IT Security Testing

Perform penetration testing and ITHC (IT Health Check) of identified existing and new MMO IT systems and non-catalogued hardware, using methodologies that conform to NCSC guidelines and HMG Security Policy Framework (SPF); to demonstrate compliance to HMG SPF standards, the Data Protection Act and the new General Data Protection Regulation (GDPR).

Undertake risk assessment of the existing business IT systems, and update or prepare the existing Risk Management and Accreditation Documentation Sets (RMADS) with new IT systems to ensure that business systems can be accredited to demonstrate compliance to HMG SPF standards, the Data Protection Act and the new General Data Protection Regulation (GDPR).

Require call off contract of 90 days of security testing and consultancy over a 2 year period.

Additional information:

"Please note that Defra procurement uses an E-tendering system for Procurement activities. This is currently provided by Bravo Solutions. To access appropriate tendering and contractual documents, please access the E-Tendering portal at https://defra.bravosolution.co.uk", ensuring that your registration includes "Defra". If you have any problems with this system, please contact Bravo on their telephone helpline number 0800 368 4850 or by emailing them at help@bravosolution.co.uk. "