# Security Penetration and IT Health Check

> A sourced UK public sector contract award published by WATER SERVICES REGULATION AUTHORITY.

## Key facts

- Buyer: WATER SERVICES REGULATION AUTHORITY
- Supplier: [Sapphire Technologies Limited](/suppliers/sapphire-technologies/public-sector-contract-awards)
- Award value: £19,945
- Tender value: £19,945
- Award date: 10 December 2015
- Published: 18 November 2016
- Contract start: 4 January 2016
- Contract end: 3 January 2017
- Stage: awarded
- Procurement category: services
- Notice ID: cf61b5ba-127a-47a3-8e29-c71be0928e92-84690
- OCID: ocds-b5fd17-329fab31-adc9-11e6-9901-0019b9f3037b

## Description

The objective is to ensure that Ofwat has a secure, robust and managed network infrastructure in place that satisfies the CESG and their PSN accreditation and Ofwat’s Internal Auditors\. The areas of expertise or services that we may require are: • CLAS consultants with expertise in accrediting organisations to the PSN; • Penetration testing and system health checks \(compliant to security standards and CESG’s CHECK service\); • Computer and server forensics; • Auditing; • Security policy advice and support \(and any legal interfaces\); • Information risk, the information assurance maturity model \(IAMM\) and the information risk return to Cabinet Office \(that now includes the Security Policy Framework \[SPF\] return\); • HMG Cyber security initiatives; • Network Access Security; • Boundary security and remote working security; • Encryption of information assets at rest; • Mobile device security; • Email encryption and web security; • Website security; • Business continuity; • Cloud security principles and their implementation; • Security strategy and vision; and • Training and education across the areas listed above\. The support service we are looking for must be a flexible agreement where we can contact the supplier at short notice and request help on one of the areas above\. We do have specific requirements that we can already identify as necessary within the next 12 months: Security penetration test and health checks to be conducted in early to mid-January 2016 and June 2016\. This is a mandatory requirement for our PSN accreditation process\. Re-accreditation to the PSN is in the spring of 2016\. \(A sampling approach is acceptable when considering the penetration testing of its laptop population as all models are the same make and model and have a similar configuration\)\.

## Related contract awards

- [Ofwat Consultancy Framework](/contracts/ocds-b5fd17-b3d20afb-e99c-4be6-b05b-fbe9b11a7135) — WATER SERVICES REGULATION AUTHORITY
- [Board Effectiveness Review](/contracts/ocds-b5fd17-88e0c074-30e7-4f8d-8a3e-45d02c81d7a3) — WATER SERVICES REGULATION AUTHORITY
- [Call off for Special Financial Support](/contracts/ocds-b5fd17-b5bef191-46a4-4c8e-ad14-c1a917156d49) — WATER SERVICES REGULATION AUTHORITY
- [C-MeX and D-MeX Shadow Year Research for Price Review 2019](/contracts/ocds-b5fd17-04268b0c-bb98-48cb-967f-202189a9cc65) — WATER SERVICES REGULATION AUTHORITY
- [Provision of IT Health Check](/contracts/ocds-b5fd17-7b83bc3a-c7cf-4eae-8b75-15566800dd72) — NHS SHARED BUSINESS SERVICES LIMITED
- [Checkpoint Firewall Licensing and Requirements](/contracts/ocds-b5fd17-abf68c1c-3fb6-4c4e-b51d-0c6cd2462f8a) — South Tyneside Council
- [Egress Business email encryption](/contracts/ocds-b5fd17-df1f908c-4e57-4fd7-81da-6a7192fa20d0) — CHESHIRE EAST COUNCIL
- [Egress Email Encryption Software](/contracts/ocds-b5fd17-d867e417-5db2-4f10-bae1-1f085b506b67) — Cheshire East Borough Council
- [Taxi and MPV \(1-8 seats\) Passenger Assistant - Taxi and MPV \(1-8 seats\) Passenger Assistant](/contracts/ocds-b5fd17-c807205b-b095-4dad-80ed-5eb64a2885e7) — East Sussex County Council
- [Oracle Fusion Enterprise Software](/contracts/ocds-b5fd17-b94faf4e-06c9-470e-af64-acbf9a5af410) — DEPARTMENT OF HEALTH AND SOCIAL CARE
- [National Roads Telecommunications Service 3 \(NRTS3\) Independent Assurance Review](/contracts/ocds-b5fd17-4a336c05-e4fd-4530-86b6-b037c17f1acd) — National Highways Limited
- [Taxi and MPV \(1-8 seats\) Passenger Assistant - Taxi and MPV \(1-8 seats\) Passenger Assistant](/contracts/ocds-b5fd17-63f8a7e1-2c91-4e8e-a7e9-fb3b7b757186) — East Sussex County Council

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/cf61b5ba-127a-47a3-8e29-c71be0928e92-84690)