2018/2019 Scope for PSN Health-Check – Oldham Council

Description

Summary of the work To conduct a PSN Health-check of the Oldham Council network including internal and external infrastructure and end user devices. The precise scope and technical details will be agreed with the supplier further down the process. The following information provides a scope for pricing the audit Expected Contract Length 3 weeks Latest start date Monday 24 September 2018 Why the Work is Being Done This work needs to be carry out on council obligation to achieve Public Sector Network (PSN) compliant in order to demonstrate that Oldham council will needs to require PSN certification. Problem to Be Solved To achieve PSN accreditation Who Are the Users To achieve the PSN certification, part of the process is to asses the IT estate against any kind of threat and vulnerability, and take action to mitigate in order to achieve PSN certification. Existing Team Working with Unity Partnership Information Security team Current Phase Not applicable Skills & Experience • CREST CRT certified or equivalent • understand complex computer systems and technical cyber security terms • carry out remote testing of a client's network or onsite testing of their infrastructure to expose weaknesses in security • work with clients to determine their requirements from the test, for example the number and type of systems they would like testing • plan and create penetration methods, scripts and tests • advise on methods to fix or lower security risks to systems • consider the impact your 'attack' will have on the business and its users • create reports and recommendations from your findings • present your findings, risks and conclusions to both technical and non-technical audiences • understand how the flaws that you identify could affect a business, or business function, if they're not fixed • Minimum 3 years frequent pen test experience • Review your findings and feedback to clients • Analyse the outcomes and make recommendations for security improvements • Previous pen testing experience on local or Government organisation pen test would be highly advantageous Work Location Oldham Council, Civic Centre, Oldham Ol1 1NY Working Arrangments Working with Unity Information Security Manager Security Clearance Baseline personnel security standard No. of Suppliers to Evaluate 3 Proposal Criteria • How the approach or solution meets your organisation’s policy or goal • How they’ve identified risks and dependencies and offered approaches to manage them • Value for money Cultural Fit Criteria • Work as a team with our organisation • Take responsibility for their work • Share knowledge and experience with other team members • Challenge the status quo Payment Approach Fixed price Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers No questions have been answered yet.