RM6100/Lot 1 Further Competition Oldham Council Tenable IO Request

Description

Oldham Council currently employs a vulnerability scanner on-premise. Scans are run monthly against End User Devices and Servers and found vulnerabilities are assessed and actioned in line with PSN guidelines. However, as the majority of the End User estate resides external due to working from home and only connect via Direct Access VPN, these devices cannot be scanned. Furthermore, the scanning is point in time which results in a lengthy PDF that has to be manually assessed and tickets created. There are issues around vulnerabilities being superseded and a lack of scanning against external IPs and URLs. As such, the council lacks a vulnerability management service which has elevated the risk to the council that one of more vulnerabilities are exploited. The council requires a software platform that will allow vulnerability management rather than just point in time scans whereby each vulnerability must be tracked across its lifecycle and its risk to the council assessed at every stage. The scope of the platform must cover all council assets, Servers, End User devices, external IPs, networking equipment, URLs. The tracking of asset exposure is fundamental in providing the basis for effective vulnerability management thus reducing the risk to the council of cyber attack. Below are further platform specific requirement: • Tenable.io Vulnerability Management for 3100 assets - core product • 2 Day Seat - Tenable.io Specialist Course for one person - training • Quick Start Deploy Remote for Tenable.io – professional deployment services • Tenable PCI ASV – ability to have vendor approved scans for PCI compliance • Standard Tenable Vulnerability Management Container – cloud container for core product • Quarterly reporting and service review – included as standard