong tap va thuc hien nhu doi vbi HSDT (ky ten, chung thuc, sb ban gbc, sb ban sao,...). Thai gian cho phep nha thiu tu giu hb so bo sung nay khong qua 07 ngay ke tu thbi diem dong thau. Ben mbi thau se tibp nhan nhung tai lieu lam ro cua nha thau de xem xet, danh gia; cac tai li?u b6 sung, lam ro hop le vb tu each hgp le, nang luc va kinh nghiem dugc coi nhu mgt phan cua hb so du thau. 3. Viec lam ro hb so du thau chi dugc thuc hien giua ben mbi thau va nha thau co hb so du thau can phai lam rb va phai bao dam nguyen tic khong lam thay dbi ban chat w

11 cua nha thdu tham dir thdu. Noi dung lam r5 ho so dq thau phai the hi$n bdng van ban va duoc ben mdi tmu bao quan nhu mot phdn cua hd so dir thdu. Dieu 24. Danh gia so bo HSDT I. Nguyen tac danh gia ho so* du thau: Viec danh gia ho so dir thau can cur vao tieu chuan danh gia ho so du thau va cac yeu cau khac trong ho so mcri thau, can cur vao ho so du thau da nop, cac tai lieu giai thich, lam r5 ho so du thau cua nha tmu dd bao dam lira chon duoc nha tmu co du nfing l\rc va kinh nghiem, co giai phap kha thi de thqc hien goi thau. II. Noi dung danh gia ho so* du thau: 1. Kiem tra tinh hop le cua HSDT, gom: <j r r \ \ a. Kiem tra so luong ban goc, ban chup cua ho so dq thau. b. Kidm tra cac thanh phdn cua h6 so dur thsu, bao g6m: Dorn du thau, thoa thu$n lien danh (neu co), gidy uy quydn ky don du thau (neu co); bao dam dur thau; cac tai li?u chung minh tu each hop le; tai lieu chung minh nang luc va kinh nghiem; de xudt ve ky > f -\ -\ > > thuat, de xuat ve tai chinh va cac thanh phan khac thuoc ho so du thau; c. Kiem tra sir thdng nhdt noi dung giua ban goc va ban chup d6 phqc v\i qua trinh danh gia chi tidt h6 so dq thdu. 2. Danh gia tinh hgp 1$ cua ho so dq thdu: a. Co ban goc ho so du thau; b. Co don dq thau duoc dai dien hop phap cua nha thau ky ten, dong dau theo yeu cdu cua h6 so mdi thau; thdi gian thqc hi?n goi thdu neu trong don dq thdu phai phu hop vbi ds xudt ve m&t ky thuat. Doi vdi nha thau lien danh, don dq thau phai do dai dien hop phap cua timg thanh vien ky ten, dong ddu hodc thanh vien dung dau lien danh thay mdt lien danh ky don dq thdu theo phan cong trach nhiem trong van ban thoa thuan lien danh. c. Hieu lqc cua h6 so dq thau dap ung yeu cau theo quy dinh trong ho so mdi thdu. d. Co bao dam du thau vdi gia trj va thdi han hieu luc dap ung yeu cau cua hd so mdi thau; doi vdi bao dam dq thau theo hinh thuc thu bao lanh ngan hang thi phai duoc dai dien hop phap cua to churc tin dung tai Viet Nam ky ten, dong dau va dam bao thdi gian hieu luc va gia tri bao dam theo yeu cau cua ho so mdi thau. d. Khong co ten trong hai hoac nhieu ho so du thau vdi tu each la nha thau chinh (nha thdu doc lap hoac thanh vien trong lien danh). u

12 e. Co thoa thuan lien danh dugc dai dien hop phap cua timg thanh vien lien danh ky ten, d6ng dau. f. Nha thau khong dang trong then gian bi cam tham gia hoat dong dau thau theo quy dinh cua phap luat ve dau tmu. h. Tinh hop le, su phu hop (dap ung) cua hang hod theo quy dinh tai Dieu 4 HSMT; Chi tiet g6m cac noi dung quy dinh tai Bang tieu chuan danh gia so 1 3. Danh gia nang lire va kinh nghiem cua nha tmu theo tieu chuan danh gia ve nang lire va kinh nghiem quy dinh tai Chuong III Chi tiet gom cac ngi dung quy dinh taibang tieu chuan danh gia so 2 Dilu 25. D&nh gia ve m t ky thuat SHB tien hanh danh gia ve mat ky thuat theo thang diem. Chi tiet thang diem cham danh gia theo Bang tieu chuan danh gia so 3 Dieu 26. Xac djnh gia danh gia SHB xac dinli gia danh gia cua cac HSDT theo trinh tir sau day: xac dinh gia dir thau; sira loi; hieu chinh cac sai lech; chuyen doi gia dir thau sau sira loi va hieu chinh sai lech sang mot dong tien chung (neu co); dua cac chi phi ve mot mat bang de xac djnh gia danh gia. Truong hep co thu giam gia thi SHB se thuc hien sua 16i, hieu chinh sai lech tren co so gia dy thau chua tru di gia tri giam gia. Trong trucmg hop do, viec xac dinh gia trj tuyet doi cua 16i so hpc hoac sai lech dugc tinh tren co so gia tri thdu ghi trong don. Gia danh gia dugc xac dinh tren cung mot mat bang cac y u t6 v'e ky thuat, tai chinh, thuong mai va cac yeu to khac de so sanh, xsp hang HSDT. Cac yeu to de xac djnh gia danh gia dugc neu tai Chuomg III HSMT. Chi tilt g6m cac ngi dung quy dinh tai Bang tien chuan danh gia so 4. Dieu 27. Sira loi Sua 16i la vi?c sua lai nhiing sai sot trong HSDT bao g6m 16i s6 hoc, loi khac va dugc tiln hanh theo nguyen tic sau day: D6i voi 16i so hoc bao gom nhung loi do thuc hien cac phep tinh cong, trir, nhan, chia khong chinh xac: I. Truong hgp kh6ng nhat quan giua dom gia va thanh tiln thi lay don gia lam co so phap ly cho viec sua loi. 12

13 II. Truong hop khong nhat quan giqa bang gia tong hop va bang gia chi tiet thi lay bang gia chi tilt lam co so phap ly cho viec sura loi. B6i vdi cac 16i khac: III. Cot thanh tiln dugc diln vao ma khong co don gia tuong ung thi don gia dugc xac dinh b6 sung bdng each chia thanh tiln cho so luong. IV. Khi co don gia nhung cot thanh tien bo trong thi thanh tien se duoc xac dinh bo sung b5ng each nhan so luong voi don gia. V. N lu mot noi dung nao do co dien don gia va thanh tien nhung bo trong s6 luong thi s6 luong bo tr6ng dugc xac dinh bd sung bang each chia thanh tien cho don gia cua noi dung do. Truong hop so luong duoc xac dinh bo sung neu tren khac voi so luong neu trong HSMT thi duoc coi la sai lech v l pham vi cung cap va duac hieu chinh theo quy dinh t ii diem a khoan 1 Bieu 28 Chuong nay. VI. Ldi nhdm don vi: su dung ddu (diu phiy) thay cho ddu (dlu chdm) va nguqc lai thi duoc sua lai cho phu hop theo each viet cua Viet Nam. Sau khi sua 16i theo nguyen tdc tren, SHB se thong bao bang van ban cho nha thau. Nha thau phai co van ban thong bao cho SHB v! viec chap nhan sua loi neu tren. Neu nha thau khong chap nhan viec sua loi thi HSDT cua nha thau do se bi loai. Truong hop HSDT co 16i s6 hoc vdi tong gia tri tuyet doi Ion hon 10% gia du thau cung s8 bj lo^ii. L6i s6 hoc duac tinh theo t6ng gia tri tuyet d6i, khong phu thuoc vao viec gia d\r thau tang len hay giam di sau khi sua. Dieu 28. Hieu chinh cac sai lech Hi?u chinh cac sai l?ch la vi?c dilu chinh nhung n0i dung thilu hodc thira trong HSDT so vdi yeu cdu cua HSMT cung nhu dilu chinh nhi3ng khac biet giua cac phan cua HSDT; giura con s6 va chu viet; giua noi dung trong don du thdu va cac phan khde cua HSDT. Viec hieu chinh cac sai lech duac thuc hien nhu sau: 1. Truong hop co nhung sai lech vl pham vi cung cap thi phan chao thieu ss dupe cong them vao, phan chao thua se duac tru di theo nguyen tdc neu khong thi tach ra trong gia du thau cua nha thau dang tien hanh sua sai lech thi lay muc gia chao cao nhat dli vdi noi dung nay (nlu chao thilu) va lly muc gia chao thdp nhat (neu chao thua) trong sd cac HSDT khac vugt qua bude danh gia v l mdt ky thuat. Trong trudng hop cac HSDT khac vugt qua bude danh gia ve mdt ky thuat cung khong cd hodc chi co mot nha thau duy nhat vugt qua bude danh gia ve mat ky thuat thi tiln hanh sua sai lech tren ca sd lly muc gia cua nha thdu nay (nlu cd) hodc cua cac HSDT hodc trong du toan, tong dg 13

14 toan hoac trong gia goi thau dugc duyet theo nguyen tic liy muc gia cao nhit (doi voi chao thieu) hoac thap nhat (doi voi chao thua) de ap dung cho cac noi dung neu tren. 2 Truong hgp khong nhat quan giua con s6 va cho viit thi lay chu viet lam co so phap ly cho viec hieu chinh sai lech. 3 Trucmg hgp co su sai khac giua gia ghi trong don du thau (khong ks giam gia) va gia trong bilu gia t6ng hgrp thi dugc coi day la sai lech va vi$c hieu chinh sai lech nay dugc can cu vao gia ghi trong bieu gia tong hgp sau khi dugc hieu chinh va sua 16i theo biiu gia chi tiet. HSDT co sai lech voi tong gia tri tuyet doi Ion horn 10% gia du thau se bi loai. Gia tri cdc sai lech dugc tlnh theo tong gia tri tuy?t doi, khong phu thuoc vao viec gia du thau tang len hay giam di sau khi hieu chinh sai lech. E. TRUNG THAU Dieu 29. Dieu kien dugc xem xet trung thau: 1. C6 HSDT hgp le (Theo bang tieu chuan danh gia s6 1); 2. Co nsng lye va kinh nghi^m dap ung yeu cau cua HSMT (Theo bang tieu chuan danh gia so 2); 3. Co de xudt v6 ky thuat dap ung yeu cdu cua HSMT (Theo bang tieu chuan ddnh gia s6 3); nhdt. 4. Co sai lech khong qua 10% gia du thau (Theo Dieu 28 HSMT); 5. Co gia du thdu sau khi sua loi, hieu chinh sai lech va giam gia (neu co) thdp Dieu 30. Quyen cua ben moi thau dugc chap nhan, loai bo bat ky ho^c tat ca cac HSDT SHB dugc quyen de xuat chap nhan, loai bo HSDT hodc huy ddu thau neu khong co nha thau nao dap ung yeu cau va nhu cdu cua SHB. Dieu 31. Thong bao ket qua ddu thau Ngay sau khi co quyet dinh phe duyet ket qua dau thau, SHB gui van ban thong bao ket qua dau thau cho cac nha thau tham du thau (bao gom ca nha thau trung thau va nha thau khong trung thdu). Trong thong bao k t qua dlu thdu, SHB khong phai giai thich ly do d6i vdi nha thdu khong trung thdu. Dieu 32. Thmmg thao, hoan thien va ky ket hgp dong Thuomg thao, hoan thien va ky k6t hgp d6ng dugc thuc hien nhu sau: 14

15 a) Viec thuang thao, hoan thien hop dong de ky ket hop dong din cu theo cac noi dung sau: - K it qua dlu thlu dugc duy$t. Du thao hop ding da dugc diln dly du thong tin cu the cua goi thlu. Cac yeu cau neu trong HSMT. Cac noi dung neu trong HSDT va giai thich lam r5 HSDT cua nha thau trung thau (nlu co). Cac noi dung din duoc thucmg thao, hoan thi$n hop ding giua SHB va nha thau trung thau. b) Sau khi nhan duoc thong bao trung thau, trong vong 3 ngay ke tur ngay nh^n duoc thong bao trung thiu, nha thlu trung thlu phai gui cho SHB thu chip thuan thuang thao, hoan thi$n hop ding. Qua thai han neu tren, neu SHB khong nhan dugc thu chap thu$n hodc nha thlu tu choi thuang thao, hoan thien hgp ding thi bao dam du thlu cua nha thau nay se bi xu ly theo quy dinh. Ding thai, SHB se bao cao din clp co thlm quyln quylt dinh huy kit qua dlu thau truac do va xem xet, quylt dinh nh^ thlu xlp hang tiep theo trung thau de mai vao thuang thao, hoan thi$n hgp dong. Trong trucmg hgp do, nha thlu ss dugc SHB yeu clu gia han hieu lure HSDT va bao dam du thau nlu cln thilt. c) Noi dung thuang thao, hoan thien hgp ding bao glm cac vln de con tin tai, chua hoan chinh, dac biet la viec ap gia dli vai nhijmg sai lech trong HSDT tren nguyen tic dam bao gia ky hgp dong khong vugt gia trung thau dugc duyet. Viec thuang thao, hoan thien hgp dong cung bao glm ca viec nghien cuu cac sang kiln, giai phap do nha thiu dl xuat, phucmg an thay thl (nlu co yeu cau), chi tilt hoa cac noi dung con chua eg th l,... d) Sau khi dat dugc ket qua thuang thao, hoan thi n, SHB va nha thau se tiln hanh ky hgp dong. 15

16 C H lt d N G II BANG DtT LIEU DAU THAU Bang die lieu dau thdu bao gdm cac ngi dung chi tiet ciia goi thou theo m<?t so Dieu tuomg wig trong Chwmg 1 (Chi ddn doi v&i nha thdu). Neu co bat ky su khac biet nao so vai cac noi dung tuemg ung trong Chucmg I thi can cu vao cac noi dung trong Chucmg nay. Dieu Khoan Noi dung 1 Ten goi thau: Nang cap tryc tich hyp (ESB) 1 2 Chu dau tu: Ngan hang TMCP Sai Gon - Ha N0i (SHB) Bia chi tru so: So 77 Ph6 Trdn Hung Bao, Phubng Tran Hung Bao, Quan Hoan Kiem, Thanh Ph6 Ha Noi. M asdthue: Noi nhan ho so du thau: Trung tam Mua s4m, TSng 3- s6 81 Pho Tran Hung Bao, Phucmg Trdn Hung Bao, Quan Hoan Kiem, Thanh Pho Ha Noi. Ngucri lien h f: Nguyen Ngoc Cau Bienthoyi: , Mobile: Nha thau n6p h6 so du thau bao gom cac tai lieu sau: + Bon du thau. + Gia du thau va bieu gia theo quy dinh. + Thu gi&m gia (neu co) + Tai lieu chung minh tu each hop le, nang luc kinh nghiem theo yeu clu cua ho so moi tmu. + Tai lieu chung minh tinh hop le va su phu hop (dap ung) cua hang hoa yeu cau cua h6 so moi thdu. + Giay to chung minh moi quan he voi cac hang san xuat + Bao dam du th4u theo quy dinh cua ho so mcri thau. + Cac tai lieu ky thuat khac lien quan theo yeu cau ho so mcri thau. Tu each hop le cua nha thau: Nha thdu phai co du cac dieu kien sau: 1. Nha thdu phai nop ban sao Giay chung nhan dang ky kinh doanh hoac Giay phep kinh doanh hoac Gidy chung nhan dau tu. 2. Hach toan tai chinh doc lap.? r 3. Khong dang trong qua trinh giai the; khong bi ket luan dang lam vao tinh trang pha sdn hoac no khong co kha nang chi tra theo quy dinh cua phap luat. 4. Khong thuqc dien bi edm tham gia ddu thdu theo quy dinh cua Luat Bdu thdu. 5. Truong hop lien danh: Ngoai viec tvmg nha thau nop cac gidy to nhu quy dinh doi vdi nha thdu doc lap, nha thdu lien danh phai nop kem theo van ban thoa thuan lien danh gifta ede nhd thdu duoc ky boi dai dien hop phap cua cac nha thdu trong do 16

17 Dieu Khoan Noi dung quy dinh rd quyin han va trach nhiym cua tung nha thiu ddi vdi goi thiu. 6. Co giay to chung minh tir each hop phap cua ngudi dai di?n nha thiu trong don dy thiu. 4 Bao dam canh tranh trong diu thau: Nha thau tham gia diu thau phai doc lap ve t6 chuc va doc lap ve tai chlnh vai SHB (Truemg hyp lien danh thi tung nha tmu phai dye lap ve to chute va doc lap ve tai chinh). Nha thau can xem ky moi hudng dan, mau khai, thai han va cac thong tin khac tron^ HSMT. HSDT cua Nha thau co the bj loai Mu khong cung cip du thong tin can thiet hay neu ho so do ve ca ban khong dat yeu cau cua HSMT. 4 Hang hoa duac coi la hop If khi dap urng cac yeu Mu sau: 7. Cac dich vu va phin tmm cung cap theo goi thau phai dam bao thdi gian bao hanh va ho try ky thuat 12 thang Bia chi nhan van ban de nghi giai thich, lam ro: Neu tai Di6u 1 Khoan 2 BDL. Thdi gian nhan duyc van ban yeu Mu giai thich khong muyn han 05 ngay l to viyc trude thdi diem dong thdu. SHB co quyen sua doi HSMT bang each phat hanh pmn bo sung vdi bit ky ly do nao va tai bat ky thdi diem nao trude han nop HSDT hodc sau thdi diem dong thau (neu chua tien hanh md ho so du thiu). T it ca cac ben tham gia diu thiu diu duyc thong bao ve phin bd sung bing van ban va ho se bi rang buoc bdi phan bo sung nay. De nha thau co du thdi gian dieu chinh HSDT thich ung vdi phan sua doi, SHB s3 gia han thdi gian nop HSDT, Mu cin thiet D6ng tiin d\r thiu: Viet Nam ding (VND). 17

18 Dieu Khoin 14 1 Ngi dung Nang lye va kinh nghigm: Nha thiu phii dap ung hoac cung cap cac tai lieu sau nhim dap ung yeu cau ve nang lire va kinh nghiem: *Nans lu'c cune cap. trien khai 1. Nha thau phai co toi thiiu 05 nam kinh nghiem trong linh vuc triin khai true tich hgp ESB cho cac ngin hang, t6 chuc tin dung C6 it nhit 01 hop dong (ban sao y cong chung) ve trien khai hoac nang cip true tich hgp ESB (hang TIBCO) trong 02 nam gin nhat, hgp d6ng co gia tri tir 05 ty VNE) trd len. 3. Bin sao v cong chung gidy phep ban hang hoac chung nhan la dai ly ban hang, hoac cam ket h6 tro bin hing va bio hinh cua nhi sin xuat cho don vi cung cap. 4. Co tdi thieu 03 chuyen gia li nhan sy da v i dang lim viec tai don vi kem theo hgp ddng lao dong, chung tu dong bio hiem trong 3 thing gan nhat, chung chi lien quan. 5. N hi thau phii co tru scr chinh hoac chi nhinh a H i Noi dl ho tro ky thuat. 6. Thai gian trien khai: 9 thing ke tu ngiy ky hgp dong. *Nans lire tai chinh 7. Bio cao tinh hinh tii chinh co xac nhan cua co quan kiem toan dgc lap trong 02 nam gin day nhat, doanh thu binh quan dat toi thieu tir 10 ty dong/nam trcr len v i phii co lii. 8. Bio dim du thau theo quy dinh; Noi dung yeu cau ve bio dim du thiu: N hi thiu phii ngp kem theo HSDT bio lanh du thiu co gii tri li VND {Mot tram trieu dong chan). Higu lire bio lanh: 90 ngiy ke tir thcri diem dong thiu theo quy dinh Hinh thuc bio lanh: Phit hinh thu bio lanh hoac ngp tien mat 8. Truong hgp phit hinh thu bio lanh: Thu bio lanh cua mot Ngin hang dang hoat dong tai Viet Nam. 9. Nop tien mat ky quy bio lanh du thiu tai Ngin hing TMCP Sii Gon - H i Noi, thong tin tii khoin nhu sau: Ten tii khoin: Ngin hing TMCP Sii Gon H i Noi S6 tii khoin: Ngi dung nop tiin: Cong ty... (ghi r5 ten cong ty)... ngp tien bio lanh dir thiu goi thiu Nang cap true tich hgp ESB 10. Bio lanh du thau cua nhi thau tning thau se het hieu luc khi nhi thau ky hep dong. 11. Thai gian hoin tri bio dim du thiu cho nha thiu khong tning thiu: Trong vong 30 ngiy k i tir ngiy thong bao kit qui diu thiu. 18

19 Dieu Khoan 3 NqI dung Noi dung yeu cau d6i vdi bao dam thuc hien Hap dong: 12. Thai han nop bao dam thuc hien Hop dong: theo kit qua thuong thao, th6ng nhat giua hai Ben. 13. Hinh thuc bao dam thuc hien Hop dong: bang Thu bao dam cua mot Ngan hang hop phap tai Viet Nam. 14. Gia tri bao dam thuc hien hop dong: 10% gia trj Hop dong. 15. Hi$u lire cua bao dam thuc hien Hop dong: tdi thieu 120 ngay ke tir khi phat hanh. Trong qua trinh thuc hien Hop dong, neu nha thau muon gia han then gian th\rc hi?n Hop dong thi phai gia han thoi gian bao lanh tuong ung hoac khi SHB yeu cau gia han nha thau phai cam kit thuc hien theo dung yeu cau Thoi gian co hieu lire cua HSDT la 90 ngay ke tu thbi diem dong thau Nha tmu phai cung cip 01 ban ho so g6c, 02 ban sao co ghi ro H6 so ban g6c hay H6 so ban sao. Ban g6c phai duqc ky nhay d tat ca cac trang boi ngudi dai dien co tham quyen cua Nha thau. 18. Trong trudng hop co mau thuan giua ban gdc va ban sao, ban goc co gia trj quyet dinh. Cach trinh bay cac thong tin tren tui dung HSDT: Ten, dia chi, sd di?n thoai lien he cua nha thau Ten, dia chi ben mdi thau: Ngan hang TMCP Sai Gon - Ha Noi (SHB) Dia chi Try sd: S6 77 Phd Trdn Hung Dao, Phudng Tran Hung Dao, Quan Hoan Kiem, ThM i Phd Ha Noi. Ten goi thau: Nang cap true tich hop ESB (Trudng hop sua ddi HSDT, ngoai cac noi dung neu tren con phai ghi them ddng chcr "Hd so du thdu sua doi ) HSDT duqc gui din SHB khong muon hon 15h, ngay thang nam Hd so nhan sau thoi han quy dinh se khong duqc md, bi loai va gui tra nguyen ven cho Nha tmu. Viec md thau se duqc tien hanh cong khai vao luc 15hl5, ngay.if^thang 0.? nam 2022.

20 C H I/O N G III TIEU c h u An d An h g ia v A n q i DUNG XAC D N H g ia d e n g h i TRUNG THAU Bans tieu chuan danh gia so 1 TIEU CHUAN DANH GIA TINH HQfP LE CUA H 6 SO D( THAU Ho so* dy thau cua nha thau se bi loai, khong xem xet tiep neu co 1 trong cac ngi dung sau day khong dap ihtg: XT 1 Noi dung Tinh hyp le cua don du tmu theo quy dinh tai Di6u 11, chuong I, phanl. Dap ung Khdng dap ung 2 Tinh hop le cua thoa thuan lien danh theo quy dinh tai Khoan 2 Bieu 3 (neu co); chuong I, ph&i I. 3 Tu each hgrp 1$ cua nha thau theo khoan 1 Bi6u 8 - BDL, chuong II 4 Tinh hop le, su dap ung cua hang hoa neu tai Bieu 4, chuong I, phan I. 5 Co du 01 ban goc va 02 ban chup HSBT, 01 USB dir lieu 6 Bao dam du thsu theo quy dinh 7 Bilu gia chao theo quy dinh (du s6 luomg, gia chao bao g6m ca th u l,...) 8 B6ng tisn dy thlu pmi la tien Viet Nam B6ng 20

21 Bang tieu chuan danh gia so 2 TIEU CHUAN DANH GIA VE NANG LyC, KINH NGHIEM * Nha thau diryc danh gia dat yeu cau ve nsng lye kinh nghif m khi tat ca cac noi dung duoi day duoc danh gia dat: Noi dung Mire yeu cau toi thieu de duoc danh gia la dap ling (dat) 1 Kinh nghif m So luyng cac hap dong tuang ty da thuc hien vdi tu each la nha thau chfnh hoac mot thanh vien cua lien danh trong 02 nam g n nhat So nam kinh nghiem trong llnh vuc trien khai true tich hap ESB cho cac ngan hang, to chuc tin dung Co it nhat 01 hop dong (ban sao y cong chung) ve trien khai hoac nang cap trqc tich hyp ESB (TIBCO) trong 02 nam gin nhit, hop dong co gia trj tir 05 ty VND tra len. Toi thieu 05 ndm. 2 N3ng luc cung cap, trien khai Co moi quan he vai nha san xust hosc nha phan phoi. Can bo trisn khai Co Ban sao y cong chung giiy phep ban hang ho$c chung nhan la dai ly ban hang hosc cam kit h6 try ban hang va bao hanh cua nha san xuit cho dan vi cung cip Co t6i thiiu 03 chuyen gia triin khai la nhan sy da va dang lam viec tai dan vi kem theo hap ding lao dong, chung tu dong bao hiem trong 3 thang gin nhit, cu thi: 01 Chuyen gia ky thuyt triin hoac chuyen gia tu vin triin khai co chung chi ve san pham TIBCO BusinessWorks va 02 chuyen gia ky thuat trien khai co kinh nghiem triin khai it nhit 2 du an su dyng san phim TIBCO trong giai phap di xuat. Cung cip danh sach can bo tham gia trien khai dy an dap ung cac yeu cau cua ho sa yeu cau chao hang nay. 21

22 H6 trg ky thuat Thori gian trien khai 24 gid / ngay; 7 ngay / tuan; 9 thang ke tu ngay ky Hgp d6ng 3 N&ng lye tai chinh Bao cao tinh hinh tai chinh (sao y cong chung) c6 xac nhan cua ca quan kiem toan doc lap trong 02 nam gan nhat. Tuan thu cac dilu kien thanh toan Bao lanh d\r thau. Ket luan Trong 02 nam gan day nhat, doanh thu binh quan dat toi thieu 10 ty dong/nam tro len va phai co lai. Bap ung dieu kien thanh toan tai m\ic IV, chuong VII, PMn III HSMT Co bao lanh d\r thau D^t/Kh6ng dat 22

23 Bang tieu chuan flanh gia so 3 TIEU CHUAN DANH GIA KY THUAT NOI DUNG YEU CAU TIEU CHI DANH GIA KET QUA DANH GIA GHI CHU CAC YEU CAU VE KY THUAT I Yeu cau ve ky thuat 1 Yeu cau phan quyen nguai dung Dap ting/ Khong dap ting 2 Yeu cau tham s6 hoa he th6ng Dap ting/ Khong dap ting 3 Yeu cau xu ly cua giai phap 4 Yeu cau toan ven du lieu 5 Yeu cau ve quan tri van hanh 6 Yeu cau kien true 7 Yeu cau luong xu ly 8 Yeu cau ca che goi dich vu Dap ting/ Khong dap ting Dap ting/ Khong dap ung Dap ting/ Khong dap ting Dap ting/ Khong dap ting Dap ting/ Khong dap ting Dap ting/ Khong dap ting 9 Yeu cau tlnh san sang va kha nsng chiu 16i Dap ting/ Khong dap ting 10 Yeu cau giao dien quan tri Dap ting/ Khong dap ting

24 11 Y eucaukhac 12 Yeu cau an ninh bao mat Dap ling/ Khong dap ung Dap ling/ Khong dap ling II Yeu cau djch vu Dap ling/ Khong dap ling III IV V VI Yeu cau ve nhan sur trien khai Yeu cau dao tao va chuyen giao X X Yeu cau kiem tra, ban giao va nghiem thu Yeu cau bko h^nh, ho trg ky thuat va bao tri Dap ling/ Khong dap ling Dap ling/ Khong dap ling Dap ling/ Khong dap ling Dap ling/ Khong dap ling

25 Bang tieu chuan danh gia so 4 XAC DINH GIA DANH GIA stt Noi dung CSn cu xac d nh 1 Xac dinh gia dy thau Theo Di6u 12 Chuomg I 2 Sua 16i Theo Dieu 27 Chuomg I 3 Hieu chinh cac sai lech Theo Dieu 28 Chuomg I 4 Gia tri giam gia (neu co) Theo thu giam gia cua nha tmu 5 6 Gia du thau sau sua loi, hieu chinh sai lech va giam gia Chuyen doi gia du thau sang mot d6ng tisn chung (n6u co) Tong cua gia trj cac noi dung (l)+(2)+(3)+(4) Khong ap dung (Nha thau phai chao bsng tien Vi?t Nam dong) 7 Gia danh gia Gia trj noi dung muc 5 25

26 p h An ii YEU CAu VE KY THUAT NGHIEP VV CHlTONG IV y u c A u VE PHAM VI CUNG CAP 1. Myc TIEU, PHAM VIGOI THAU 1. Myc tieu cua goi thau Phien ban hien tai cua he thong true tich hop (ESB) dang duoc su dung tai SHB la phien ban TIBCO BusinessWorks 5.x. nham: SHB cin trien khai nang cip true tich hop (ESB) hien tai len phien ban moi 6.x Trien khai True tich hop tren nen tang TIBCO co ten san pham va phien ban nhu sau: + TIBCO Activematrix Businessworks phien ban 6.x + TIBCO Enterprise Message Service phien ban 8.x Ho trp day du cac xu huong cong nghe giup cho viec phat triln dich vu tien dung va nhanh hem nhu CI/CD, ho trgr Maven, cac addons plugin,... Nang cao chit luomg, cai thien rut ngin thoi gian phat trien dich vy kit noi tdi cac hf thong mdri, dap ung nhanh chong kip thoi cac yeu cau tvr nghi?p vu ngan hang. Kha nang mo rong scalable cao, tan dung cac tinh nang quan ly master-worker sin co dam bao viec mo rong add them node lam viec moi ma khong lam gian doan he thing. Dap ung dugre het cac chuan ky thuat cin co cua kiin true microservices, co thi tiep tuc dugc chay (deploy) tren nen tang ha tang vat ly da co san tai SHB. Giup nhan su phat trien ung dung d dang tiep can cac cong nghe moi, sin sang dap timg nhanh cho nhu ciu chuyen doi so tai SHB. T6i uu kha nang van hanh, dam bao tinh on dinh, toan ven du ligu, giam thieu thoi gian downtime he thing khi cap nhat dich vu moi hay khi gap su ci. - Nang cao kha nang giam sat, van hanh, tra cuu giao dich, quan tri hieu suit va trang thai cua dich vu tren true tich hop ESB theo thoi gian thuc. D dang trong cong tac du bao va sizing he thing. - Qua trinh trien khai nang cip dam bao khong anh huong tdi cac dich vu dang chay tren he thing hign tai.

27 - Dap ta g xu hudng cong nghe thay doi lien tuc ve ha tang va dinh hircmg cua SHB dua cac nen tang ha tsng len Private Cloud trong tuomg lai. 2. Lo trinh trien khai Duoc chia thanh cac giai doan sau: Giai doan/moc chinh Thoi gian du kien Ghi chu Giai do$n 1: - Thiet ke va nang cap nen tang ESB len phien ban mdi. 1 - Chuyen doi cac API nen tang dang co Thang 3 - Thang tren tibco version 5.x sang tibco version 8/ x - Kiem tra hieu nang va toi iru h? th6ng true ti'ch hop ESB sau nang cip 2 Giai doan 2: - Xay dung va chuyen doi cac API ket noi mai theo yeu cau cua SHB - Kiem tra hi?u nsng va toi iru he th6ng true ti'ch hop ESB cho cac dich vu phat trien mdi Thang 9 - Thang 12/2022 Tir khi hoan thanh ky ket hop dong vdi doi tac tri6n khai Ke hoach co th6 dugc lam ro, dieu chinh, thong nhat sau qua trinh khao sat/ theo nhu cau cua SHB. 3. Pham vi cua goi thau Trien khai True ti'ch hop tren nen tang TIBCO co ten san pham va phien ban nhu sau: - TIBCO Activematrix Businessworks phien ban 6.x - TIBCO Enterprise Message Service phien ban 8.x. I Khao sat/thong nliut yeu cau 1 Khao sat/thong nhdl yen cau dir an 11 Thiet ke/ Kien true 1 Thiet ki tong the 2 Thiet he chi tiet III Phat trien/tich hop internal 1 Thiet ke va phat trien framework Phat trien cac dich vu tren trvic dch hap ESB (SOA/GATEWAY) 2 Du kiin; 80 dwh vu (ESB SOA), 120 dich vu (ESB GATEWAY) IV SIT / Tlnrc hien SIT ede dich vu da phat trien muc III. 2 V CAT 1 Thtyc hi4n UAT cac dich vu da phat trien mtic III. 2 27

28 : a - a M U M *. -.. IV Tuning 1 Performance Testing & Tuning V Ck\ dst 1 Cai dat/trien khai cac moi trtrong (DEV/TEST, UAT, PROD, DR) VI Golive / Golive 2 Ho tra sau Golive VII Training 1 Khoa dao tao huang dan lap trinh tren phien ban moi 2 Khoa dao tao van hanh he thong

29 CHlTONG V YEU CAU VE KY THUAT 1. Cdc yeu cau chung Nha thau se thuc hien trien khai nang cap True tich hap ESB tren nen tang TIBCO voi cac phien ban nhur sau: - TIBCO Activematrix Businessworks phien ban 6.x - TIBCO Enterprise Message Service phien ban 8.x 2. Yeu cau chi tiet Muc 1. Yeu cau ky thuat Yeu c&u cua SHB (Nhi thau phai thyc hiyn toi thifiu nhung khong gidi ban ede hang muc cong \ i$c sau, d&m bao flat dirge Myc tieu neu tren) CAC YEU CAU VE KY THUAT YEU CAU CHUNG VE HE THONG I TRUC TICH HOP ESB 1 Yeu cau phan quyen ngircri dung - Username duy nhat, khong phan biet chu hoa chur thuemg. - Trang thai cua account dap ung tieu chuan PCI-DSS nhu: + He thong phai co toi thieu 04 trang thai nguoi dung bao gom: Activate/Close/Delete/Lock. 2 Yeu cau tham so hoa hf thong Giai phap co co che tham so hoa he thong, cho phep quan ly c u hinh, phien ban cua moi djeh vu. Moi thay doi tham so cau hinh deu phai co Nguoi tao va nguoi duyet. Nha thau neu ro cac bang chung hoac tinh nsng tuong duong cua giai phap de xuat dap ung cac yeu c u tren. Nha thiu phai cung cdp bang tham so he thong ro rang, bao gom nhurng khong giai han Muc dd dap ung d*p wig das Ju. Dip ungmot phin/ Khdng dip imr) Bat buqc/ Tfly chgn Tuy chon MO ta dap dng chi tiet Cilu ph&n tuong dug eda gidi phdp d& xu&t 29

30 Y6u c&u cua SHB (Nh& thau phai thyc hiyn t6i thieu nhirng kh6ng gilh hyn c&e hyng myc cong viyc sau, dim bio dyt diryc Myc tieu neu tren) cac thong tin: Y nghta cua tham so, kieu du lieu cua tham so, gia tri mac dinh cua tham so, cac gia tri co the cai dat cho tham so... Cho phep quan trj vien c6 the khai bao / cap nhyt cac tham s6 mi khong phai thay doi / them mi nguon / cau true du lieu. 3 Yeu cau xu* ly cua giii phap Cac service tren tryc tinh hop ESB phai dap ung toi thieu 200 CCU API cua he thong phai dap ung so concurrent request toi thieu 1000 request tyi mgt thcri diem API cua he thong phai dap ung kha nang xu ly khong qua 3 s tren 1request - Dinh tuyen thong diep (Message Routing): Bjnh tuyen thong digp tdi dung dich vu ma chung can tdi dua vao tieu de (header), noi dung va giao thuc cua thong digp. - Chuyen doi thong di?p (Message tranformation): Cho phep chuyen doi djnh dang thong diyp tvr dang nay sang dang khac, vi du nhu tir kieu XML sang JSON, tir dang text sang nhj phan va ngugc lai. - Chuyen dich giao thuc (Protocol Translation): Kha nang chuyen doi tu m t giao thuc truyen thong nay nay sang mot giao thuc truyln thong khac, vi du nhu tir FTP sang HTTP. - Xac nhan thong diep (Message Validation): Co kha nang dam bao thong diep la hop le, vi du nhu trong truemg hyp dinh dang la JSO N, dam bao ring noi dung cua thong diep dung v a i cu phap cua djnh dang nay. - Giao djeh (Transaction): Tucmg tu nhu khai niem ve Transaction cua he quan tri ca scr du lieu quan he, ESB cung efip cho chung ta sir toan vgn trong viec xu ly thong diep. Neu nhu trong ludng xu ly thong diep, mot tien trinh Mire dap ling (D&p ung day dq, Ddp im gm $t phdn KhAng ddp img) Bat bugc/ Tuy chyn Bat buoc Bit bugc Bat buqc Mo ta dap (hie chi tiet C&u phan tirong irng cua giai phap de xuat 30

31 Yen cau cua SHB (NhA thau phiii thyc hiyn toi thi u nhirng khong gifri hyn cac hyng myc cong vi$c sau, dam bao dat dugc Muc ticu ncu tron) xu ly bj loi thi toan bo qua trinh se dugc huy bo va khoi phuc ve nhu ban dau. Muc du dtip ung (B Spung d iy d ii, D ip phii/ X hflngdip ung' B at bugc/ Thy chgn Md ta dap ung chi tict C&u ph&n tirong ung cua giai phap de xu&t Adapters/Transport: K6t noi tdi cac djch vu dugc ESB cung cap. Tat ca yeu cau di vao va di ra deu phai thong qua adapter. Adapter cho phep ESB tuang tac voi nhieu co che dhu ra. SOAP HTTP/REST JMS FTP/FILE EJB Database Adapter 3rd Party Adapter Custom Adapter TCP BSt bugc 4 Yeu cau toan ven du lieu He thong co the cung cap co che khoi phuc khi truyen dir lieu khong thanh cong cung nhu co che de xac dinh xem truyen du lieu co thanh cong hay khong He thong co the cung cap ca che dam bao tfnh toan ven du lieu sau khi truyen du lieu. H? thong co the co kha nsng dam bao tlnh toan ven cho Giao dich. Thiet lap chinh sach quan ly vong dai du lieu nhu Tao, luu tru, truyen, su dung, chia se, duy tri va huy du lieu 5 Yeu cau ve quan tr{ van hanh He thong co kha nang van hanh linh hoat, dap ung kha nang khi nang cap co thai gian downtime nho nhat Co giai phap Logs day du: Transaction Logs tren DB va System Logs dang file tren OS. Ma loi phai diy du, tucmg minh. Kern vdi do la tai lieu cac phucmg an xu ly 16i theo timg case phat sinh. Bat bugc Bat bugc 31

32 Yeu ciu cua SHB Muc d$ dap (Nha thau phai thyc hi$n tdi thieu nhirng khdng gi<h hyn c6c hyng myc c6ng viyc sau, dam bio dyt diryc Myc tieu n u tren) He thong co car che che, ma hoa thong tin nhay cam nhu so the tin dung trong co so dulieu theo quy djnh PCI-DSS Giai phap phai cung cap co che logging va auditing. M6 ta chi tiet each thuc giai phap th\rc hien logging va auditing. Toi thieu bao gom cac thong tin: Thai gian thuc hien, ngucri thuc hien, cac thao tac thuc hien, kit qua, IP may thurc hien,... Giai phap can cung cap cac cong cu giam sat hieu suit va trang thai cua dich vu trong thcri gian thyc Giai phap can cung cap cac cong cu giam sat hieu suit va trang thai cua djeh vu theo khoang thcri gian khong giai han Giai phap cung cap cac cong cu giam sat, canh bao trang thai cua cac djeh vu ket noi den cac he thong tich hop vdi he thong ESB (vi du h? th6ng Corebanking, he thong the, he thong NHDT...) theo thcri gian thyc Gi&i phap phai dap urng viec gtri canh bao va sms tdi ngurcri quan tri niu hoat dyng hy thong tich hyp viryt qua nguomg thiit lap Giai phap cung cap cong cu giam sat cho phep ngucri quan tri co the them cac dieu kien canh bao dua trsn nin tang sin co dug i D ip ung d3v du. D ip ungm $t p h in / Khdng d ip tag ) bu$c/ Tuy chyn Bit buqc Tuy ch<?n Bat buyc Bat bugc M61 dap timg chi tilt Ciu phin tunmg ung efia gi4i phdp de xuat 6 Yeu cau kien true Hy thong yeu cau xay dyng co kien true theo hudng SOA (Service Oriented Architecture)/Micro Service phu hyp vdi kiln true tong the cac he thong CNTT hien dai. Nha thau mo ta chi tiet mo hinh kien true giai phap de xuat, bao gom toi thieu cac lap: - Lop Message Bus - Lap Governance. Lap quan trong nhit chiu trach nhiym: + Qu&n tri ESB Service nhu Deployment, 32

33 Yeu cau cua SHB (Nha thau phai thurc hiyn toi thieu nhirng khdng gift hyn c&c hang muc cong vifc sau, dam bao dat diryc Myc tiou trfin)' Bat bu^c/ Tuy chqn M 6 ta dap urng chi tiet Cau ph&n tutmg ifrig cua gidi phdp de su it Configuration, Trace logging. + Repository cac djch vu tren ESB. + Quan ly quy trinh - Lop trung gian dam bao cac chinh sach truy cap - Acesss/ Policy Mediation - Lop Adapter Boi tac can neu r5 cac module cua giai phap co the cai dat chung server hay cac module nao can co server rieng biet. Nha thau cung cap chi tiet mo hinh trien khai co kien true HA (Active/Active, Active/Standby) tyi DC-DR ca muc urng dung va co so dir lieu Boi tac mo ta chi tiet each cau hinh h? thong, chi tiet ket noi giua cac he thong va thcri gian chuyen doi tcr site chinh sang site du phong, ke ca kha nang chuyen ngucrc lai site chinh. Kien true dam bao vi?c mo rong theo chi6u ngang. Khi luu luong giao djch tang/ giam co the mo rpng bang viec them bot cac may chu (server/node/pod/...) viec them bot nay co the dugc cai dat tu dgng hoac cai dat thu cong, tuy theo nhu cau va ca sa ha tang thuc te. Bam bao tich hap vai cac he thong Core (Corebank, CoreCard, CRM,...) va doi tac SHBk6tn6i Yeu cau cung cap sizing phan cung cho giai phap dap urng kha nang van hanh toi thieu 05 nam, va trinh bay phuang an ma rong trong tuang lai Nha thau mo ta chi tiet mo hinh kien true true tich hop ESB nhu: - Quan tri tri nguai dung, quan tri phan quyen goi API,... - Quan tri cac API co tren true tich hap ESB - Nghiep vu theo doi, giam sat he th6ng va quan tri, ho trg 33

34 Yeu cau cua SHB Mure d dap (Nha thau phai thyc hifn toi thieu nhung khdng gi6i hyn cdc h?ng myc c6ng vi$c sau, dam bdo dat dirge Myc ti u nsu tren) Nha thau cung cap chi tiet phucmg phap luan trien khai phu hyp vdi hien trang True tfch hop cua ngan han SHB dang su dung phien ban 5.x va nang cap phien ban 6.x Kien true cong nghe nen tang: Doi tac phai liet ke ro rang cac hy thong phan cung, database, OS, Middleware va giai phap kien true mang, ke ca nhung dieu kien han che neu frng (Dap Cmg day du, D ip ungm $t p h tn / Khong dip ling) Bat bu$c/ Tuy chyn Bat buyc M6 ta dap dug chi, tilt.. C&u phan tuwng dng cua giai phap d xu&t CO. Nha thau cung cap va mo ta framework phat trien dich vu dam bao tinh dong nhat, on dinh, chuan hoa giflra cac djeh vy. 7 Yeu cau luong xir ly Phin mem hy thong phai cho phep thiet ke cac luong xir ly giua ben cung cap djeh vu (service provider) va ben yeu cau su dung djeh vu (requester). Phan mem he thong phai cung cap day du cac churc nan toi thilu sau: + Thay doi dinh dang, xu ly thong diyp (message) + Gyi dich vy + Xir ly re nhanh + Ghi nhyt ky + Dinh tuyen thong diep dua tren noi dung + Bjnh tuyen thong diep dya tren chlnh sach (policy-based) + Cac djeh vy moi gidi (proxy) + Nhan du liyu theo cac giao thurc, dinh dang khac nhau, chuyen doi va chuyen den mot hoac nhilu he th6ng khac (myt den nhieu va ngugc lai) theo cac chuan, dinh dang, giao thirc dinh nghta trude. + Ho try nhisu ky thuat dinh tuysn khac nhau, tir dinh tuyen co dinh, dinh tuyen dong theo

35 YC'ii elu cua SHB (Nhu tliau phai tliyc hiyn toi thilu nhirng kilting gi(vi hyn c6c hyng myc cfing vife sau, dam bao dyt diryc Myc tieu ncu trsn), mot dieu kien cho trucrc (dynamic routing), hosc dinh tuyen tdi nhieu dich khac nhau... + Ho trg xu ly nhieu thong diep theo 16, cho phep chia nho cac thong diep de xu ly mot each song song de tang hieu nang cua h? thong (theo mo hinh split-join) + Ho trg tai su dung cac thu tuc, ham sin co cua ngan hang, vi du nhu Java, Store Procedures... cho phep ggi cac ham nay de xur ly ma khong phai chinh sua. + Cho phep djnh nghta cac luong thong di?p (message flow) tong hop tu cac luong thong di?p khac nhau (service orchestration). + Cho phep khai bao, cai dst cac cong thuc chuyen doi (transformation rules) gifta cac thong diep co djnh dang khac nhau trong he thong. Phan mem he thong dap ung yeu cau khi luong xu ly gap su c6 phai ho trg su dung diem kiem soat (check-point) trong cac tien trinh process de dam bao viec luu dugc trang thai hoat dong cua tien trinh va co the phuc hoi lai hoat dong cua tien trinh tai diim kiem soat (check-point) gan nhat khi tien trinh gap su c6.! Mucdg dip ung (Bip ling <tdy<w,p4p ung inol phin/ Khong dip unci Bit huge/ Tuy chyn MS ta dap ung chi tiet Clu phan tuong ung cuu giai phdp de su it Phan mem he thong ho trg mot kien true bao mat toan dien trong moi truong huang dich vy, bao gom toi thieu cac myc sau: + Bao mat muc transport + Bao mat muc message + , FTP, bao mat muc chuyen file + Bao mat doi vai yeu cau tu ben ngoai + Bao mat doi vai yeu clu tu ben trong + Dinh danh khach hang + MS hoa thong di?p

36 Yeu c&u cria SHB (Nhri th&u phai thyc hi$n t6i thieu nhirng khdng giriri hyn cric h?ng myc cong vi$c sau, d&m b&o dyt dupe MyctiSu n u tr n) + Chu ky dien ttr tren thong diep + Xac thuc gitra nhieu he thong (federated authentication) Giai phap phai co tich hpp vdri cong thanh toan NAPAS, Ngan hang nha nude, cac doi tac cung cap dich vy,... theo bo tieu chuan thanh toan. Giai phap co kha nang tich hop vdi cac he thong quan tri directory hien tai cua SHB nhu LDAP, MS Active Directory, Mail Server Gi&i phap co kha nang tich hgp vdi SNMP cho muc dich giam sat Giai phap co kha nang tich hop vai cac cong cu giam sat tren thi trudng, ching han nhu IBM Tivoli, HP Open View, Qradar... He thong phai co kha nang tich hop vdi cac giai phap quan ly log tap trung nhu ELK, Qrada, SIEM,... Nha th&u phai xay dung khung (base framework) cho toan bp cac dich vy tren true tich hgrp ESB bao gom nhung khong gidi han cac noi dung sau: + logging, tracing,monitoring,... Hp thong phai co quy trinh trien khai tu dong CICD - (lien tyc tich hop, lien tuc trien khai) MurcdQ drip dng (Dip {mg d&y du, Dap tmgmdt phin/ Khdng dip ung) > 'Bat, ; bupc/ * Tfiy chpn Bit bupc Bat bupc Mo ta dap rime chi tiet Ciu phin tiromg ring cua giai phap de xuat 8 Yeu cau co* che goi d ch vu Phan mem he thong cung cap toi thieu cac ca che sau (theo ca che dong bo hoac khong dong bp): + Giri mot lan (fire-forget) + X u it ban va dang k y (publish-subcribe) + Yeu cau va phan hoi (request-response) Nha thau mo ta each thuc chuyen doi interface cua dich vy SOAP Over JMS tu phien ban 5.x len 6.x ma cac ung dung Consumer khong phai thay doi lai code. Bat bude 36

37 Y$u cau cua SHB (Nha thau phai tbu-c hi?n toi thieu nhumg khang gitvi hail cac hang myc cang vi$e sau, dam bao dat duyc Myc tieu ncu tren) MucdO dap A'ng (P a p un i day <M, Dfip u ng m Ji p h tn i K hong (tip!>ng) BSt buqc/ Tuy chyn M3 ta dap ung chi ti t Clu phi ii tuung A ng cua giai phap de x i $ [ i 9 Yeu cau tinh sin sang va kha nang chiu loi Phan mem he thong duac thiet ke co it nhat hai thanh phan cung thuc hi?n tren mot chuc nsng va Phan mem he thong phai co kha nsng tiep tuc van hanh sau khi mot thanh phan khong con hoat dong (HA). Phan mem he thong co kha nang trien khai clustering khac nhau nhu active - active/ active - passive vdi tinh nang automatic failover trong moi trudng LAN va WAN Phan mem he thong co kha nang phat hien 1 node nao do cua he thong dung hoat dong va chuyen sang node active khac 10 Yeu cau giao diyn quan trj Phan mem he thong cung cap cac cong cu quan trj d cac cip do he thong khac nhau nhsm dap ung nhu cau cua cac doi tuong ngudi dung khac nhau (nhan vien van hanh, quan tri vien, nha phat trien), bao gom toi thieu nhu sau: + Giao dien quan tri + Dong l?nh Phan m6m he thong ho tro viec quan ly va bao cao viec d&ng ky cac dich vu tren toan bo he thong theo mot giao dien true quan sinh dong thong qua cac bao cao chuan - Dashboard - giup nha quan tri he th6ng quan ly mot each true quan, chat che va trong suot. 11 Yeu cau khac Trong HSDT, Nha thsu cung cap chi tiet k6 hoach trien khai tong the va chi tiet theo tung giai doan (neu co). Cung cip phucmg phap luan trisn khai nhsm dam bao cac yeu cau cua muc tieu goi thau. KhuySn khich Nha thau trinh bsy chi tiet va md rong cac yeu cau, khuyen cao ve trien khai de churng minh kinh nghiem va nang lire BSt buoc BSt buoc BSt buoc BSt bupc 37

38 Yeu cau cua SHB Mire d dap (Nh& th&u ph&i thyc hiyn t6i thieu nhirng khdng gidi hyn cdc hyng myc cfing viyc sau, dam b&o dyt diryfc Myc tieu neu tren) cua Nha thau frng (Dip dng diy du. D ip ungmdt ph4n/ Khdng dip dng) Bit buyc/ Tuy chyn M61&dap drug chi tiet Cau phln ttrorng irng cua giai phap de xu It Thai gian trien khai: nha thau phai thuc hien hoan thanh dung tien do cam ket. Nha th4u cung cap thu cam ket trong trucmg hop dap ling cac yeu cau sau day: - Dia diem trien khai: tai Try sd cua SHB va do SHB chi djnh - Trong su6t qua trinh trien khai phai co su tham gia cua can bo SHB - Nha thfiu cung cap thu cam ket dam bao thuc hi?n yeu cau ve bao mat thong tin: cam kit khdng tiet 1, sao chep, sir dyng bit cu thong tin lien quan den he thong thiet bi, ca sd du' lieu, du lieu, he thong ung dyng, Quy djnh, quy trinh va cac thong tin khac lien quan den viec trien khai goi thau nay dudi bat ky hinh thuc nao. Nha thau cam ket chiu trach nhifrn doi vdi viec that thoat thong tin cua SHB neu nguon goc ro ri thong tin tu dich vy chao thau hoac tu qua trinh trien khai gay ra Nha thau phai ban giao toan by cac ma ngudn cua dy an cho SHB sau khi hoan thanh du an Nha thau phai cung cap va ban giao day du cac cong cu phat trien, trien khai server tren true tich hap ESB cho SHB trong qua trinh trien khai du an Nha thau dua ra nhfrng dl xuat cai tien tuning bao gom nhung khdng han che cho cac service hien tai cua SHB nlu co trong qua trinh trien khai du an. II y u c a u v e b a o m a t 1 Yeu cau chung He thong phai duac thiet ke phan chia thanh nhieu ldp ro rang. Vi du: service, database,... Bat bupc Bat buyc 38

39 Yen cau ciia SUB (Nha that} phai thyre hifn toi thieu hhirag khong gi6i hyn ede hyng myc cong 1 i^c sau, dam bao dyt (luge Myc tieu ncu tren) He thdng sir dung cac thu vien, nsn tang khong co lo hong. Mo ta dky du ten, phien ban cac thu vien va muc dich su dung. He thdng dugc phat trien trong vong ddi phat triln phin m6m an toan (Secure SDLC) + Framework bao mat su dung + Ngan chan cac di6m y6u din cong bao mat pho bien (OWASP, CSRF, clickjacking...) Cung cap quy trinh cap nhat, f i x cac lo hong bao mat cho giai phap/ he thong Giai phap dugc danh gia/ kiem thd bao mat tir mot bo phan doc lap trude khi ban giao cho SHB ' ' ' + Day du cac tlnh nsng duac phat trien cho SHB + Con hieu lire + Khong ton tai diem yeu nguy hiem (theo OWASP) 2 Yeu cau ve dinh danh va xac thuc Tai khoan ngudi dung noi bo, ngudi dung quan tri tich hop he thong AD cua SHB Tuan thu chlnh sach tai khoan va mat khau cua SHB: + Mat khau cua ngudi su dung phai m3 hoa trong dd lieu luu tra. + Mat khiu cua ngudi dung phai dugc ma hoa khi truyen tai da lieu. + Cac da lieu dugc kidm tra tlnh toan ven da lifu khong dugc phep sua doi trai phep. + Mat khau hien thi tren man hinh cua ngudi dung phai dugc lam md, che giau tranh ben thu 3 phat hien. + Ch n tinh n&ng ghi nhd mat khau hoac tu dien mat khau ngudi dung. + Su dung lan cuoi (thanh cong hoac khong thanh cong) cua tai khoan ngudi dung phai dugc thong bao ho c bao cao tdi ngudi su dung tai lan dang nhap thanh cong tiep theo. Mifcd dip ung (Dapimg Dip ungroot phin/ Khong Jap vmg) B at bude/ Tiiy chyn BSt buoc M6 ta dap ting chi ti t C&u phan tilling ting ciia giai phtip dc xust 39

40 ST T Yeu ciu ctia SHB (Nhit th&u phai thyc hipn t6i thieu nhung khing gidri h$n cdc hgng myc cdng vipc sau, dam b&o dyt diryrc Myc tifiu n u trcn) + Ho trgr phucmg an xac thyc ngudi sir dung nhu: Xac thuc qua domain, xdc thuc da yeu t6, qua ch& ky dien tir,... SHB co the tuy bien lira chon phuxmg an mot each linh hoat. + Co the cau hinh dp dai, muc do phirc tap, thdi gian hieu lire cua mat khau He thong cung cap giao dien/ tinh nang cau hinh cac phucmg thuc xac thyc ngudi dung an toan. Khuyen nghi su dung mot trong cac phucmg thurc sau: - Xac thuc qua Domain - Xac thyc nhieu yeu to (MFA) - Sinh trie hpc - Chit ky dien tir 3 Quan ly truy cap va phan quyen Ngudi dung chi co the thuc hipn dc chuc nang khi dang nhap thanh cing: + Truy cap va sir dung cac chuc nang + Truy cap dft lipu Ngudi dung chi co the sir dung cac chuc nang/ dir lieu dupe phan quyen Hp thong check quyen ngudi dung cho tat ca request Ngudi dimg npi bp va ngudi dung ben ngoai phai truy cap tren cdc giao dien, URL khac nhau Hp thong cung cap chuc nang quan ly phin quyen va kiem soat truy cap theo ma tran phan quyen cua SHB Phai co chuc nang kiem soat truy nhap, chi co cac ngudi dung dau cuoi da dupe cap phep dupe phep mdi dupe truy nhap he thing. He thing phai ho trp ca che thong bao, canh bao va ngan chan viec co tinh sir dung ma truy cdp cua ngudi khac de truy cap he thing. Chuc nang kiem soat truy nhpp phai xac nhan vipc ket noi cua cac thiit bj dau cuoi cung nhu chip thuan cho cac thiet bi diu cuoi dupe thyc hi$n giao djeh. Mire dp ddp ihig (Dap ling daydu, )Ap irrigrufit p h ifl/ Khfing d ip ling) fia t bu0c/ > y ' chpn Bdt bupc Bit bupc Bit bupc Mo ta dap umg chi tict Cau phan tirung irng cua giai phap de xuat 40

41 j 1 Yeu cau cua SHB (Nh& tliau phai thyc hiyn tdi thieu nhung khdng gi6i hyn o k hang myc cong vigc sau, dam bao dyt duwc Myc tisu neu trcn) Cho phep cau hinh dinh chi tarn thai vi?c truy nhap he thong neu nguai su dung thuc hien toi da ba lan truy nhap khong hop le vao h? thong. Tat ca lan truy cap khong thanh cong phai dugc ghi lai va co bao cao de theo doi. H? thong cho phep cau hinh so lan toi da d&ng nhyp khong hop 1? vao hy thong, tu do cung cap kha nang ghi nhan, ngan chan, bao cao cac hanh vi bat thucrng nay. 4 Yeu cau ve quan ly phien Phien cua nguai dung phai dugc sinh ra nglu nhien, duy nhit, kho doan Co che quan ly phien an toan. Bao gom nhung khong giai han cac kha nang: - Tao mdi khi ding nhap thanh cong - Vo hieu khi dang xuat hoac het han - Vo hieu sau thai gian khong su dung Co th ciu hinh thai gian hieu luc, thai gian cha cua phien Phien luu trong token phai dugc cau hinh: - Thuat toan m3 hoa tai thieu HMAC- SHA256 - Co ca che refresh token Phien luu trong Cookie phai dugc cau hinh: - Bat ca Securre, HTTP only, non-persistent, no-cache,... - Khong cho phep luu trcr thong tin nhay cam: tai khoan, mat khau,... trong bat ky dang nao ke ca encode, ma hoa. Thai gian cha (timeouts) cho phien lam viec phai dugc cau hinh. 5 Yeu cau ve quan ly dir lieu vao/ra Tat ca dir lieu nhap/tai len deu phai dugc kiem tra dam bao dung theo thiet ke: - Loai du lieu - Dinh dang - Bo dai Loai bo tit ca cac dir lieu khong dung Mue dy ddp ihig (R jp ung i i y du, Oup ungm tit ph&n / Khdng dip ting) Bit bu c/ Tily chyn M3 t a dap ung chi tiet Clu phin tirong ung cua giai ph&p de xuit

42 ST T Yuu c&u ctia SHB Mure d d3p (Nh& thau phai thyc hi$n t6i thieu nhimg khdng gidi hyn cac hyng myc cong viyc sau, dam b&o dyt dirge Myc tieu neu tren) Ngudi quan tri co the cai dat viec kiem tra dir lifu cho tat ca thong tin ve loai, djnh dang, do dai Co co che kiem tra va loc (Sanitize) dir lieu dam bio khong co cac truy can SQL, the XML, HTML, java script, command ky tu dac bi?t: Oxff 0x00 Ox \ / () * $ & 0x0aOxOd... Mo ta chi tiet co che, dung whitelist/backlist Tham so hoa cac truy van SQL He thong co co che ngan chan cac kieu tan cong chinh sira d& lieu Tat ca du lieu hien thj phai dirge Sanitize, Encode H? thong cho phep cau hinh che dir liyu nhay c&m. Nha thau mo ta chi tiet co che, each thuc thuc hien Thong Mo loi khi hien thi phai chuyen doi sang dyng co y nghia vdi ngirdi dung, khong hien thj chi tilt thong tin loi Tat ca du lieu tir phia ngucri dung (bao gom do, chuoi truy van, cookies, n<?i dung tieu de HTTP, SOAP va cac yeu cau dich vu Web khac, noi dung ty dong post-back va noi dung chuyen hudrng) deu phai dugc kiem duyet trude khi dugc xir ly. Tat ca d& li?u dugc m3 hoa vdi mot bang m3 ky tu chung (UTF-8 hoac Unicode) trude khi kiem duy?t. Tat ca cac dir ligu dau vao deu phai dugc xac nhan ve pham vi du kien (range), do dai (length), djnh dang (format) va kilu du lieu (datatype). Tat c3 du lieu dugc xac nhan dam bao khong the gia mao dir lieu. Bao gdm nhung khong gidi han cac kieu tan cong: - Cross-site scripting (XSS) - SQL Injection. - LDAP Injection ung (D ip (mg d ty d0, D ip ungm ot ph&n/ RhOng dip Ong) Bat bugc/ Tuy chyn B3t buoc B3t buoc B3t bugc B3t buoc B3t buoc M 6 ta dap ting chi tiet Cau phan tinnig ting ctia giai phtip de xuat

43 Yeu c&u cua SUB (Nhi thau phai thyc hiyn t6i thieu nhirng khnng gidi hyn cac hang myc cong \ ife sau, dam bao dyt dupe Myc ticu neu tren) - Command Injection Mire dy dap irng llu f wig ja> du. oap frig m$t phan Wring dap ung) Bat bu c/ Tuy chyn M6 ta dap ung chi tiet C^u pli&n tuung dug cua giai phap d& xufit Xac nhan ung dung khong bi loi tran bo d?m hosc co cac kiem soat an ninh ngan ch3n tran bo dym. Xac nhan dau vao la file upload khong bj tan cong Shell Injection 6 Yeu cau ve bao vy du- lieu Tat ca du lieu nhay cam deu dupe ma hoa bang thuat toan manh khi luu trir. Vi dy: - Su dung AES256 khi luu tru trong file cau hinh - SHA256 with salt khi luu tru trong DB Cho phep ngudi quan trj lua chon thuat toan de ma hoa khi luu tru va truyen tai Khong luu tru du lieu nhay cam (mat khau, session token, thong tin tai khoan,...) trong Url, Truong an... Tat ca cac mat khdu dupe cai d3t (hard-coded) trong ma nguon (source code) deu phai duoc gdbo. Bo nhd (Cached) va nhung ban sao luu tarn (temporary) cua nhurng thong tin nhay cam duoc luu tru tren may chu phai duoc bao ve khoi cac truy cap trai phep. Cac du lieu nay phai dupe huy bo ngay sau khi khong con nhu cau sir dung. Tat ca cac thong tin nhay cam phai dupe m3 hoa khi luu tru. M3 hoa cac du lieu c3u hinh nhay cam (vi du nhu myt khau, chuoi ket noi - connection string) dupe luu trd tren may chu. Nhirng trang chua thong tin nhay cam thi phai vo hieu hoa tinh nang luu vao bo nhd tarn (caching) d phia trinh duyet cua ngudi dung. Tuan thu tieu chuan PCIDS, khong luu tru/truyen tai dd lieu the bao gom ca dang ro va dang d3 m3 hoa. B3t buoc B3t buoc B3t buoc B3t buoc B3t buoc B3t buoc B3t buoc B3t buoc B3t buoc B3t buoc 43

44 Yeu diu cua SHB (Nhd th&u phai thyc hifn t6i thilu nhirng khong gioi hyn cdc hyng myc cong vifc sau, d&m b&o dyt duyc Myc ti u neu trsn) 7 Yeu cau ve ti'ch hyp, ket noi Sir dyng ket noi ma hoa, an toan: - TLS 1.2 trdr l n - Cipher suite Manh - Trusted Certificate Mucdg dap ung (Dip ling day dd, Dip OngitiQt phart/ KhOng dip Bat bu$c/ T6y chyn m s ta dap dug chi tiet Cau phan tiramg ung cua giai ph p de xuat Co co che xac thuc, phan quyen cho tai khoan tich hgp: - Gifta cac ung dyng, service - Database 8 Yeu cau ve nhat ky, giam sat Ung dyng phai co ca che ghi nhyn log day du bao gom: system log, application log, security log, error log... Ung dyng phai co kha nang ghi nhan dugc cac sy kiyn: - Cac thay d6i tren tai khoan/ ban ghi ngucri dung - Cac yeu csu xac thuc cua ngucri dung, ngucri quan trj - Cac thay d6i cau hinh he thong - Cac thay doi thong tin, quyen ngucri dung thanh cong/ khong thanh cong - Cac co ging truy cap du lieu nhay cam - Cac ngoai le ve he thong va truyen dft lieu. - CAc su kien gia mao - Co gilng kit noi tai nhung phien lam viec khong hgp 1?/ het han - Cac thay doi do ngucri dung too ra trong qua trinh tucmg tac vcri he thong - Cac truy xuat vao log dugc gioi han theo th&m quyen ngucri sur dyng. Cac log ghi nhan can bao gom nhung khong gidri hyn cac thong tin sau: Thai gian, tai khoan, Bia chi IP nguon, Trinh duyet/thiet bi, chuc nang, Tom tat noi dung hanh dong, Trang thai hoan thanh cua hanh dong Dam bao security log khong bi truy cap, chinh sua, xoa bo trai phep Bat buqc 44

45 Y u cau cua SHB (Nhti thau phai thyrc hiyn toi thieu nhung khong gi6*i han cic hyng myc ciing \iqc sau, dam bao dyf dirge Myc tieu neu trcn). H? thong khong ghi lai dtt lieu nhay cam nhu: mat khau hoac ma bam m t khiu cua ngudi dung, so the tin dung, thong tin giao djch... H? thong phai ho trg nguai quan tri theo ddi cac hanh dong cua nguai sir dung tren he thong mot each true quan, d y du thong tin, co the truy xuat lai dugc cac hanh dong cua nguai sir dung da thuc hien theo thdi gian Thong tin dugc luu tru- trong log theo mot djnh dang thuan tien cho vise truy xuat. Cac truy xuat vao log dugc gidi han theo th&m quyen nguai sir dung. 9 Yeu cau ve sao lira, phyc hoi Tich hgp dugc vdi he thong backup/restore dang co cua SHB Nha thau phai trinh bay phuang an de xuat cho sao luu va phuc hoi he thong bao gom nhung khong gidi han cac hang muc tang ung dung, ting ca sd du lieu H? thong phai co kha nsng tu phuc hoi du lieu, quay lai trang thai ngay trade thdi diem xay ra su co he thong 10 Yeu cau ve trien khai, cau hinh Tat ca cac thanh phan may chu, ung dung, ca sd du lieu phai dugc chuan hoa theo tieu chuan tham so cau hinh cua SHB. Loai bo cac thanh phan, cau hinh mac djnh. Chi ho trg giao thuc GET, POST. Lam r5 muc dich neu su dung giao thuc khac. Ngudi dung quan tri cua ngan hang co the cho phep hodc khong cac giao thuc HTTP (GET, POST,...) Khong cho phep nhung/ kit noi tdi noi dung ngoai SHB Cau hinh che giau thong tin may chu, web server, thu vien sir dung cua ung dung Mdc dg dip dug, (Bap ung d4> dd Q ap. imgmot ph&i/ KMngdap ung) Bat buyc/ Tu> chyn Bat bugc Bat bugc Bat bugc Mo t&dap ting chi tiit Ciu phin tirong ting cua giai phtip de xu t 45