Vulnerability Management and Scanning Solution

DPIRD seeks a solution to scan and manage vulnerabilities across internal/external ICT assets —servers, web apps, APIs, and cloud—to support its security and risk management program.

Project goals

Over recent years, DPIRD ICT has strengthened its cyber resilience through targeted vulnerability management and penetration testing initiatives. This project aims to expand those capabilities by implementing a unified solution that delivers continuous visibility, prioritised remediation, and data-driven reporting across the ICT environment. The solution will enhance DPIRD’s ability to proactively detect and address security weaknesses, meet compliance obligations, and support the Department’s ongoing commitment to safeguarding digital assets. The proposed timeline includes procurement and evaluation by Q4 2025, implementation by Q1 2026, and continuous operation thereafter.

Scope

This procurement seeks to acquire a service that includes, but is not limited to:

• Continuous vulnerability and web application scanning

• Centralised reporting, dashboards, and analytics

• Integration with existing ICT and security systems

• Managed service and advisory support for remediation planning

• Compliance and risk reporting

Additional details/instructions

Please note: Being registered for ICT Services Scheme (SCM0020) is mandatory for this opportunity.

For "Mandatory Requriement A - scheme membership", please select "YES" to ensure your response is received.

Requirements

Mandatory requirements

Scheme membership (SCM0020) *

Information and technology

This procurement category has a mandated scheme.

This category has a mandated scheme, to be awarded this contract you may need to be a member of the ICT Services Scheme SCM0020.

Are you a member of SCM0020?

Response type

Radio button (Yes/No)

Opportunity requirements

1. Tender Documents

Please download all the attached documents and complete and return Part B - Response Form.

Response type

File upload (Multiple)

Please see attached files in the link for more information