bids are invited for 1. information system audit for head office, data centre ( dc ) , disaster recovery site ( dr ) and 40 branches. 2. vulnerability assessment and penetration testing ( vapt ) for servers and systems. 3. vulnerability assessment and penetration testing ( vapt ) for applications. 4. vulnerability assessment and penetration testing ( vapt ) for network infrastructure. 5. secure configuration audit for critical servers. 6. secure configuration audit for network devices. 7. identifying areas with deficient internal controls, recommend corrective actions, various trainings to address deficiencies and follow up to ensure that management effectively implement the required access. 8. banks policies and procedures related to i.t. infrastructure, information security. cyber security, business continuity plan etc. 9. is audit should cover all the baseline guidelines given by rbi / nabard / uidai / npci etc.