OPC has established a program of work, known as the Nimbus Program, that will enhance and modernise its ICT infrastructure. The program will be transformational and improve OPC’s cyber security capability, ICT stability, business application functionality, mobility and exposure to risk.

A critical element of the Nimbus program is to uplift OPC’s cyber security posture. This is necessary to maintain the agency’s PROTECTED environment and achieve a target of maturity level two against the “Essential 8” requirements.

As per the Information Security Manual - ISM-1163; Revision:10, OPC requires internal and external penetration testing prior to deployment, including prior to deployment of significant changes, and at least annually thereafter. The agency requires testing on the following services:

• servers;
• applications;
• network infrastructure (including access points and firewalls);
• connected operational technology devices and;
• workstations.

We need to conduct a penetration test to identify existing cyber security issues and to baseline our current posture. It will also be used to provide assurance that Nimbus activities will give required coverage.

Estimated start date: Wednesday, 28 August 2024

Initial contract duration: Until completion of contracted services

Extension term: Not applicable

Location of work: ACT