2358 - Provision of Vulnerability Management Scanning Solution

Description

An Post, housing about 9,000 employees, operates with a diverse technology environment encompassing two on-prem and two co-location data centers, with Azure as their primary Platform as a Service. They predominantly use Windows OS for servers and desktops but have limited Linux/Ubuntu OS on servers. An Post's infrastructure comprises of on-prem and cloud-based applications, with a network infrastructure featuring LAN, WAN for retail offices, Remote Access VPNs, multiple firewalls, load balancers, routers, switches, and segmented network zones with restricted access. The outlined solution requirements necessitate a comprehensive tool capable of conducting customised, automated, and scheduled vulnerability scans across the entire IT landscape, discovering and tracking network-connected devices, assessing vulnerability severity, offering reporting with customisation dashboards, a centralised management console, role-based access, support for risk assessment and remediation prioritisation, real-time alerts, compliance checks against industry standards (ISO 27001, PCI-DSS), and scalability tailored to their organisational infrastructure's size and complexity. An Post, housing about 9,000 employees, operates with a diverse technology environment encompassing two on-prem and two co-location data centers, with Azure as their primary Platform as a Service. They predominantly use Windows OS for servers and desktops but have limited Linux/Ubuntu OS on servers. An Post's infrastructure comprises of on-prem and cloud-based applications, with a network infrastructure featuring LAN, WAN for retail offices, Remote Access VPNs, multiple firewalls, load balancers, routers, switches, and segmented network zones with restricted access. The outlined solution requirements necessitate a comprehensive tool capable of conducting customised, automated, and scheduled vulnerability scans across the entire IT landscape, discovering and tracking network-connected devices, assessing vulnerability severity, offering reporting with customisation dashboards, a centralised management console, role-based access, support for risk assessment and remediation prioritisation, real-time alerts, compliance checks against industry standards (ISO 27001, PCI-DSS), and scalability tailored to their organisational infrastructure's size and complexity.