Provision of Cyber Security Audit and Identification of necessary cyber measures for Threshold

Description

Threshold is currently inviting Tenders for the provision of a cyber security audit and identification of necessary cyber security measures in the short, medium and longer term. Threshold does not have an IT Department and currently outsource an IT service which is operational and reactive in nature. Due to sustained growth in the organisation, we require an up-to-date audit of our IT and cyber environment and an assessment of the necessary remedial and longer-term developmental needs in this area. The successful tenderer will The Project Consultant will: • Ensure a comprehensive yet concise audit of Threshold’s existing IT and Cyber Security systems, focussing on: - mapping systems, functionality and processes we currently employ, related gaps / deficits, and the systems, processes we need to meet and / or exceed the industry standard for cyber security, including relevant staff training required - mapping the IT devices used for Threshold business purposes and their levels of cyber security • Identify what templates we require for all relevant policies and procedures in relation to IT and Cyber Security and to document these accordingly, including disaster recovery planning, business continuity planning and relevant staff policies around IT usage and cyber security protocols • Identify the industry standard for organisations of the size and specialisation of Threshold with regard to IT and Cyber Security, including what level of ISO compliance is required for such systems • Establish how best to ensure specific cyber security needs, including firewalls and related, encryption considerations, device security and mobile device management, ability to revoke permissions, Virtual Private Networks, and identify, if possible, one secure portal with which to access all necessary systems / platforms for all staff • Have full regard to GDPR in the audit and planning work in order to ensure that best data protection processes are observed and the risk of any breaches are minimised • Estimate how many person hours will be required per week for an org of our size (c. 75 staff) for ongoing IT and Cyber services and strategy, and the annual costs of same, comparing the cost benefit of employing a staff member with an outsourced vCIO (virtual Chief Information Officer) • Ensure the IT and cyber security audit achieves best value for money for Threshold, including how to get VFM in procurement of IT equipment, systems and licenses. As part of this, map the availability of free / discounted products and services provided by companies charities / NGOs using IT products eg Azure Credits and other free / discounted services