Multi-Supplier Framework for the Provision of Network Penetration Testing Services

Description

The objective of this competition is to establish a framework of suitably qualified Participants that will be available to tender for the provision of network penetration testing services for the Authority upon request. At its discretion, following this Framework competition, the Authority may enter into Contracts with a maximum of five Participants. The Authority requires the provision of (external/internal) network penetration testing services for the security of the network infrastructure, cloud and premise networks, which will enable the Authority to prioritise, mitigate and remedy potential vulnerabilities and/or weakness detected. The systems under management, and or, in development include: Corporate systems in the Equinix Data Centre; The Back Office system relating to the Leap Card, which are in the Eir Data Centre; Leap App NFC System (Top-up using Phone) based in the Amazon (AWS) Cloud; The back office system supporting the Commercial Bus Operators, which is based in the Amazon Cloud; National Journey Planner in the AWS cloud; Real Time Passenger Information System in the AWS cloud; The Regional Bikes back office system, which is in the Vodafone data center; The Regional Bikes Website, which is based in the AWS cloud; The Mobile Ticketing System [Microsoft Azure (“Azure”)]; The Tax Saver system (Azure); The Business Intelligence and Data Analytics platform (Azure); Transport modelling Systems hybrid cloud (AWS); Next Generation Ticketing (future system); Call Centre Consolidation (future system); Next Generation AVL (future system); Corporate Web Sites in the AWS cloud; and Bit Bucket / JIRA. The above list of systems is indicative of systems the Authority will have the responsibility to maintain. The list does not purport to be comprehensive. Most of the data centres in the list are operated by third party consultants, not Authority staff. Periodically, the Authority will develop and acquire new systems, which may require testing, while also consolidating and relocating existing systems to reduce the number of data centres and cloud environments. Lot 1: The objective of this competition is to establish a framework of suitably qualified Participants that will be available to tender for the provision of network penetration testing services for the Authority upon request. At its discretion, following this Framework competition, the Authority may enter into Contracts with a maximum of five Participants. The Authority requires the provision of (external/internal) network penetration testing services for the security of the network infrastructure, cloud and premise networks, which will enable the Authority to prioritise, mitigate and remedy potential vulnerabilities and/or weakness detected. The systems under management, and or, in development include: Corporate systems in the Equinix Data Centre; The Back Office system relating to the Leap Card, which are in the Eir Data Centre; Leap App NFC System (Top-up using Phone) based in the Amazon (AWS) Cloud; The back office system supporting the Commercial Bus Operators, which is based in the Amazon Cloud; National Journey Planner in the AWS cloud; Real Time Passenger Information System in the AWS cloud; The Regional Bikes back office system, which is in the Vodafone data center; The Regional Bikes Website, which is based in the AWS cloud; The Mobile Ticketing System [Microsoft Azure (“Azure”)]; The Tax Saver system (Azure); The Business Intelligence and Data Analytics platform (Azure); Transport modelling Systems hybrid cloud (AWS); Next Generation Ticketing (future system); Call Centre Consolidation (future system); Next Generation AVL (future system); Corporate Web Sites in the AWS cloud; and Bit Bucket / JIRA. The above list of systems is indicative of systems the Authority will have the responsibility to maintain. The list does not purport to be comprehensive. Most of the data centres in the list are operated by third party consultants, not Authority staff. Periodically, the Authority will develop and acquire new systems, which may require testing, while also consolidating and relocating existing systems to reduce the number of data centres and cloud environments. The contracting authority will not be responsible for any costs, charges or expenses incurred by candidates or tenderers relating to this contract award procedure irrespective of the outcome of the competition, or if the competition is postponed or cancelled. All costs incurred by interested parties in participating in this competition must be borne by them. Any contract award will be subject to a number. of preconditions, including production of a current tax clearance certificate or tax clearance statement from the Revenue Commissioners in Ireland. The contracting authority may terminate this competition (or any part thereof), change the basis of and the procedures for the bidding process, at any time, or procure the project by alternative means if it appears that the project can thereby be more advantageously procured. The most economically advantageous or any tender will not automatically be accepted. Refer to procurement documents for further information.