PALAU: cybersecurity vulnerability assessment

⁠⁠⁠Purpose: To conduct a cybersecurity vulnerability assessment to better understand the current level of cyber threat actor infiltration, determine the resources required for sustained protection of Palau’s critical infrastructure, including the Ministry of Finance, Malakal Seaport and Roman Tmetuchl International Airport.

Scope of work: Threat hunting and vulnerability assessment of the:

* Ministry of Finance information systems and networks

* Malakal Seaport operational technology, information systems, and IT networks.

* Roman Tmetuchl International Airport operational technology, information systems and IT networks.

Methodology: The threat hunting and cybersecurity vulnerability assessment will provide both evidence of infiltration and recommendations for hardening the cybersecurity posture of critical infrastructure. Information technology, operational technology (SCADA, Industrial Control Systems, etc.), resources required (expertise and funding) and Physical Security measures will be evaluated, and recommendations made on resources required to fill gaps identified.

Outcomes and Deliverables: Prepare a report for consideration by all partners with all findings and recommendations as to the level of cyber threat actor infiltration and resource requirements for effective protection, detection, and response to cyber threats and cyber-attacks.

Recommendations for Cybersecurity governance, risk management, and compliance programs to with emphasis on third-party risk management and supply-chain cybersecurity measures.

Estimated start date: Monday, 27 May 2024

Initial contract duration: 3 MONTHS

Extension term: 6 months

Number of extensions: 1

Location of work: Offsite