Penetration Testing

Tender description

The NHS Wales Informatics service requires external assurance via certified testers for a number of National Services as well as their supporting infrastructure across NHS Wales. The penetration testing required by NWIS falls into two categories: • Infrastructure • Application The Testing service will need to support the differing needs of multiple projects including: • Infrastructure review – firewalls, switches etc • Infrastructure Hardware review – VM Ware environment • National Patient-centric Services • Clinical Support Services The testing needs of these projects will vary but can be broken down into 8 specific types of testing: 1. Network Penetration test 2. Network Vulnerability assessment (Config) 3. Web Application Test 4. Mobile Device Testing 5. Wireless Network Testing 6. VM Ware Infrastructure test 7. VPN/ Gateway services testing 8. Bespoke Application testing The testing service must be expandable to cater new developments. The delivery of this contract is via a work-package based approach.