Closed

Independent Cyber Security Assessment for the Practicum Exchange Website

Tender ID: 567507


Tender Details

Tender #:
DM-25800  
Status:
Closed
Publish Date:
18 September 2024
Closing Date:
30 September 2024

Tender Description

This Tender is invited by the Issuer.

The newly developed external Practicum Exchange Website requires an Authority to Operate (AtO). It has been issued with an interim AtO which expires on 6 December 2024.

The department requires experienced, independent assessors to complete an assessment and report to allow the department to determine the risks associated with approving an Authority to Operate.

Assessment must be in line with the department's Cyber Security Authorisation Policy and Risk Management Framework.

Deliverables

1. The procured ICT assessors complete the independent Cyber Security assessment for the Practicum Exchange Website with the required security documentation substantiated with supporting evidence in accordance with the Australian Government standards (PSPF - Protective Security Policy Framework, ISM - Information Security Manual, HCF - Hosting Certification Framework) for the Department’s approval.

2. The successful vendor may be required to assess some or all of the following documentation in line with ACSC ISM, PSPF and Essential Eight Maturity Model:

  • Security Overview Document
  • System Security Plan
  • System Security Plan — Annex
  • Incident Response Plan
  • Continuous Monitoring Plan
  • System Security Architecture
  • Threat and Risk Assessment

3. Findings Report on the effectiveness of ICT controls and recommendations to address or mitigate non-compliance, and make certification recommendation to the department.

Skill/Expertise Required for the Outcome

  • Must be an ASD certified IRAP assessor.
  • Demonstrated experience in applying the ISM, PSPF, HCF and its guidance to perform the assessments.
  • Experience in delivering government contracts relating to security governance, risk and compliance.



Icon
Interested to find more tenders relevant to you and your business? You can try our advanced tender search today.