Security Penetration and IT Health Check

The objective is to ensure that Ofwat has a secure, robust and managed network infrastructure in place that satisfies the NCSC and their PSN accreditation and Ofwat's Internal Auditors.

Scope

The areas of expertise or services that we may require are:

For the support service we require an agreement where we can contact the supplier and request help on one or more of the areas above. Some of these services may be required at short notice although the Customer will endeavour to give a minimum two weeks notice of any requirement.

We currently have a known requirement for biannual security penetration and IT health checks to be conducted in January and June each year. This is currently a mandatory requirement for our PSN accreditation process.

We would require the agreement to include at least the minimum number of days required to conduct two IT Health check and penetration tests each year plus an additional 4 days that may be called on for any of the areas listed above.

(A sampling approach is acceptable when considering the penetration testing of its laptop population as all models are the same make and model and have a similar configuration).

Additional information: For further information, please contact: procurement@ofwat.gsi.gov.uk