Closed Invited

NHMRC Penetration Testing

Tender ID: 619023


Tender Details

Tender #:
PCS-04273  
Status:
Closed
Publish Date:
7 July 2026
Closing Date:
21 July 2026
Closing Time:
11:59 PM (Australia/ACT)

Tender Description

This Tender is invited by the Issuer.

⁠⁠⁠Purpose of arranging this pen testing exercise is

  1. Assess effectiveness of cyber controls 
  2. Assess configuration of network and Wi-Fi
  3. Assess resilience of cloud infrastructure against external hacking attempts.

Assets:

Assets included in this exercise are:

1. External facing infrastructure 

  • Firewalls and network
  • Azure Cloud tenancies
  • NHMRC's technology stack includes Azure, Zscaler, Aruba Central, M365, and Virtual Desktop Interface (VDI - Azure Virtual Desktop)

2. Wi-Fi & network exercise

  • Wi-Fi assessment from an adjacent attacker perspective on site
  • Test lateral movement and compromise of standard Azure Virtual Desktop session or M365 credentials in network

Out of Scope

  • Social engineering and 3rd party systems

Pentest Engagement Information:

  • Identify the attack surface
  • External infrastructure and asset discovery exercise
  • Grey-box discovery exercise, starting with gaining understanding of NHMRC's infrastructure
  • Discover additional information
  • Gain unauthenticated access at services NHMRC have exposed, notably:
  • Azure
  • M365

Buyer contact: it.contracts@nhmrc.gov.au



Similar Tenders

Active opportunities matching this tender's categories and regions.