Multi-Supplier Framework for the Provision of Network Penetration Testing Services

The objective of this competition is to establish a framework of suitably qualified Participants that will be available to tender for the provision of network penetration testing services for the Authority upon request. At its discretion, following this Framework competition, the Authority may enter into Contracts with a maximum of five Participants. The Authority requires the provision of (external/internal) network penetration testing services for the security of the network infrastructure, cloud and premise networks, which will enable the Authority to prioritise, mitigate and remedy potential vulnerabilities and/or weakness detected. The systems under management, and or, in development include: Corporate systems in the Equinix Data Centre; The Back Office system relating to the Leap Card, which are in the Eir Data Centre; Leap App NFC System (Top-up using Phone) based in the Amazon (AWS) Cloud; The back office system supporting the Commercial Bus Operators, which is based in the Amazon Cloud; National Journey Planner in the AWS cloud; Real Time Passenger Information System in the AWS cloud; The Regional Bikes back office system, which is in the Vodafone data center; The Regional Bikes Website, which is based in the AWS cloud; The Mobile Ticketing System [Microsoft Azure (“Azure”)]; The Tax Saver system (Azure); The Business Intelligence and Data Analytics platform (Azure); Transport modelling Systems hybrid cloud (AWS); Next Generation Ticketing (future system); Call Centre Consolidation (future system); Next Generation AVL (future system); Corporate Web Sites in the AWS cloud; and Bit Bucket / JIRA. The above list of systems is indicative of systems the Authority will have the responsibility to maintain. The list does not purport to be comprehensive. Most of the data centres in the list are operated by third party consultants, not Authority staff. Periodically, the Authority will develop and acquire new systems, which may require testing, while also consolidating and relocating existing systems to reduce the number of data centres and cloud environments.