Pen testing

Tender description

Why the Work is Being Done Provide an independent programme of penetration and security assessment to focus on the vulnerabilities and security risks present in the infrastructure consistent with the requirements for a PSN ITHC. It is a requirement for connection with the PSN that regular CHECK ITHC’s are undergone. GCC are already connected to PSN and this is the second reconnection assessment. It is critical to GCC to demonstrate that their security controls are consistent with the requirements set out in the Cabinet Office ‘IT Health Check Supporting Guidance’ document available on the Internet from the Cabinet Office website and published June 2013. Problem to Be Solved Pen testing for PSN compliance Who Are the Users It is critical to GCC to demonstrate that their security controls are consistent with the requirements set out in the Cabinet Office ‘IT Health Check Supporting Guidance’ document available on the Internet from the Cabinet Office website and published June 2013. Early Market Engagement Work Already Done Existing Team GCC ICT Team Current Phase Not applicable Work Location Onsite in Gloucestershire and remotely Working Arrangments Work to take place over period of up-to 1 month Security Clearance Additional T&Cs Skills & Experience Relevant Certifications Share their findings with relevant parties Nice to Haves Provide evidence that they have worked with other local government companies No. of Suppliers to Evaluate 3 Proposal Criteria Technical solution Time frames Methodology Compliance Cultural Fit Criteria Take responsiblity for their work Share knowledge and experience with other members of the team Payment Approach Fixed price Assessment Method Written proposal Evaluation Weighting Technical competence 40% Cultural fit 20% Price 40% Questions from Suppliers Budget range