Provision of an ICT Security Services Solution

Tender description

Tourism Ireland wishes to invite tenders from suitably qualified providers to demonstrate how they would provide a range of ICT security services, including to; i. Perform external and internal vulnerability assessments and penetration tests on Tourism Ireland’s servers and systems as required. ii. Perform unauthenticated and authenticated application security testing on internal and external Tourism Ireland web sites and applications as required. iii. Perform automated and manual application security testing on internal and external Tourism Ireland web sites and applications as required. iv. Present findings of such testing in a clear concise report format in a timely manner. v. Liaise with Tourism Ireland’s ICT Security Officer in relation to all security testing carried out. vi. Be available to provide advice to the ICT Security Officer and third party suppliers in relation to any queries over vulnerabilities discovered and recommendations for remediation put forward in the security report. vii. Take a proactive approach in keeping Tourism Ireland ICT Security Officer informed of the latest security threats and vulnerabilities relative to Tourism Ireland’s estate. viii. Work to define and participate in ICT Security Projects, where necessary. ix. Attend regular meetings including formal Quarterly Business Reviews (QBRs) The above list of service elements forming the Services are indicative only, are not exhaustive and are subject to change. The Contract Period will be for three years subject to budget and annual performance review, and other factors. If the services provided are deemed to be satisfactory the contract may, at the discretion of Tourism Ireland, be extended for a further year. It is anticipated that the Contract will commence on 1st November 2020. Tourism Ireland’s detailed requirements are set out in the Specification Document attached at Schedule 1 and the RFT documentation available for downloading.