.JPG)
.jpg)
ZANZIBAR SOCIAL SECURITY FUND
P.O.BOX 2716,
KILIMANI MNARA WA MBAO
ZANZIBAR
CONSULTANCY
SERVICES FOR PENETRATION TEST FOR EXTERNAL AND INTERNAL SYSTEMS SECURITY AUDIT
OF ZANZIBAR SOCIAL SECURITY FUND NETWORK PERIMETER
EXPRESSION OF INTEREST NOTICE
07th
December, 2016
1.
Zanzibar Social Security Fund (ZSSF) as part of its
drive to enhance the efficiency of its expanding operations and diversify its
surplus fund wishes to embark on A CONSULTANCY SERVICES FOR PENETRATION TEST FOR EXTERNAL AND
INTERNAL SYSTEMS SECURITY AUDIT OF ZANZIBAR SOCIAL SECURITY FUND NETWORK
PERIMETER. ZSSF herewith wishes to assign a reputable consulting firm to
render consultancy services on the named proposed assignment.
2.
The service under the contract shall include but not
limited to the following:-
·
External Network Vulnerability Assessment and
Penetration Testing
·
Internal Network Vulnerability Assessment and
Penetration Testing
·
Web Application Penetration Testing
·
Dial-In / RAS Security Testing
·
DMZ or Network Architecture Designs / Reviews
·
Wireless Network Assessment and Penetration
Testing
·
Virtual Infrastructure Security Assessment
·
Server Configuration Reviews
·
Firewall and Router Configuration Reviews
·
VPN Configuration Reviews
·
Voice over IP Assessments
·
Social Engineering Assessments
·
Physical Security Reviews
·
Software Source Code Reviews
·
Application Threat Modeling and Design Reviews
·
Information Security Policy and Procedure
Development or Review
·
Information Security Risk Assessment
·
Security Awareness Program Development or Review
The consultant shall be required to provide Internet perimeter penetration test
which will include the discovery of all host based systems accessible via the
Internet on the outside of Zanzibar
Social Security Fund Internet Firewalls, the discovery of any
vulnerabilities, an attempt to compromise those systems using any discovered
vulnerabilities in attempt to gain root or administrative access to the system.
You will also attempt to compromise or overcome any router, switch, VPN,
firewall or proxy based security devices discovered in the perimeter scan.
3.
ZSSF now invites eligible consultants to express their
interest in providing the above mentioned services. Interested firms must
provide information indicating their professional capability to undertake the
consultancy services. Such information may include company profile, legal
documents, availability of appropriate skills among staffs, description of
similar assignments, experience in similar conditions, project management
methodology, etc.
4.
A shortlist of consultants will be prepared on the
basis of Expression of Interest submitted to ZSSF in writing. The selection of
a consultant will be Quality and Cost Based Selection (QCBS) in accordance
with procedures set out in the Public Procurement and disposal of Public assets
(Selection of Employment of Consultants) Regulations, 2005.
5.
Interested consultants may obtain further information
at the address given below between 8:30 hours and 15:30 hours, Monday to Friday
inclusive, exclusive of public holidays, before the deadline for submission of
Expression of Interest.
6.
The deadline for the submission of expression of
interest is 21thDecember, 2016 at 10.00hrs local time. The response
to expression of interest in writing, should be directed to:
MANAGING DIRECTOR
P.O. BOX 2716,
TEL: +255-24-2230242,
Fax No.
- 255-24-2232820
Email: info@zssf.org
No comments:
Post a Comment