ServiceNow PEN testing

Tender description

Summary of the work DV cleared, CHECK certified PEN tester required for a ServiceNow Plaform. ServiceNow experience is a must have requirement alongside Security testing. Expected Contract Length 5 days Latest start date Monday 13 May 2019 Why the Work is Being Done To ensure the platform is secure against cyber vulnerabilities Problem to Be Solved Security testing of application Who Are the Users This requirement is for a PEN tester to ensure the solution is secure. Existing Team Working with the Security team to ensure their requirements have been tested. Current Phase Alpha Skills & Experience • CHECK certified • ServiceNow Experience Nice to Haves work with non technical client as well as the technical team Work Location Near Milton Keynes Working Arrangments 9am -5pm, 5 days onsite at Hanslope Park due to no access from off site to the system being tested. Security Clearance Must be DV cleared Must bea CHECK certified resource Additional T&Cs The resource must have ServiceNow experience No. of Suppliers to Evaluate 3 Proposal Criteria • approach and methodology • How the approach or solution meets your organisation’s policy or goal • Estimated timeframes for the work • How they’ve identified risks and dependencies and offered approaches to manage them • Value for money Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Take responsibility for their work • Share knowledge and experience with other team members • Be comfortable standing up for their discipline • Can work with clients with low technical expertise Payment Approach Fixed price Evaluation Weighting Technical competence 65% Cultural fit 5% Price 30% Questions from Suppliers 1. May I just confirm, you have registered this as an outcome based opportunity but, only want a single pen tester at a fixed price rather than a day rate? The requirement is for 1 PEN tester for 5 days. I would also need a day rate so that if there was an extension on work due to any issues we can easily extend by the date rate. Hope that helps, 2. Hi, Is the 5 days including reporting, or is it 5 days of actual testing, plus reporting on top? Thanks. We are looking at 5 days testing and plus report writing. Once the scope of work is reviewed with the selected supplier, we can review if this testing can be completed in less than 5 days or whether a full 5 days would be needed. 3. Is there a current incumbent? Not for this phase of work