2018/2019 Scope for PSN Health-Check – Oldham Council

Tender description

Why the Work is Being Done This work needs to be carry out on council obligation to achieve Public Sector Network (PSN) compliant in order to demonstrate that Oldham council will needs to require PSN certification. Problem to Be Solved To achieve PSN accreditation Who Are the Users To achieve the PSN certification, part of the process is to asses the IT estate against any kind of threat and vulnerability, and take action to mitigate in order to achieve PSN certification. Early Market Engagement Work Already Done Existing Team Working with Unity Partnership Information Security team Current Phase Not applicable Work Location Oldham Council, Civic Centre, Oldham Ol1 1NY Working Arrangments Working with Unity Information Security Manager Security Clearance Baseline personnel security standard Additional T&Cs Skills & Experience CREST CRT certified or equivalent understand complex computer systems and technical cyber security terms carry out remote testing of a client's network or onsite testing of their infrastructure to expose weaknesses in security work with clients to determine their requirements from the test, for example the number and type of systems they would like testing plan and create penetration methods, scripts and tests advise on methods to fix or lower security risks to systems consider the impact your 'attack' will have on the business and its users create reports and recommendations from your findings present your findings, risks and conclusions to both technical and non-technical audiences understand how the flaws that you identify could affect a business, or business function, if they're not fixed Minimum 3 years frequent pen test experience Review your findings and feedback to clients Analyse the outcomes and make recommendations for security improvements Previous pen testing experience on local or Government organisation pen test would be highly advantageous Nice to Haves No. of Suppliers to Evaluate 3 Proposal Criteria How the approach or solution meets your organisation’s policy or goal How they’ve identified risks and dependencies and offered approaches to manage them Value for money Cultural Fit Criteria Work as a team with our organisation Take responsibility for their work Share knowledge and experience with other team members Challenge the status quo Payment Approach Fixed price Assessment Method Written proposal Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers No questions have been answered yet Budget range