Security Services for the Identity Verification Service

The Attorney-General’s Department is seeking to engage a seller to provide security services for the Identity Verification Services.

The primary scope of services include, but are not limited to:

• Annual penetration testing and code review of current and new services and applications.
• Essential 8 support, assessments, reporting and remediation activities as required.
• IRAP certification and accreditation activities of each Identity Verification Service.

Additional services that may be requested:

• facilitation of workshops with external stakeholders of the Identity Verification Services including but not limited to an annual Data Breach Response exercise
• security architecture design, development, documentation and advice
• review and make recommendations to enhance the Department’s security practices and procedures as they relate to the Identity Verification Service
• security compliance assessments
• advice on secure code scanning practices
• advice on disaster recovery services
• cyber incident support advice
• assistance responding to critical cyber security incidents which may be
• ad-hoc or at short notice
• support agentic AI code review
• advice and support developing future focused quantum-resistant protocols

The Department requires security specialists who can provide some or all the deliverables and / or services.

Once under contract, the seller will be provided with a detailed scope for each activity, to cost and submit to the Department for agreement. A work order will be issued, prior to the commencement of work.