Cyber Security Testing Services

Description

The Scottish Ministers, on behalf of The Scottish Government have a requirement to engage with a partner to secure a service provider that will provide quality-assured security testing services and will have the scale and flexibility to accommodate both longer-term routine (e.g. annual) Information Technology (IT) operational health checks, as well as more frequent point-in-time security tests at key project milestones throughout the contract. Lot 1: 1.1 The Scottish Ministers, on behalf of The Scottish Government and hereafter referred to as the Purchaser, is seeking to establish an agreement for the provision of cyber security testing services. The contract shall undertake these services across a range of programmes which support our Digital Strategy and Cyber Resilient Strategic Framework. The successful Service Provider MUST be NCSC CHECK approved as the services will cover a wide variety of Scottish Government applications, platforms, and network types A Contract is required to cover the following service scope as a minimum and as further detailed in the Statement of Requirements: A. Cyber security testing which must comply with NCSC and UK Government guidance for cyber security testing and in line with the CHECK scheme. B. Deploy testing tools, either locally or remotely (as appropriate), to a wide variety of on-premise and cloud environments (e.g. Microsoft 365, Microsoft Azure, Amazon AWS, Google Cloud Platform, Oracle Cloud Infrastructure, etc). C. Provide CHECK level security testing. D. Cyber Security Red Teaming.. Requirement has been called off from the Scottish Governments Dynamic Purchasing System (DPS) for Digital Technology Services under Lot 4 Cyber Security and Resilience Services.