AWM001537 Cyber Security as a Service

Requirements

1.The proposed approach to this procurement will allow for vendors to provide staff with the appropriate, specialist skills on a part time basis to conduct the routine duties of an ITSA and the ability to surge capacity on a time and materials basis to assist in Cyber Security Incident Response as needed. The procurement also requests vendors to provide a fixed price rate card for the provision of common cyber security services that can be drawn down on as required.

2. The requirement covers:

Provision of an EL1 equivalent IT Security Advisor (approximately $200/hr x 16 hours/week x 48 weeks) including surge capability on a time and materials basis to assist in Cyber Security Incident Response. A named, dedicated resource is to be provided with a clearly identified, named secondary resource to support backfill for annual leave, sick leave, other absence or departure of the primary resource;

Provision of an EL1 equivalent IT Security Advisor (approximately $200/hr x 40 hours x 2 weeks), may be the same resource to reduce costs, to review the current cyber security landscape and develop a Cyber Security Uplift Project;

1. Provide a rate card outlining:
2. Fixed price per diem cost for surge capacity for cyber security incident response and investigation
3. Fixed price cost for an Attack Simulation exercise (“Red Team”) of the Memorial’s IT infrastructure and services.
4. Fixed price cost for conducting penetration tests of a specific, external facing or high-risk Memorial service, and
5. Fixed price cost for preparation of security documents including Security Risk Management Plans (SRMP), Statement of Applicability (SOA) and System Security Plan (SSP)

3. An initial two-year engagement with one extension option of two years (2 + 2).

4. A position description for the IT Security Advisor is also accompanying these requirements.

Estimated start date: Tuesday, 10 February 2026

Initial contract duration: Two (2) years

Extension term: Other

Extension term details: Two (2) years

Number of extensions: Buyer has not provided these details

Location of work: ACT

Working arrangements: Onsite