ITES-11172 - USA (Philadelphia, Pennsylvania) - Information Security Assessment and Testing Services - Deadline November 3,2026

(1) Vendor needs to provide information security assessment and testing services to the government authority located in Philadelphia, PA.• Agency is seeking proposals for vulnerability assessment and penetration testing services for agency external gateway, internal network systems, mobile wireless access controls and OT environment.• IT Assessment1. Identify security vulnerabilities in servers, databases, desktops and network devices utilized by agency corporate networks from both external attacker and malicious insider perspectives.2. Exploit these vulnerabilities to gain access to agency computing environment and get as far as possible toward attaining Root or Domain Administrator access privileges.3. Demonstrate the attainment of elevated privileges and ability to export potentially sensitive data.4. Identify security vulnerabilities in agency web applications.5. Identify physical security vulnerabilities by attempting access to computing hardware and sensitive information using social engineering techniques.6. Identify and exploit vulnerabilities in agency user behaviours through simulated social engineering attacks.7. Identify security vulnerabilities in OT environment through OT architecture review and vulnerability assessment.– The contract period will be for one year.– All the questions must be submitted no later than October 22, 2026.