DE - IT Security Health Checks

Tender description

The Department of Education wishes to invite CESG approved companies, who have CHECK Scheme approved consultants (i.e. classified as Green) with web application security experience, to tender for the provision of web application security testing services. The scope of this requirement is the IT systems and websites operated by, or on behalf of, DE. It will include testing of the two main websites, an integrated web application (Schools+) and a varying number of both permanent and transient online applications such as consultations and surveys. Two significant IT systems that are not web-based are also within scope – the Teachers’ Payroll and Teachers’ Pensions systems. The DE website and the ETI website are primarily for the provision of information to the public and participants in the general education field. Both websites have been implements using the Livelink content management system. Each website has a simple feedback form. They both provide a search form which uses the Ultraseek search engine. The Schools+ database (ASP.Net / SQL Server 2008) provides basic school data and has a search form with 13 data entry fields. It is data retrieval rather than transactional.