PENETRATION TESTING SERVICES

Tender description

As part of the separation from National Grid Group and transformation into NESO under UK Government ownership, NESO are looking to create their own penetration testing framework to ensure that we can provide assurance over the security of our systems and provide a secure service to Great Britain. To achieve this, NESO requires a penetration testing panel of at least three members who can provide in-depth penetration testing services, covering a range of localised testing, such as web-app or infrastructure testing, as well as simulated attack exercises. Lot 1: NESO require a penetration testing service provider that can: Provide Infrastructure, Web Application, API and Web Application security testing. Provide simulated attack exercising services (Purple/Red Teams). Provide CHECK accredited penetration testers to complete testing. Where necessary, provide penetration testers who have achieved UK Gov Security Clearance Provide highly accurate reporting of vulnerabilities within the in-scope systems. Provide resource for testing with a no longer than 1 month lead time. Provide resource with knowledge and experience of testing on Critical National Infrastructure (CNI) environments, and the risk associated, where applicable to the scope of testing. Additional information: Contract duration Flexible, agile framework contract that can be scaled-up or down based on business requirements. Compliance with the Utilities Contracts Regulations 2016 Initial contract duration 3-year contract, with the possibility for 2 one year contract extensions Participation requirements: All suppliers wishing to participate in the tender process must register with Achilles via the UVDB code 2.1.23-Cyber security consulting or services for the event by the 31st January 2025.