SRAE8 - Conduct a security capability and risk assessment
Tender ID: 584727
Tender Details
Tender Description
This Tender is invited by the Issuer.
This Request for Quote (RFQ) is issued by the National Disability Insurance Agency (NDIA or the Agency), in accordance with clause 14.2 of the DMP2 Head Agreement (Head Agreement).
The aim of this RFQ is to identify the Seller that offers the best value for money for the following requirements as specified in this RFQ over the Contract Period:
- Conduct a security capability and risk assessment. Benchmarking NDIA’s capability against established and agreed national/international security frameworks – for example, PSPF/ISM/NIST 800-53./NIST/CSF/ZTA . This will provide a clear picture of NDIA’s existing security posture and identify gaps for improvement.
- Conduct a review of the current NDIA managed IT systems, against the Australian Cyber Security Centre (ACSC) Essential 8 (E8) mitigation strategies. The review is to be scoped in line with the current NDIA E8 maturity level, and objectives to evolve the maturity level to address the gap analysis and recommendations to mitigate cyber incidents.
- The identified gaps and recommendations from the assessment will inform the Cyber Security Roadmap, guiding the NDIA on the required, necessary cyber security uplift in the form of a series of work packages.
The NDIA intends that the successful Seller and the NDIA will enter into a contract under the Head Agreement.
The Seller, by responding to this RFQ, agrees that it is submitting a response in accordance with the Head Agreement.
The Seller acknowledges and agrees that no binding contract (express or otherwise) is created between the NDIA and the Seller unless and until the parties have executed a Contract (if any) pursuant to the terms of the Head Agreement (which, once executed becomes a Contract for the purposes of the Head Agreement).
All responses must be submitted in accordance with the 'How to respond' section of Part A to this RFQ, before the RFQ Closing Time.
Estimated start date: Monday, 23 June 2025
Initial contract duration: 6 months
Extension term: 6 months
Number of extensions: 2
Location of work: ACT, NSW, NT, QLD, SA, TAS, VIC, WA
Working arrangements: Hybrid
Location
New South Wales : Central West : Far North Coast : Far West : Hunter : Illawarra : Mid North Coast : Murray : New England : Orana : Riverina : Southern Highlands : Sydney
Queensland : Cairns & Far North Queensland : Gladstone : Mackay Whitsunday Region : Mount Isa & North West Region : Rockhampton : South East Queensland : South West & Darling Downs : The Central West : Townsville : Wide Bay Burnett
Victoria : Barwon South West : Gippsland : Grampians : Hume : Loddon Mallee : Melbourne
South Australia : Adelaide : Eyre & Western : Far North : Fleurieu & Kangaroo Island : Limestone Coast : Murray & Mallee : York & Mid North
Northern Territory : Barkly : Big Rivers : Central Australia : East Arnhem : Greater Darwin : Top End
Australian Capital Territory
Tasmania
