Security Penetration Services

⁠⁠⁠Overview

The Australian Transaction Reports and Analysis Centre (AUSTRAC) is seeking responses from suitably qualified cyber security providers to deliver independent penetration testing and security assurance services across a range of cloud, collaboration, endpoint, and application environments.

Scope

The scope includes:

• Independent penetration testing and security assurance services covering cloud platform security, identity and access controls, network security, endpoint security, collaboration platforms, and application security
• Assessment of the effectiveness of security controls, identification of vulnerabilities and misconfigurations, and provision of recommendations to strengthen overall security posture
• Alignment of assessments with recognised industry frameworks and methodologies
• Development or updating of security assurance documentation to support governance, compliance, and security accreditation processes, where required
• Preparation of an executive-level security assessment summary
• Preparation of detailed technical findings and remediation recommendations
• Preparation of security assurance artefacts, where requested
• Delivery of knowledge transfer and remediation workshops

Services may be delivered remotely and/or on-site, depending on requirements.

Contractor Requirements

• Personnel assigned to the engagement must hold an appropriate Australian Government security clearance
• Clearance required: NV1

Information Requested

Vendors are requested to provide:

• Company profile and relevant experience
• Proposed methodology and testing approach
• Qualifications and certifications of key personnel
• Experience delivering similar government or regulated-industry engagements
• Approach to security assurance documentation and compliance frameworks
• Indicative delivery timeframes and resource model
• Pricing proposal
• Assumptions, exclusions, and dependencies
• Evidence of security clearances held by personnel proposed for the engagement

Instructions to Tenderers

The attached Statement of Work (SOW) provides the detailed scope, requirements, deliverables, and engagement conditions for vendor response. Please refer to the attached SOW for full details of the requirements and scope.

Enquiries

Buyer contact: procurement@austrac.gov.au