527875 / CS-1993 - Cyber Assessment & Penetration Testing

DWSD requests bids that will provide qualified services for developing/performing cyber exercise and penetration testing for a 24-month period. As a City Department with an Internet website and applications that process sensitive data, DWSD must subject them to vulnerability and penetration tests.

DWSD is seeking a consultant to provide web/application/Application Programming Interface (API) penetration testing services for a minimum of two (2) and up to ten (10) websites and applications in development, which are of varying scope and size. Each go-live will count as one assessment. Some of the websites and applications are hosted in the cloud environment.

Consultants are required to highlight their experience providing penetration testing services in a cloud environment in their proposals. The assessment should include information security guidance that is aligned with industry standards, best practices and methodologies outlined in National Institute for Standards and Technology (NIST), Cyber Security Framework (CSF), ISO/IEC, etc.