RFP # IS 02/17 - Network Vulnerability Assessments and Penetration Testing

The Canadian Red Cross Society (CRC) is interested in conducting a security assessment that will allow it to gain a better understanding of potential corporate network vulnerabilities that may be visible from the Internet. This is also required to meet the PCI Compliance for Information and Cyber Security Penetration testing.
 
More specifically, Bidders are invited to submit a proposal to provide network vulnerability assessments and penetration testing of Internet-based servers and services. The successful Bidder will be engaged to find any gaps in CRC’s implementation of information-security best practices, to identify any specific security vulnerabilities, and to recommend resolutions for both. The vendor will be called upon to perform a Penetration test on (10) different IP addresses.
If the total cost of this service is dependent on the number of active website pages or other criteria, the finalists would be provided with the list of the IP addresses in scope to do an initial scan and provide a more precise quote.