IS pažeidžiamumų vertintojo (security tester) paslaugos (Atviras tarptautinis pirkimas)

The contract starts on the date of its signing by the last party. The contract remains valid until all obligations are fully met or until the contract is terminated. The services under the contract are to be provided from the contract's effective date until the maximum allocated funds of 105,000.00 EUR (including all taxes) are expended, or for a period not exceeding 36 months, whichever occurs first. No specific key milestones or phases are explicitly stated.

The core scope of work for this tender involves the provision of IS vulnerability assessor (security tester) services.

The summary of the Statement of Work and core deliverables includes:

• Security Testing and Assessment: Performing security testing, vulnerability assessment, and penetration testing on Information Systems (IS), web applications, APIs, mobile applications, infrastructure, networks, configurations, authentication, authorization, access control, log entries, and other specified components. This will utilize both manual and automated testing methods, adhering to recognized security testing methodologies.
• Reporting: Preparing comprehensive reports detailing the findings of IS penetration testing and vulnerability assessments. These reports must include identified vulnerabilities, their risk assessment (using CVSS or an equivalent methodology), supporting evidence, an evaluation of the impact, recommendations for remediation, and, when applicable, the results of retesting.
• Coordination and Communication: Coordinating with the Buyer (and potentially the IS implementer or other responsible parties) to define the testing scope, boundaries, plan, deadlines, and secure testing conditions. Ensuring effective communication, work coordination, and timely delivery of results.
• Service Delivery Mechanism: Services will be ordered by the Buyer on an as-needed basis through an Order Management System (OMS). Each individual task will involve agreeing on the specific content, scope, preliminary hours, and completion timeframe with the Buyer.
• Contract Duration and Value: Services are to be provided for a period not exceeding 36 months or until the maximum allocated budget of 105,000.00 EUR (including all taxes) is utilized, whichever occurs first. The Buyer is not committed to purchasing the full service volume but will procure services based on actual need up to the specified contract value.
• Required Documents/Deliverables: A Service handover-acceptance act and an Invoice must be submitted.