Closed

Aged Care Gateway DevSecOps Maturity Assessment

Tender ID: 608497


Tender Details

Tender #:
PCS-03654  
Status:
Closed
Publish Date:
16 March 2026
Closing Date:
2 April 2026
Closing Time:
11:59 PM (Australia/ACT)

Tender Description

⁠⁠⁠The Department of Health, Disability and Ageing seeks an independent assessment of the DevSecOps and application security maturity of the Aged Care Gateway (ACG), a collection of systems that supports aged‑care services nationally.

The assessment aims to understand the current maturity of secure software delivery practices across development, testing, Continuous Integration / Continuous Delivery (CI/CD), access management, release processes and operations, and to identify risks arising from gaps in security controls. Findings should be aligned to key frameworks such as ACSC Secure‑by‑Design foundations, ISM Software Development Guidelines, OWASP ASVS and the OWASP DevSecOps Maturity Model.

The engagement will review the as‑is state only, drawing on existing artefacts, interviews, workshops and hands‑on observation. The assessment must include realistic, risk‑prioritised recommendations and an actionable roadmap that reflects the ACG’s context and constraints, focusing on the highest‑impact opportunities to uplift security quickly. The proposed delivery approach should combine discovery, stakeholder workshops, framework mapping and synthesised findings into a clear improvement pathway.



Similar Tenders

Open opportunities matching this tender's categories and regions.