Re-Advertisement: Proposals are hereby invited for the following: Appointment of a service provider to perform network and web application vulnerability assessment and penetration testing for a period of three years with an option to extend for two years on behalf of PIC Internal Audit Department. Scope of Work: The PIC’s Internal Audit Department (IAD) requires the services of an organisation that has specialist expertise in the IT security field to perform network and web application vulnerability assessments and penetration tests on the PIC’s IT environment over a three (3) year period, with an option to extend for a further two (2) years at the instance of the PIC. The objective is to help the PIC to proactively identify exploitable vulnerabilities within the target systems/infrastructure and recommend ways of addressing the identified gaps. The scope of the services required per each scan cycle includes the following elements: a. Internal and wireless network security assessment (penetration test plus Vulnerability scanning); b. External network security assessment; c. Web application security assessment of one web application per year; d. Social Engineering; e. Retest of findings from previous years (as part of a scheduled assessment covering (a) –(d) above, or on demand/request). (Offerte №105425315it)