MOBILE APPLICATIONS THREAT ASSESSMENT SOLUTIONS
Department for Work and Pensions · London
Key facts
- Contract value
- £160,000
- Awarded
- 17 Feb 2018
- Contract starts
- 17 Dec 2018
- Contract ends
- 16 Dec 2020
- Procedure
- Call-off from a framework agreement (framework)
- Buyer type
- Central government
Awarded to
| Supplier | Value |
|---|---|
| Kryptowire Inc | £160,000 |
Description
Delivering Apps to Smartphones is a key element of transforming the digital workplace and providing colleagues with modern solutions which enable them to be more efficient and effective. To date the delivery of Apps to the DWP store has been slow and/or resulted in apps being declined due to primarily to security concerns and lack of the right tools and internal capability to be able to assess and understand app behaviour.
In a global landscape where we have new vulnerabilities continuously emerging, we have the opportunity to secure an 'App Threat Assessment' from a third party.
Options Considered The desired outcome is:
New apps added to the DWP App store in volume and at pace. User experience enhanced and colleagues have a wider range of apps to improve productivity
Security risks reduced
Two options have been considered and tested: Internal Service: A test rig was developed which identified which IP addresses each app accessed. Whilst this provided some helpful information, it did not provide an assessment of
If/what data is being transferred/leaked out of DWP; Which phone services are being used by the app e.g. blue tooth, location services etc. any underlying and/or unexpected behaviours being performed by the app
This resulted in a considerable amount of residual product and security team effort which in a number of cases failed to determine the associated risk due to a lack of visibility of app behaviour.
External, expert service: In 2017, as a proof of concept 3 apps were sent for review by 4 suppliers, specialising in threat assessments. Each supplier provided a comprehensive threat assessment which will enable DWP to make an informed assessment of each app within 24 hours of request. The security community as well as the product team were impressed with the granularity of detail provided.
Doing nothing would expose the department to security risks or lost data. Therefore external procurement is recommended.
Categories (CPV)
- 72000000 IT services: consulting, software development, Internet and support
Similar open tenders
EMMS Cyber Security SME Support Programme
Location: Yorkshire and the HumberBuyer: Lincolnshire County Council
Open tenderCloses 18 Nov, 202613 daysValue £65.00kSource Find a TenderIndustrial Cyber Security pilot programme aimed at improving cyber resilience readiness within SME manufacturing businesses. This exercise is being led by the LCC on behalf of Leicestershire, Nottinghamshire, Derbyshire, Northamptonshire, and Greater Lincolnshire.
Digital Connectivity Programme - 1gb Broadband Install and Service Delivery
Location: ScotlandBuyer: North Lanarkshire Council
Open tenderCloses 8 Dec, 202633 daysValue £85.45mSource Find a TenderNorth Lanarkshire Council (the “Council”) is undertaking a major digital transformation programme to deliver gigabit capable broadband connectivity to approximately 37,000 Council owned social housing properties across the authority area. The programme is a core component of the Council’s Digital Connectivity Masterpla
The Spencer Academy Trusts Microsoft Licensing & Support Services
Location: East MidlandsBuyer: THE SPENCER ACADEMIES TRUST
Open tenderCloses 23 Nov, 202618 daysValue £525.00kSource Find a TenderSpencer Academies Trust is seeking a suitably qualified supplier to provide Microsoft Licensing and Support Services. The contract will include the provision, management and support of the Trust's Microsoft licensing estate, including Microsoft 365 A3 and Microsoft 365 A5 licensing, licence administration, subscription
ICT Network Support Services for Tailte Éireann
Location: IrelandBuyer: Tailte Éireann
Open tenderCloses 8 Dec, 202633 daysValue €800.00KSource TEDThe provision of Network maintenance, software and related services to support Tailte Éireanns network infrastructure. The network equipment and services the subject of this tender consists of Cisco and Dell switches and routers and any attached equipment such as GBIC’s etc
Contract for Education and Outreach Programme Management Services
Location: IrelandBuyer: Department of Culture Communications Sport
Open tenderCloses 11 Dec, 202636 daysValue €320.00KSource TEDThe National Archives has been very successful in recent years in broadening the understanding of our role as the keeper of the records of the State amongst the general public. This enhanced public engagement has seen more people visit the National Archives online and in person(outside of the usual academics and resear
Single Party Framework Agreement for the supply of Atlassian Cloud Services and Associated Products
Location: IrelandBuyer: Gambling Regulatory Authority of Ireland
Open tenderCloses 3 Dec, 202628 daysValue €400.00KSource TEDSingle Party Framework Agreement for the supply of Atlassian Cloud Services and Associated Products