Provision of Army Digital Services Security & Vulnerability Assessments Specialist & Technical Capability (DInfoCom/0212)
Ministry of Defence · South West
Key facts
- Contract value
- £459,000
- Awarded
- 26 Jul 2022
- Contract starts
- 30 Sep 2022
- Contract ends
- 30 Sep 2024
- Procedure
- Call-off from a framework agreement (framework)
- Buyer type
- Central government
Awarded to
| Supplier | Value |
|---|---|
| NCC Group Security Services Limited | £459,000 |
Description
There is a requirement for specialist technical assistance to provide code assisted Vulnerability Assessments (VA) and Penetration Testing (PT) security assessments on both new and in-service applications/infrastructure. Security assessments, PT's and VA's are used to identify vulnerabilities in code and infrastructure (networks, servers, operating systems and applications) that could potentially be exploited. Attackers can be hackers trying to gain access into our network or systems, state sponsored activists or an insider threat. They will aim to either extract information that is held on applications and hosting environments or cause extensive disruption to services.
ADS has 2 hosting environments, the Army Hosting Environment (AHE) and Joint Server Farm (JSF). The JSF is accessible from the internet via the Defence Gateway and holds information classified at Official. The AHE holds Official, Secret and Sensitive Personal Information which if extracted would not only be damaging to the Army's reputation, it could jeopardise potential operations. It could also incur fines from the Information Commissioner if there were a breach of personal information. An attack to disrupt any of the services ADS provides would significantly erode the Army's ability to operate, as many of the systems support day to day activities and processes. It is therefore imperative that vulnerabilities are identified and remedied/mitigated to reduce the risk of these occurrences.
All new applications expecting to be hosted on the AHE or the JSF must have a vulnerability assessment before being allowed onto the environment to ensure there are no weaknesses which could potentially allow an attacker access to the wider infrastructure and applications. Existing applications, hosting environments and platforms must be VA'd on a rolling programme to ensure any changes do not increase vulnerability and potential for being attacked.
Categories (CPV)
- 72820000 Computer testing services
Similar open tenders
Ireland West SDZ Designated Activity Company DAC is seeking consultancy services to support the development of an Aviation Circular Economy Hub at Ireland West Airport Knock.
Location: IrelandBuyer: Mayo County Council
Open tenderCloses 24 Nov, 202619 daysValue €125.00KSource TEDMCC are publishing this competition on behalf of Ireland West SDZ Designated Activity Company. The brief is to undertake the market validation, technical, commercial and operational planning development work necessary to establish the proposed Hub’s viability. The tenderer shall identify an appropriate operating model
EMMS Cyber Security SME Support Programme
Location: Yorkshire and the HumberBuyer: Lincolnshire County Council
Open tenderCloses 18 Nov, 202613 daysValue £65.00kSource Find a TenderIndustrial Cyber Security pilot programme aimed at improving cyber resilience readiness within SME manufacturing businesses. This exercise is being led by the LCC on behalf of Leicestershire, Nottinghamshire, Derbyshire, Northamptonshire, and Greater Lincolnshire.
Digital Connectivity Programme - 1gb Broadband Install and Service Delivery
Location: ScotlandBuyer: North Lanarkshire Council
Open tenderCloses 8 Dec, 202633 daysValue £85.45mSource Find a TenderNorth Lanarkshire Council (the “Council”) is undertaking a major digital transformation programme to deliver gigabit capable broadband connectivity to approximately 37,000 Council owned social housing properties across the authority area. The programme is a core component of the Council’s Digital Connectivity Masterpla
The Spencer Academy Trusts Microsoft Licensing & Support Services
Location: East MidlandsBuyer: THE SPENCER ACADEMIES TRUST
Open tenderCloses 23 Nov, 202618 daysValue £525.00kSource Find a TenderSpencer Academies Trust is seeking a suitably qualified supplier to provide Microsoft Licensing and Support Services. The contract will include the provision, management and support of the Trust's Microsoft licensing estate, including Microsoft 365 A3 and Microsoft 365 A5 licensing, licence administration, subscription
ICT Network Support Services for Tailte Éireann
Location: IrelandBuyer: Tailte Éireann
Open tenderCloses 8 Dec, 202633 daysValue €800.00KSource TEDThe provision of Network maintenance, software and related services to support Tailte Éireanns network infrastructure. The network equipment and services the subject of this tender consists of Cisco and Dell switches and routers and any attached equipment such as GBIC’s etc
Contract for Education and Outreach Programme Management Services
Location: IrelandBuyer: Department of Culture Communications Sport
Open tenderCloses 11 Dec, 202636 daysValue €320.00KSource TEDThe National Archives has been very successful in recent years in broadening the understanding of our role as the keeper of the records of the State amongst the general public. This enhanced public engagement has seen more people visit the National Archives online and in person(outside of the usual academics and resear