Insider Threat Penetration Testing Services

Requirements

Background

Treasury has a requirement for internal penetration testing services prior to the End of Financial Year. Prior to release, Treasury is seeking a Penetration Test against the system to identify security weaknesses and vulnerabilities and to ensure compliance with security regulations and standards.

Services

Conduct an internal penetration test to assess Treasury’s resilience to an insider threat from compromised standard and privileged account access, Threat surface modelling for internal AI tooling, and provide Reporting and guidance for the effectiveness of Treasury detection systems.

Due to the nature of services required, the attached TSY Pentest Requirements document will provide clarity as to the nature of services for providing a complete response and should consider milestone deliverables to achieve work consistent with the Budget Hard-Freeze timeframes for the Treasury Production Environment.

Marketplace Note

In line with the Head Agreement, no further sellers will be considered for invitation to the RFQ in addition to the invited suppliers due to line area resourcing in evaluation to ensure the contracted deliverables can begin as soon as practically possible.