IT services: consulting, software development, Internet and support

Tender description

Specialist expertise for the provision of penetration testing and security vulnerability assessment of the Department’s infrastructure. The annual security vulnerability assessment will cover externally hosted web systems, including its school facing (Esinet) eGovernment systems and public website, its DMZ-based public IP addresses and MS Azure hosted site plus an assessment of all its internal critical infrastructure including servers, switching, Security (Firewall and SIEM), wireless and mobile device management systems. The output will be a report based on best practice advice and recommendations on findings from any completed vulnerability assessments. Given the sensitive nature of the Department’s data subjects, the testing days will be required to be completed onsite at the Department’s offices. Specialist expertise for the provision of penetration testing and security vulnerability assessment of the Department’s infrastructure. The annual security vulnerability assessment will cover externally hosted web systems, including its school facing (Esinet) eGovernment systems and public website, its DMZ-based public IP addresses and MS Azure hosted site plus an assessment of all its internal critical infrastructure including servers, switching, Security (Firewall and SIEM), wireless and mobile device management systems. The output will be a report based on best practice advice and recommendations on findings from any completed vulnerability assessments. Given the sensitive nature of the Department’s data subjects, the testing days will be required to be completed onsite at the Department’s offices.