Provision of Independent Security Testing

Description

Provision of independent security testing services to provide assurance and support targeted cyber security related accreditation goals such as Cyber Essentials Plus. This is being procured using the Scottish Government Digital and Technology Services DPS - Lot 3 - Cyber Security Services. Only suppliers named on this lot will be able to access this ITT. This is being procured using the Scottish Government Digital and Technology Services DPS - Lot 3 - Cyber Security Services. Only suppliers named on this lot will be able to access this ITT. The scope of the ITT covers, but is not restricted to, the following: SCTS wishes to appoint a suitably qualified and experienced supplier to work with SCTS to deliver an information security assessment services. The supplier should confirm, with evidence, that they are able to cover the following: 1. Cyber Essentials and Cyber Essential Plus – supporting scoping, where needed providing clarity pre-test on what will be considered pass/fail, carrying out independent testing in line with scheme requirements including registration with ISAME, informal and formal reporting; 2. IT health checks as required for PSN and PSN(P) accreditation, as above with PSN requirements in mind and including CHECK scheme compliance; 3. PCI DSS compliance auditing, as above with PCID-DSS in mind, the supplied testers should be PCI DSS Approved Security Vendors (ASV) and supply a Qualified Security Assessor (QSA); and 4. Conducting independent ad hoc security assessments on new and old services as required, this may include more exploratory testing rather than for targeted accreditation standards. A full scope of requirements is included within the ITT.