The Commonwealth have deemed the ACSC’s The Essential Eight Mitigation Strategies mandatory for all non-corporate Commonwealth Entities at a Managing maturity level, requiring agencies to implement the Maturity level 2 requirements of the Essential Eight Maturity Model.

Following a high-level assessment of Geoscience Australia’s Essential 8 maturity, it has been determined that our current maturity level against the requirements of the Restricting Administrative Privileges strategy of the model is currently at zero as a result of a lack of segregation between privileged and non-privileged operating environments. An assessment is required of the privileged access requirements of a representative subset of Geoscience Australia’s Systems, Applications and Platforms to facilitate development of patterns that support required business functionality while applying the principles of the following Essential Eight mitigation strategies:

1.Restricted Administrative Privileges and

2.Multi-Factor Authentication – as it applies to Restrict Administrative Privileges.

To support the implementation of the Restricted Administrative Privileges and Multi-Factor Authentication – as it applies to Restrict Administrative Privileges - Essential Eight strategies, Geoscience Australia has determined that it undertake a two (2) stage approach with the stages covering:

• Stage 1 – this Procurement; and
• (Optionally) Stage 2 –further work under this Procurement or separate Procurement.

Geoscience Australia is seeking to approach the market with the objective of assessing its status, designing a set of remediation patterns and high-level solution Designs, and developing an Essential Eight Prioritization Process

Estimated start date: Monday, 26 February 2024

Initial contract duration: 4 months

Extension term: 12 months

Number of extensions: 1

Location of work: ACT, Offsite