Procurement of Penetration Testing Services

The request seeks to engage multiple experienced Sellers with the capability to provide the following services to the Department of Home Affairs (the Department):

• Penetration Testing: A method of testing where testers target individual binary components or the application as a whole to determine whether intra or inter-component vulnerabilities can be exploited to compromise the application, its data, or its environmental resources.
• Vulnerability Assessments: Systematic examination of an information system or product to determine the adequacy of security measures, identify security deficiencies, provide data from which to predict the effectives of the proposed security measures, and confirm the adequacy of such measures after implementation.
• Red Team Assessments: An exercise, reflecting real-world conditions, that is conducted as a simulated adversarial attempt to compromise organisational missions and/or business processes to provide a comprehensive assessment of the security capability of the information system and organisation.
• Purple Team Assessments: A Purple Team integrate as the offensive capabilities of the Red Team with defensive controls and procedures of the Blue Team with the goal of improving and maximising the capabilities of both. Whereas a Red Team assessment is typically conducted without the knowledge of the Blue Team, a Purple Team assessment is conducted with close cooperation and participation between Red and Blue Teams.
• Advanced Threat Emulation: The intelligence driven selection of known Threat Actors and the modelling of their behaviours, tactics, techniques and procedures. The goal is the test detection and response capabilities against specific threats and assess overall security capability and posture.