The Department of Agriculture, Fisheries and Forestry (the Department) is committed to delivering information services that support the business while defending the information we hold from cyber-attacks and ensuring we comply with relevant legal and whole of government policy requirements.

The department is aiming to reach Essential Eight implementation at a minimum of Maturity Level Two, in accordance with the Protective Security Policy Framework (PSPF).

The Essential Eight baseline makes it harder for malicious actors to compromise systems and it assists organisations to implement the Essential Eight in a graduated manner based upon different levels of malicious actors’ tradecraft.

The Department needs to meet the below Essential Eight Controls under the Regular Backups Mitigation:

Information Security Manual (ISM) Control ID – 1511 - Backups of data, applications and settings are performed and retained in accordance with business criticality and business continuity requirements.

Information Security Manual (ISM) Control ID – 1515 - Restoration of data, applications and settings from backups to a common point in time is tested as part of disaster recovery exercises.

To achieve this, the Department is seeking the services of a service provider experienced in developing Disaster Recovery Plans.

The Department is seeking fixed price quotes from vendors to deliver following services. The vendor needs to provide suitable resources to work in a collaborative manner to achieve outcomes for the Department.

Vendor key deliverables:

• Business Impact Assessments/Analysis
• Develop a Disaster Recovery Plan
• Disaster Recovery Test Plan
• Critical Systems Assurance Check
• Related templates around test plan and disaster recovery
• Completion of templates for five DAFF systems

Please refer to the attached document below for additional requirements on:

• Delivery and Acceptance,
• key personnel expertise,
• Security Clearance for key personnel
• And, how to respond to this RFQ.