Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support-Sv-Jmä-250617-002, Planning, Implementation And Follow-Up Of Pentest

It Services: Consulting, Software Development, Internet And Support-Sv-Jmä-250617-002, Planning, Implementation And Follow-Up Of Pentest. The Client Intends To Determine, Evaluate And Document The Allocation Of It Security Tests With The Aim Of Simulating An Attacker And/Or Analysis Of The Source Code As Well As Configurations Of Exploiting Vulnerabilities In The Application Or In The System To Be Examined. The Tender Aims To Award Penetration Tests, Which Consist Of Basic Packages And Optional Addons. These Are Compiled Individually As Required. A Total Of 10 Packages Are To Be Offered. The Basic Packages Include Tests For Web Applications, Rich Clients, Cloud Applications, Mobile Apps, Networks, Operating Systems And Night Tests, Which Include Weakness Analysis And Removal As Well As Extensive Documentation. The Optional Addons Include Interface Analysis, Network Interfaces And Workshops For Detailed Weakness Analysis And Finding A Solution. When Evaluating And Documenting The Results, Great Importance Is Placed On The Classification Of Weaknesses According To Cvss 4.0; In Addition, The Secrecy Of The Information Must Be Guaranteed. The Test Process Includes A Kick-Off Discussion To Determine The Test Period And Scope, Optionally Technical Clarification, The Implementation Of The Test Including Communication Via Any Changes, As Well As The Provision Of Final Reports And Debriefing. The Reports That Are Made Available Within Two Weeks Of Completion Of The Test Contain Reports, Tracking Sheets And Machine -Readable Data And Are Created In German By Default. The Client Assumes About 10 Test P.A From Various Forms. The Minimum Requirements For Providers Include Many Years Of Experience In The Field Of Pentest And The Use Of Recognized Hacking Tools Such As Burp Suite Pro And Nessus. In Order To Fulfill This Task, The Swm Pursues A Multi-Vendor Strategy That Is To Be Implemented Using Three External Framework Contractual Partners (Then Contractor).