(1) Vendor needs to provide security assessment service to the government authority located in Fredericton, NB.– The assessments will occur across 7 physical locations.– The vendor’s final report must be based on the site–by–site interviews applying a questionnaire.– Observations supporting the maturity of the application of controls and observed vulnerabilities including:– What security related policies, procedures, and practices are documented.– Identify and review the implementation of these PPPs onsite, through a first–hand observation of the activities: facility tour, observation of behavior, questions for staff.– Review accountabilities, roles, responsibilities, and reporting that ensures these PPPs are being adhered to, and how gaps and failures are detected and mitigated.– Review what measures are taken to consistently reassess threats, risks, and vulnerabilities, which may require enhancements or amendments to controls.– Produce a report that details the PPPs in place, how they are being implemented, maintained and revised, as well as gaps noted in either documentation or practice.– Determined maturity level of each site based on analysis of information gathered in site assessment questionnaire and physical walkthroughs.– A remediation plan to address found vulnerabilities.(2) All the questions must be submitted no later than August 27, 2024.
↧