Pen Testing Programme

City College Plymouth are seeking quotations for a 3-5 year rolling plan of penetration testing / infrastructure security testing with 5 days testing per year.

It is expected that years 1 and 2 of the testing programme would look at specific applications, then in year 3 we would want a more general black box test programme to test broader infrastructure security and finally in years 4 and 5 go back to looking at specific or new applications.

Ideally as part of the 5 days in year 1 we would like some initial black box scanning of applications/services with then the focus to move onto testing 4 or 5 specific applications credentialed with firewall protections in place and then without to assess the base application security.

Please see attached documentation on how to apply

Tender Documents

• Opportunity notice on Contracts Finder → — Tender notice
• Appendix A pricing schedule → — Bidding documents
• Appendix B Standard Terms and Conditions → — Tender notice
• Appendix C Suitability Assessment & Selection Questionaire → — Tender notice
• Appendix D Agreement Conditions Acceptance and Declaration Form → — Tender notice
• RFQ165 Pen Testing Programme → — Tender notice
• Clarification questions and answers → — Clarifications