Closed
Invited
NHMRC Penetration Testing
Tender ID: 619023
Tender Details
Organisation:
Tender #:
PCS-04273
Status:
Closed
Publish Date:
7 July 2026
Closing Date:
21 July 2026
Closing Time:
11:59 PM (Australia/ACT)
Tender Description
This Tender is invited by the Issuer.
Purpose of arranging this pen testing exercise is
- Assess effectiveness of cyber controls
- Assess configuration of network and Wi-Fi
- Assess resilience of cloud infrastructure against external hacking attempts.
Assets:
Assets included in this exercise are:
1. External facing infrastructure
- Firewalls and network
- Azure Cloud tenancies
- NHMRC's technology stack includes Azure, Zscaler, Aruba Central, M365, and Virtual Desktop Interface (VDI - Azure Virtual Desktop)
2. Wi-Fi & network exercise
- Wi-Fi assessment from an adjacent attacker perspective on site
- Test lateral movement and compromise of standard Azure Virtual Desktop session or M365 credentials in network
Out of Scope
- Social engineering and 3rd party systems
Pentest Engagement Information:
- Identify the attack surface
- External infrastructure and asset discovery exercise
- Grey-box discovery exercise, starting with gaining understanding of NHMRC's infrastructure
- Discover additional information
- Gain unauthenticated access at services NHMRC have exposed, notably:
- Azure
- M365
Buyer contact: it.contracts@nhmrc.gov.au
Location
Similar Tenders
Active opportunities matching this tender's categories and regions.