Tenders Are Invited For Computer Audit And Testing Services – Framework Agreement For Penetration Testing

Computer Audit And Testing Services – Framework Agreement For Penetration Testing. 1.2. Overarching Awarding Objectives Of The Client The Client Pursues At Least The Following Strategic Objectives By Awarding The Service: • Increasing The Level Of Information Security • Preventive Risk Minimization • Compliance With Internal And Regulatory Requirements For Information Security 1.3. Subject Of The Service The Client Intends To Award The Provision Of Services For Carrying Out Penetration Tests, Security Analyzes As Well As Evaluations And Reports As Part Of An Eu-Wide Tender. The Scope Of Services Includes In Particular: - Checking The It Security Of The Clients Systems And Applications Through Targeted Penetration Tests And Additional Security Analyzes - Identifying Weak Points And Deriving Measures To Minimize Risks. The Contractor (Contractor) Can Also Suggest Further Tests If They Represent A Comprehensible Added Value For The Client. A Certain Success, In Particular The Complete Identification Of All Weak Points, Is Not Owed. 2. Service Request And Contract Structure: The Services Are Provided On The Basis Of An Evb It Service Contract, Whereby There Is Initially An Initial Concept Phase And Then The Individual Tests Are Carried Out Based On Individual Requests. The Services Are Provided On The Basis Of An Evb-It Service Contract. At The Beginning Of The Contract Term, There Is A Preparation And Conception Phase To Coordinate The Procedure, Prioritize The Test Items And Create A Retrieval And Prioritization Plan. The Contractor Creates This Together With The Client. The Plan Is Used To Determine And Prioritize The Penetration Tests To Be Carried Out In The Respective Service Period As Well As To Plan And Coordinate The Individual Service Calls. If Necessary, The Call-Off And Prioritization Plan Must Be Updated Jointly By The Client And Contractor During The Contract Term And Adapted To Changed Professional, Technical Or Security-Related Requirements. The Penetration Tests Are Carried Out On A Needs-Based Basis Based On Individual Requests By The Client. The Client Is Entitled To Order And Have Several Individual Calls Carried Out In Parallel, As Long As This Is Necessary From A Technical, Organizational Or Security Perspective. For The Duration Of The Contract, An Annual Maximum Available Service Volume Of Approx. 120 Person Days (Pt) Is Assumed As A Non-Binding Basis For Calculation And Planning. The Stated Quantity Is Based On The Currently Expected Needs And Serves Solely As A Guide For The Implementation Of The Contract. It Does Not Represent A Minimum Purchase Quantity And Does Not Constitute A Claim By The Contractor To Request Specific Services Nor An Obligation On The Part Of The Client To Fully Utilize The Estimated Volume Of Services. The Actual Need For Penetration Testing Services May Vary During The Contract Term And W