Security Test Framework Agreement

Description

DSB would like to have a non-exclusive framework agreement regarding security tests, to be able to perform tests with the purpose of identifying vulnerabilities and threats to our systems.  The framework agreement must contain test types including vulnerability scans, penetration tests, redteam tests and other typical security tests.   DSB expects to utilize the framework agreement several times per year, for both larger and smaller scale security tests.  DSB bases much of our security testing work on the TIBER EU framework for reference and baseline, but it is important to note that DSB are not required to follow the TIBER EU framework.   Everywhere the TIBER EU framework refers to financial sector, this should of course be translated to transportation sector in this case.