IT Security Testing

Description

Perform penetration testing and ITHC (IT Health Check) of identified existing and new IT systems and non-catalogued hardware, using methodologies that conform to NCSC guidelines and HMG Security Policy Framework (SPF); to demonstrate compliance to HMG SPF standards, the Data Protection Act and the new General Data Protection Regulation (GDPR). Undertake risk assessment of the existing business IT systems, and update or prepare the existing Risk Management and Accreditation Documentation Sets (RMADS) with new IT systems to ensure that business systems can be accredited to demonstrate compliance to HMG SPF standards, the Data Protection Act and the new General Data Protection Regulation (GDPR).