CBMDC 770 - Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

The Council is seeking to appoint a suitably experienced and qualified Provider (the Provider) to deliver These vulnerability tests must make use of both automated and manual testing and using best practice strategies from NCSC (National Cyber Security Centre), Open Web Application Security Project (OWASP) etc, to undertake our PEN testing. This tender is for the multiple block purchases of 10 consultancy days which can be used for a variety of security related testing and consultancy intended to identify weaknesses utilising publicly known vulnerabilities, common configuration faults or poor cyber awareness.

Including our IT Health Check for PSN compliance (both Internally and Externally). The Council anticipates (but does not guarantee) that it will enter into a Framework Contract with the top 3 successful Providers.

The Framework will be established as an Open Framework under the Procurement Act 2023. The initial framework term will be three (3) years, with the Authority intending to re-open the framework and award a successor framework before the expiry of the initial term.

The timing of any re-opening may be adjusted in accordance with the Procurement Act 2023 and the Authority's requirements. The successor framework is intended to have a term of twelve (12) months The Council reserves the right to amend the scope of the support requirement and procure additional requirements as and when required throughout the term of the contract.