Incident Response and Recovery service

TEQSA requires the services of a vendor who has good knowledge of our environment and can provide incident response/triage assistance to help TEQSA manage response to a threat or an incident.

Vendor's team will collaborate with TEQSA’s Incident Response team to:

• Conduct an end-to-end investigation that will track all elements of a suspected compromise, including how the compromise initiated, which devices/systems were compromised, and the associated recovery process.
• Perform cyber forensic investigation of (but not limited to) operating systems, applications, databases, network and security devices.
• Identify attack vectors by which a hacker (or cracker) could have gained access to a computer or network to deliver a payload or malicious outcome.
• Prepare a detailed report on the technical and executive aspect of an investigation (if required).

Vendor to further provide service such as:

• Threat Detection and reporting across TEQSA's cloud environment
• Supply Chain security monitoring

Estimated start date: Monday, 17 November 2025

Initial contract duration: 7 months

Extension term: Not applicable

Location of work: VIC

Working arrangements: Hybrid