This solution, provided as a service, includes a hardware device that must be integrated into the product (and included in the price), along with a license that meets the requirements established for category X: Cybersecurity, as well as encryption at rest to ensure the privacy of the data and documents stored on the device.

The subsidizable devices in this category of digitalization solution may be: new laptops or desktop computers, with refurbished devices not being considered, and they must have at least the following characteristics:

Minimum requirements for the hardware device:

• Processor: The device's processor must have a minimum of 4 physical cores and a maximum clock speed (CPU clock) of at least 2.9 GHz (in turbo mode or equivalent). Its release date must be after the first quarter of 2023.
  
  
• Performance: The device's processor must have achieved a minimum score of 15,000 on PassMark Software as of May 13, 2024.
  
  
• RAM: The device must have a memory of 16 GB DDR4 or equivalent superior technology.
  
  
• Storage: The device must provide a minimum of 512 GB of internal SSD NVMe storage. All data and documents contained on the computer must be protected by encryption at rest to ensure their security. The encryption passwords must be provided by the Adhering Digital Agent to the beneficiary at the time of device delivery.
  
  
• Operating System: The operating system must be professional-grade. It will be provided with each device and will come pre-installed and factory licensed.
  
  
• Graphics Card: The device must have a dedicated or integrated graphics card with a minimum resolution of Full HD. If it is a laptop, it must support the use of two monitors.
  
  
• Integrated Sound Card: The device must have an integrated sound card.
  
  
• Wireless Connectivity: The device must have an integrated wireless network card compatible with the Wi-Fi 6 standard or higher. It must also provide Bluetooth 5.1 or higher connectivity.

• Input/Output Interfaces:
  • At least 2 USB 3.0 or higher ports, Type A.
  • At least 1 USB 3.0 or higher port, Type C. In the case of portable devices, at least one of them with DisplayPort + Power Delivery + USB functionality.
  • One RJ-45 Ethernet port (1 Gbps).
  • One HDMI 1.4 or higher port.
  • Audio I/O: At least one 3.5 mm combo jack interface for headphones and microphone.
  • In the case of a laptop, providing interfaces through docking station devices, port replicators, or similar is allowed.
    
    
• Screen: In the case that the device is a laptop, it must have a minimum screen size of 13 inches.
  
  
• Teclado: En el caso de los ordenadores de sobremesa, deberá proveerse un teclado español para asegurar la funcionalidad completa del dispositivo.
  
  
• Mouse: Optical mouse equipped with at least two buttons and scroll function that ensures the full functionality of the device. In the case of laptops, the integrated mouse or touchpad will be accepted.
  
  
• Webcam: At least HD resolution. Integrated webcam with a privacy shutter in the case of laptops.
  
  
• Battery: In the case of laptops, smart battery or similar type.
  
  
• Smartcard Reader (DNI-e): Smartcard reader that complies with the ISO-7816 standard. Integrated or non-integrated devices will be accepted.
  
  
• Certifications: In the case of desktop and laptop computers, they must have at least one certification of the following types (or similar):

  • ENERGY STAR®.

  • EPEAT™ Silver Registered.

  • TCO.

• Robustness: MIL STD 810H certification or equivalent. They must meet a minimum of 5 methods, including: high temperature, low temperature, and humidity.

• The equipment will comply with the energy-related requirements established in accordance with Directive 2009/125/EC for servers and data storage, or computers and computer servers or electronic displays. The equipment used will not contain the restricted substances listed in Annex II of Directive 2011/65/EU, except when the weight concentration values in homogeneous materials do not exceed those listed in that annex. In these acquisitions, measures will be activated to ensure the purchase of energy-efficient equipment that is fully compliant with the “Code of Conduct for ICT” of the European Commission, and measures will be taken to increase the durability, repairability, upgradability, and reuse of the products and installed electrical and electronic devices. At the end of the useful life of the acquired digital technology, it must be treated in accordance with current legislation (including that the equipment will undergo preparation for reuse, recovery, or recycling operations, or appropriate treatment, including the removal of all fluids and selective treatment in accordance with Annex VII of Directive 2012/19/EU) and will not have a negative impact on environmental objectives.

• In order to facilitate support tasks, remote management of computer equipment will be allowed through MDM solutions, equipment platforming, automatic recovery, or similar methods, enabling remote management, restoration, and optimal operation of the equipment. In such cases, compliance with current data protection legislation and the guarantee of digital rights, as well as any applicable regulations for these systems, must be ensured. The information collected in such cases will be the minimum necessary to provide the support service.

• Wiring: The wiring for powering the devices is included, as well as an HDMI cable for the connection between the computer and monitor, if applicable.

• Secure Boot: The device will have protective measures for the boot process against security attacks through malicious code, such as Secure Boot or similar.
  
  
• TPM, T2, or Similar Chip, Depending on the Platform: The device will feature a TPM or T2 chip to strengthen system integrity, mitigate risks of cyberattacks, and provide a more solid foundation for security.
  
  
• Biometric Identification: The device will implement (via hardware or operating system) biometric security elements, such as a camera for facial recognition or a fingerprint reader, to enhance access security to the system.

Option for adhesive label:

The advising agent will affix an adhesive label to each laptop or computer and monitor on a visible surface with the following minimum technical characteristics:

Material:

• Wear-resistant.
• Water-resistant.
• Solvent-resistant.
• Light-resistant.
• High-temperature resistant.
• Abrasion-resistant.
  
  High break resistance.

Adhesive:

• Vandal-resistant adhesive.
• Permanent adhesive.
• Universal adhesive adaptable to different surfaces.
• Weather-resistant.
• Resistant to temperatures from -40 ºC to +145 ºC.
  

Printing:

• Accepts logos.
• Long-lasting indelible ink.

Option for engraving:

As an alternative to affixing labels, each laptop or computer + monitor can be identified by engraving on clearly visible surfaces, using methods that are indelible and non-separable. Accepted methods include pantography, die-cutting, thermal engraving, or laser engraving. Any other method will require prior approval from Red.es.

Minimum requirements for maintenance and support service:

The Adhering Digital Agent must provide a Maintenance and Support service from the delivery of the devices that make up the solution until the completion of Phase 2 execution:

• The delivery of the device must be made within Spain, and the digital agent must ensure the proper functioning of the delivered computing devices.

• The device will be delivered already configured (at the hardware and software level), including all necessary updates.

• There will be a support service for the beneficiary to resolve incidents, breakdowns, or configuration problems.

• The support service will assist the beneficiary for a minimum of 8 hours a day for 5 working days a week (8x5). It must have an email to receive notifications of breakdowns or incidents, with a minimum service availability from 09:00 to 17:00 hours, Monday to Friday.
  
  

• All necessary repairs must be carried out either through remote support or, if necessary, on-site at the location where the computing device was delivered. If it is not possible to make the repair on-site, the costs of packaging and transportation of the damaged equipment will be the responsibility of the digital agent. These repairs include both breaks or damages at the device level and configuration problems, as long as they are based on the correct use of the device.
  
  

• The maximum repair time for the breakdown, from the communication of the incident to its resolution, will be 5 working days, with options such as on-site manufacturer warranty extension or equivalent mechanisms. If the repair is not achieved within that timeframe, a replacement device of equal or superior quality must be provided until the complete repair is made. The costs of delivering this replacement device, including packaging and transportation, will be borne by the digital agent.
  
  

Minimum requirements for the cybersecurity solution:

The device must incorporate a cybersecurity solution with the minimum requirements associated with the categories of solution X: Cybersecurity:

• Antimalware: The solution must provide a tool that scans the device, its internal memory, and external storage devices.
  
  
• Antispyware: The solution must provide a tool that detects and prevents spyware malware.
  
  
• Secure Email: The solution must provide email analysis tools with the following features:
  
  • Antispam: Detects and filters out unwanted emails.
  • Antiphishing: Detects emails with links or malware suspected of being used to steal credentials.
    
    
• Safe Browsing: Content control and anti-adware to prevent malicious ads.
  
  
• Threat Analysis and Detection: The solution must allow for understanding the behavior of known and new threats.
  
  
• Network Monitoring: The solution must provide tools that analyze network traffic and alert for threats.
  
  
• Initial Configuration and Security Updates: An initial configuration must be performed for proper use, along with the respective updates for malware signatures and other threat detection data, as well as the required periodic security software updates.
  
  
• Special Training Requirements: In addition to common training requirements, the training provided to the beneficiary must include guidance for configuring the security software, as well as a cybersecurity awareness kit to complement the solution with human firewall skills.

Possibility of acquiring associated hardware:

Once Phase II of the service is completed, the beneficiary may acquire ownership of the hardware by paying the adhering Digital Agent the residual value of the equipment.

The adhering Digital Agent is obliged to offer the option to purchase the Secure Workspace to the beneficiary. If the beneficiary does not pay the agreed residual amount, the adhering Digital Agent may recover the equipment.

The adhering Digital Agent must inform the beneficiary of the purchase value of the equipment at the end of the 12 months of service corresponding to Phase II. This amount that the beneficiary must pay will be the acquisition value of the equipment and must be reflected in the Digital Solutions Provision Agreement. At most, the purchase value will be 15% of the amount of the signed agreement (amount of the solution).