Bids are hereby invited for the appointment of a service provider to assist with vulnerability and penetration testing assessment for two (2) years. Scope: Vulnerability Assessments: Internal Vulnerability scans: - Run quarterly internal vulnerability scans to determine weaknesses that could be exploited by internal threats or attackers who gain access to the internal network, - The scope will include all internal web applications, databases and API’s, - Conduct both Authenticated and Non-Authenticated scans, - Provide Quarterly Internal vulnerability scan reports with remedial tasks, External Vulnerability scans: - Run Quarterly External Vulnerability scans identifying security weaknesses exposed to the internet, - The scope will include public-facing web servers, web applications, VPN endpoints, DNS entries and exchange servers, - Provide Quarterly Internal vulnerability scan reports with remedial tasks, Penetration Tests: - Grey Box Internal Network Assessment Run Bi-annual Grey Box Exercise that includes: - Vulnerability scanning or Nmap scans, - Exploitation of identified vulnerabilities, External Vulnerability scans: - Run Quarterly External Vulnerability scans identifying security weaknesses exposed to the internet, - The scope will include public-facing web servers, web applications, VPN endpoints, DNS entries and exchange servers, - Provide Quarterly Internal vulnerability scan reports with remedial tasks, Penetration Tests: - Grey Box Internal Network Assessment Run Bi-annual Grey Box Exercise that includes: - Vulnerability scanning or Nmap scans, - Exploitation of identified vulnerabilities. (Tender №114528768)