Penetration testing and security consultancy

Tender description

Scottish Natural Heritage (operating as 'NatureScot') wish to appoint one or more consultants to provide penetration testing and other ad hoc security consultancy services. The call-off contract(s) will be for 24 months initially, with the option to extend by a further 12 months. The contract is also expected to be used by Forestry & Land Scotland (FLS) and the estimated contract value detailed below is based on combined contract spend by both NatureScot and FLS. Full details of the services required and evaluation criteria will be set out in a Statement of Requirements at Stage 2, but the three key areas are: - external/internal manual penetration testing, social engineering & firewall configuration/testing, PSN compliance - advice on ISO27001 (including GAP analysis etc.), BCP, security policy framework, Cyber Essentials / Plus review & certification - automated penetration testing.