Provision of external audit services

Overview

The European Union Agency for Cybersecurity (ENISA) intends to award a single framework service contract (procedure ENISA/2026/MVP/0023-EXA) for external audit services to provide opinions on the reliability of its provisional and final annual accounts for financial years 2026–2029. The contract duration is up to 48 months and audits must comply with International Standards on Auditing (ISA) and International Standards of Supreme Audit Institutions (ISSAI). The procurement is published as a planned negotiated procedure for a middle/low value contract and the estimated total value is not disclosed. Expressions of interest must be submitted electronically via the EU Funding & Tenders Portal using an EU Login account between 18/09/2026 and 30/09/2026 23:59 Europe/Athens with the negotiated procedure indicative launch on 02/10/2026.

Highlights

Opportunity summary

Essential facts

ENISA intends to award a single framework service contract (planned negotiated low/middle value procedure) for external audit services covering ENISA's provisional and final annual accounts for the financial years 2026, 2027, 2028 and 2029. Audits must comply with ISA and ISSAI standards. 1

Who can apply:Qualified service providers / audit firms able to deliver statutory-style audits in line with ISA and ISSAI; electronic submission via EU Login is required.

  1. 1Contracting authority: European Union Agency for Cybersecurity (ENISA).
  2. 2Procedure: planned negotiated procedure for low/middle value contract; framework agreement without reopening.
  3. 3Maximum duration: 48 months; covers audits for 2026–2029.
ItemDetail
ReferenceENISA/2026/MVP/0023-EXA
Main CPV79210000 - Accounting and auditing services
Submission methodElectronic via EU Login
Expression of interest start18/09/2026 (Europe/Brussels)
EOI deadline30/09/2026 23:59 (Europe/Athens)
Indicative launch of procedure02/10/2026 (Europe/Athens)

No estimated total value is published in the notice. SMEs suitability indicator:false. Further procurement documents and formal call will be published on the EU Funding & Tenders Portal Tender page. 1

Footnotes

  1. 1Tender notice and future tender documents available at the EU Funding & Tenders Portal: ec.europa.eu

Find a Consultant to Support You

Breakdown

Opportunity summary

The European Union Agency for Cybersecurity (ENISA) intends to award a single framework service contract (framework agreement without reopening of competition) for up to 48 months to a service provider to deliver external audit services. The contract covers issuing an opinion on the reliability of ENISA's provisional and final annual accounts for four financial years: 2026, 2027, 2028 and 2029. Audits must be performed in compliance with International Standards on Auditing (ISA) and International Standards of Supreme Audit Institutions (ISSAI). The procurement is published as a planned negotiated procedure for middle/low value contract and is listed on the EU Funding & Tenders Portal. EU Login account is required to submit an expression of interest EU Funding & Tenders Portal 1.

Lead contracting authority:European Union Agency for Cybersecurity (ENISA) (lead contracting authority).

Main procurement classification (CPV):79210000 - Accounting and auditing services.

Key facts and administrative data

  1. 1Procedure identifier: ENISA/2026/MVP/0023-EXA
  2. 2Procedure type: Planned negotiated procedure for middle/low value contract
  3. 3Contract nature: services; framework agreement, without reopening of competition
  4. 4Maximum contract duration: 48 months
  5. 5Scope of work: external audit services including opinion on provisional and final annual accounts for 2026–2029; audits must comply with ISA and ISSAI standards
  6. 6Main CPV: 79210000 - Accounting and auditing services
  7. 7Submission method for expression of interest: Electronic via EU Login on the Funding & Tenders Portal
  8. 8SME suitable indicator: false (procurement not specifically targeted to SMEs)
MilestoneDate / Timezone
Start date for expression of interest18/09/2026 Europe/Brussels
Deadline for expression of interest30/09/2026 23:59 Europe/Athens
Indicative date of launch of the negotiated procedure02/10/2026 Europe/Athens

Structured categorisation and requirements

Eligible Applicant Types:Professional audit and accounting service providers; external audit firms; large audit networks; independent auditors; accounting practices; legal entities able to demonstrate competence and capacity to perform external audits under ISA and ISSAI standards. Universities and research institutes are not the targeted provider type unless they operate an eligible audit service entity. Public bodies or national supreme audit institutions could theoretically bid if legally permitted and qualified; consortiums are not indicated as required in the notice (single provider framework). The procurement is not specifically limited to SMEs; the SME suitable indicator is false.

Funding Type:Procurement / service contract (tender). This is not a grant, loan, or equity instrument. It is a paid services contract awarded through public procurement.

Consortium Requirement:Single framework service provider required. The notice describes awarding a single framework contract to one service provider. No requirement for multiple-applicant consortia is stated; however bidders could present consortium arrangements only if allowed under the contracting rules and if the bidder demonstrates required capacity and qualifications.

Beneficiary Scope (Geographic Eligibility):The contracting authority is an EU agency (ENISA). The notice is published on the EU Funding & Tenders Portal and requires EU Login. Implicit geographic eligibility is EU/EEA participants and legal entities able to contract with EU institutions; the notice does not explicitly limit bidders to Member States only. The timeline references Europe/Brussels and Europe/Athens timezones. Applicants should assume EU-wide eligibility unless the formal tender documents specify further nationality or establishment rules.

Target Sector:Accounting and auditing services; public sector financial audit; public sector financial assurance. Sector context: cybersecurity agency client, but the work is financial audit rather than an ICT or cybersecurity technical project.

Mentioned Countries:No specific countries named as bidders. The publication context identifies EU and Europe timezones (Europe/Brussels, Europe/Athens). Lead authority is ENISA, an EU agency. Therefore the relevant region is the European Union (EU).

Project Stage (expected maturity):Operational delivery stage: ready for procurement of professional service delivery. The activity requires mature, fully operational audit capability and demonstrated experience in statutory and/or external audits in accordance with ISA and ISSAI standards.

Funding Amount:Estimated total value: not specified in the published notice. The procurement is described as middle/low value (planned negotiated procedure for middle/low value contract). No monetary ceiling or budget figure is provided in the scraped content.

Application Type:Planned negotiated procedure: initial public publication announcing the contracting authority's intention to launch a future negotiated low or middle value procedure. The immediate step is an open expression of interest submitted electronically via the Funding & Tenders Portal using EU Login. Following the expression of interest period, the authority will launch the negotiated procedure (indicative date provided).

Nature of Support:Monetary payment in exchange for services under a procurement contract. The successful bidder will be paid under the contractual terms for providing audit services. The opportunity does not offer non-monetary services as the main support; it is a paid contract.

Application Stages:Two main stages are indicated: (1) Expression of interest (electronic submission via EU Login during the specified period); (2) Launch and conduct of the negotiated procedure (selection and award). Further internal selection or evaluation phases will occur during the negotiated procedure as defined in the forthcoming tender documents.

Success Rates:Not indicated. As a single-award negotiated procedure for a middle/low value contract, success rates cannot be determined from the notice. Competition level depends on number of expressions of interest and participants in the negotiated procedure.

Co-funding Requirement:No co-funding is required. This is a procurement of services; the contractor will be remunerated under the contract. The notice contains no requirement for financial contribution or co-financing from bidders.

Application and documentation — practical details

How to express interest and next steps:Interested bidders must submit an electronic expression of interest via the Funding & Tenders Portal. An EU Login account is required. The published milestones set the expression of interest window: start 18/09/2026 (Europe/Brussels) and deadline 30/09/2026 23:59 (Europe/Athens). The negotiated procedure is indicated for launch on 02/10/2026 (Europe/Athens). The notice explicitly states this publication is an announcement of intent and not the final call for tenders. Full procurement documents, technical specifications, evaluation criteria, selection and award sub-criteria, contract terms and estimated budget will be made available at the planned launch of the negotiated procedure.

  • Submission channel: Funding & Tenders Portal (electronic) using EU Login
  • Required standards: audits must comply with ISA and ISSAI
  • Scope: opinions on provisional and final annual accounts for 2026–2029
  • Contract form: single framework agreement, up to 48 months
  • CPV classification: 79210000

Templates and application form structure (what to prepare)

The published notice does not include full tender documents or application templates. Typical procurement documentation for an external audit services tender from an EU agency will include: request to participate or expression of interest form (electronic), standard forms for legal and financial identification, declaration on exclusion and selection criteria (eligibility, capacity and financial/technical solvency), a technical offer template (methodology, team composition, quality assurance, compliance with ISA/ISSAI), and a financial offer template (rates, estimated fees, timesheets, potential travel and subsistence). Bidders should prepare the following documents in advance in electronic format for upload to the portal once the negotiated procedure is launched:

  1. 1Company legal registration documents and proof of establishment
  2. 2Professional and statutory auditor registration or certificates demonstrating eligibility to issue audit opinions under ISA/ISSAI
  3. 3List of references and past experience in auditing public sector entities or EU institutions, including scope and dates
  4. 4Curricula Vitae of key audit team members showing professional qualifications (e.g., certified public accountants), years of experience, and roles in comparable audits
  5. 5Quality assurance and audit methodology statement referencing ISA and ISSAI compliance and approach to audit planning, risk assessment, sampling and reporting
  6. 6Organisational capacity statement (staffing plan, back-up arrangements, confidentiality and independence safeguards)
  7. 7Financial offer covering fees, rates, and invoicing modalities
  8. 8Declarations on conflicts of interest, independence and compliance with procurement rules
  9. 9Completed standard portal forms for exclusion and selection criteria when provided

Evaluation and contractual aspects (anticipated)

The notice does not publish evaluation criteria or weightings. As a procurement for external audit services for an EU agency, evaluation typically combines compliance checks (eligibility, absence of exclusion grounds), selection criteria (economic and financial capacity, professional and technical capacity, relevant experience) and award criteria (quality of technical proposal, methodology, team qualifications and price). Independence and ability to comply with ISA and ISSAI will be critical. The final contract will be a framework agreement enabling ENISA to call off audit engagements for the specified financial years under the agreed terms. Renewal or extension terms are not indicated beyond the 48-month framework duration.

Risks, clarifications and recommendations for bidders

Key risks and practical recommendations:ensure professional independence from ENISA, prepare evidence of compliance with ISA and ISSAI, compile strong public-sector or EU audit references, prepare signed declarations and up-to-date professional registrations, and ensure timely EU Login setup and portal readiness before the expression of interest window. Monitor the Funding & Tenders Portal for the publication of the negotiated procedure documents and any Q&A that may clarify tender requirements.

ENISA has published a Q&A function on the portal but no public Q&A items were present in the scraped content at the time of publication. Bidders should use the portal Q&A to seek clarifications once the negotiated procedure is launched.

Concluding summary

This procurement notice announces ENISA's intent to procure external audit services through a planned negotiated procedure for a middle/low value contract. ENISA will award a single framework agreement for up to 48 months to a qualified audit firm to perform audits and deliver opinions on ENISA's provisional and final annual accounts for financial years 2026 to 2029, in accordance with ISA and ISSAI standards. Interested and qualified auditing firms should prepare to submit an electronic expression of interest via the EU Funding & Tenders Portal during the stated window (18/09/2026 to 30/09/2026) and must hold an EU Login account. Detailed tender documents, including specific selection and award criteria, contractual terms and possible estimated budget, will be published when the negotiated procedure is launched (indicative date 02/10/2026).

Footnotes

  1. 1Funding & Tenders Portal opportunity page: ec.europa.eu

Short Summary

Impact

Secure independent, ISA- and ISSAI-compliant audit opinions on the reliability of ENISA's provisional and final annual accounts for financial years 2026–2029 to ensure financial assurance and accountability.

Applicant

Providers must be capable of delivering external public-sector financial audits in line with International Standards on Auditing (ISA) and International Standards of Supreme Audit Institutions (ISSAI), with proven experience on similar statutory or EU/public-sector audits and qualified audit teams.

Developments

Accounting and auditing services focused on issuing audit opinions and performing full external audits of an EU agency's annual accounts for the 2026–2029 cycle.

Applicant Type

Large audit firms / large corporations and established professional audit service providers (also potentially profit SMEs with requisite public-sector audit capacity).

Consortium

Single framework service provider is sought (framework without reopening of competition), so the procurement targets a single applicant for award rather than a mandatory consortium.

Funding Amount

Estimated total value not published in the notice; procurement described as a middle/low value contract (no explicit euro amount provided).

Countries

European Union (EU) / EEA legal entities are implicitly relevant since the contracting authority is an EU agency (ENISA) and submissions require EU Login; no specific Member State restriction stated.

Industry

Accounting and auditing services (public-sector financial audit) targeted at ensuring financial assurance for an EU cybersecurity agency.

Additional Web Data

This is a planned negotiated procedure for a middle or low value service contract issued by the European Union Agency for Cybersecurity, ENISA. It seeks a single framework contractor to provide external audit services and to issue an opinion on the reliability of ENISA's provisional and final annual accounts for financial years 2026, 2027, 2028 and 2029, with the audit performed in line with ISA and ISSAI standards 1.

Opportunity at a glance

FieldDetails
Procedure identifierENISA/2026/MVP/0023-EXA
Opportunity typePlanned negotiated procedure for middle or low value contract
Contract natureServices
Lead contracting authorityEuropean Union Agency for Cybersecurity, ENISA
CPV code79210000 Accounting and auditing services
FrameworkSingle framework service contract, without reopening of competition
Maximum duration48 months
Public value informationEstimated total value not published in the notice
Expression of interest start18/09/2026
Expression of interest deadline30/09/2026 23:59 Europe/Athens
Indicative launch of negotiated procedure02/10/2026
Submission methodElectronic only
Access requirementEU Login account required

What the contract covers

The service provider will be expected to deliver external audit services for ENISA, specifically the audit opinion on the reliability of the agency's annual accounts across four consecutive financial years. The notice indicates a maximum contract duration of 48 months, which aligns with the 2026 to 2029 audit cycle.

Who can apply

The published notice is an expression of interest stage and does not yet set out detailed exclusion criteria, minimum turnover thresholds, consortium rules, or professional registration requirements. In practical terms, applicants should be capable of delivering public sector external audit services and of working to ISA and ISSAI standards. Interested parties must submit electronically and need an EU Login account to do so.

Key procedural points for applicants

  1. 1This notice is not yet the call for tenders, but a publication of ENISA's intention to launch a future negotiated procedure.
  2. 2Expression of interest opens on 18 September 2026.
  3. 3Expression of interest closes on 30 September 2026 at 23:59 Athens time.
  4. 4The indicative launch date for the negotiated procedure is 2 October 2026.
  5. 5Submission is electronic and must be made through the address for expression of interest provided in the portal.
  6. 6The framework agreement is described as being without reopening of competition.
  7. 7The public notice does not disclose the estimated contract value.

Applicant takeaways

The opportunity is relevant to audit firms and other service providers with demonstrated capability in external audit, public sector account auditing, and compliance with international audit and supreme audit institution standards. Because the notice is only a planned procurement announcement, applicants should monitor the portal closely for the actual negotiated procedure documents, technical specifications, award criteria, and any minimum eligibility evidence once the invitation is launched.

Footnotes

  1. 1Official portal notice: Provision of external audit services.

Update Log

No updates recorded yet.

Discover with AI

Let our intelligent agent help you find the perfect funding opportunities tailored to your needs.

Try AI Agent →

EU Grant Database

Explore European funding opportunities in our comprehensive, up-to-date collection.

Browse Database →

Stay Informed

Get notified when grants change, deadlines approach, or new opportunities match your interests.

Configure Notifications →

Track Your Favorites

Follow grants you're interested in and keep them organized in one place. Get updates on changes and deadlines.

Use the Follow button above ↑

Audit environnemental interne du système de management environnemental EMAS

TenderForthcoming

Planned procurement by the General Secretariat of the Council of the European Union (procedure CONSILIUM/2026/LVP/0022-EXA) for a four-year framework agreement to provide internal environmental audit services for its EMAS environmental m...

October 28th, 2026

Purchase of 14” business laptops with a three-year warranty for the European Union Agency for the Cooperation of Energy Regulators

TenderForthcoming

Planned procurement by the European Union Agency for the Cooperation of Energy Regulators (ACER) for 14-inch business laptops with a three-year warranty, classified under CPV 30213100 (portable computers). This prior information notice (...

October 27th, 2026

Enhancing Resilience of Eastern Border: Latgale – where the European Union begins

TenderForthcoming

European Commission DG COMM invites economic operators to bid for a planned negotiated tender (ExA reference EC-COMM/RIX/2026/MVP/0517-EXA) to deliver a 13-month integrated communications campaign titled "Enhancing Resilience of Eastern...

October 16th, 2026

Lieferung von Getränken

TenderForthcoming

This tender (reference EIOPA/2026/MVP/0006-EXA) seeks a supplier under a framework agreement to provide regular deliveries of table water and other non-alcoholic beverages, including collection/return of empty containers, to EIOPA (lead)...

October 19th, 2026

Medical Service Provider European Commission Representation staff

TenderForthcoming

Planned European Commission procurement (DG COMM) to award a framework agreement to a medical centre in Malta (procedure EC-COMM/MLA/2026/LVP/0571-EXA) to provide annual preventative and recruitment medical examinations for Representatio...

October 19th, 2026

Study "Enabling a platform for AI-based applications in Agri-Food – Boosting innovation, and AI uptake - Markets, Interoperability, App classification and review – Making Apply AI happen"

TenderForthcoming

Planned European Commission service procurement to deliver a study assessing the feasibility, technical design, interoperability, governance and policy options for a European open‑source digital marketplace for artificial intelligence ap...

October 26th, 2026

Data analysis of OSH Barometer and other indicators for the state and trends report.

TenderForthcoming

EU-OSHA plans a negotiated procurement (OSHA/2026/LVP/0027-EXA) for data review, statistical analysis and data visualisation to update the quantitative evidence underpinning the OSH in Europe: State and Trends report. The maximum budget...

October 16th, 2026

Blue Book traineeship - Welcome Conference External Venue Hire

TenderForthcoming

The European Commission (DG HR) plans a negotiated procurement to hire an external venue and related event services for approximately six Blue Book trainees’ Welcome Conferences to be held in Brussels during 2027–2029 under a framework a...

October 29th, 2026

Purchase of two workstations for Data Room

TenderForthcoming

The European Commission (DG CNECT) plans a negotiated low/middle value procurement (procedure EC-CNECT/2026/LVP/0206-EXA) for the supply and delivery of two identical high-performance, movable workstations intended for secure Data Rooms...

November 2nd, 2026

Provision of coffee, tea and complementaries

TenderForthcoming

The European Institute for Gender Equality (EIGE) plans a negotiated procurement (reference EIGE/VNO/2026/LVP/0008-EXA) for the supply and delivery of coffee, tea, sugar and related products and the rental of a coffee machine, to be awar...

October 26th, 2026

Provision of services related to research on determinants for support of military spending build-up and EU-level defence cooperation

TenderForthcoming

European Commission DG JRC invites expressions of interest for a planned negotiated procurement (ExA) for online survey services to research determinants of public support for military spending and EU-level defence cooperation. The contr...

October 19th, 2026

LEGAL ADVISORY SERVICES for the implementation of the Battery Booster facility

TenderForthcoming

The European Commission (DG GROW) has published a planned procurement (EC-GROW/2026/MVP/0141-EXA) for specialised legal advisory services to support preparation, negotiation and implementation of loan documentation under the Battery Boos...

October 27th, 2026