red team assessment

Tender description

Why the Work is Being Done RuTC requires a “Red team” exercise using appropriate tactics, techniques and procedures to emulate a real-world threat with the goal of training our (Blue) team and measuring the effectiveness of the people, processes, and technology used to defend our IT environment. This work should be completed before the end of October 2020 - and sooner if possible. Problem to Be Solved We anticipate use of the latest tactics used by real world threat actors to aid with the successful delivery of the services which we have split into a 3-stage scenario approach, to help us gain clarity on the current security risks associated with the areas reviewed. Bidders are required to detail their approach, tools, tactics and procedures regarding the execution of the three scenarios below: • Scenario 1: Assumed compromise • Scenario 2: Virtual Desktop Infrastructure (VDI) breakout • Scenario 3: Ransomware Bidders should advise the steps that they intend to take for each scenario. For example: • Testing • Execution • Assessment • Reporting Deliverables 1) Report to include sufficient technical detail to enable defence against the threat types addressed, and an assessment of the effectiveness of existing measures against penetration. 2) Workshop at the end of the assessment to achieve effective knowledge transfer. Response Format: Scenario 1: Assumed compromise..........Days Scenario 2: Virtual Desktop Infrastructure (VDI) breakout..........Days Scenario 3: Ransomware..........Days Detection and response workshop..........Days Reporting..........Days Total Days................ Total fees inc VAT £...................... Bidders are welcome to submit further information to supplement the above table, particularly explaining how the services will be provided and any options available to RuTC. Who Are the Users As a Further Education College IT Department, we need to ensure that all networks and systems are secure from attack in order to protect data and ultimately the data subjects. We can provide a standard-build computer and dedicated user account to assist with the 'assumed compromise' scenario. Early Market Engagement Work Already Done Existing Team The College has a small dedicated IT team with a mixture of skills and abilities. Current Phase Not started Work Location Twickenham, Middlesex, for the workshop element Remote working is envisaged for the most part Working Arrangments We are open to suggestions on appropriate methods of working to complete this work. Security Clearance Bidders should provide details of their security credentials and the standards to be employed in this work Additional T&Cs The basis of the price shall be fixed and inclusive of all costs for the contract term. Proposed prices should remain valid for 90 days from the date of the submission. Skills & Experience Demonstrate considerable recent experience in delivering the defined requirements Demonstrate ability to deliver within the timescales Produce a report which is useful to management and engineers alike Keep all data 100% safe Maintain confidentiality throughout so as not to compromise outcomes Provide two relevant references to confirm the above Nice to Haves No. of Suppliers to Evaluate 3 Proposal Criteria Approach and methodology How the proposed solution meets the goal as described Risk Management approach Value for Money Cultural Fit Criteria Place a strong value on learning Demonstrate Integrity Work with us as a team Aspire to excellence Demonstrate respect for others Payment Approach Capped time and materials Assessment Method Case study Work history Reference Evaluation Weighting Technical competence 30% Cultural fit 10% Price 60% Questions from Suppliers No questions have been answered yet Budget range maximum £30,000 gbp inc vat