MMO IT Security and RMAD Review

The MMO is undertaking a comprehensive risk assessment of its business IT systems in line with needs of the HMG Security Policy Framework. Our aim is to perform penetration testing and ITHC (IT Health Check) of identified MMO IT systems and non-catalogued hardware, using methodologies that conform to CESG guidelines and HMG Security Policy Framework (SPF); to demonstrate compliance to HMG SPF standards, the Data Protection Act and the new General Data Protection Regulation (GDPR)

We also need to undertake a risk assessment of the existing business IT systems, and update or prepare the existing Risk Management and Accreditation Documentation Sets (RMADS) to ensure that business systems can be accredited to demonstrate compliance to HMG SPF standards, the Data Protection Act and the new General Data Protection Regulation (GDPR)

Additional information:

Please note that Defra procurement uses an E-tendering system for Procurement activities. This is currently provided by Bravo Solutions. To access appropriate tendering and contractual documents, please access the E-Tendering portal at https://defra.bravosolution.co.uk", ensuring that your registration includes "Defra". If you have any problems with this system, please contact Bravo on their telephone helpline number 0800 368 4850 or by emailing them at help@bravosolution.co.uk