ITES-10731 - USA (Hastings, Minnesota) - IT Security Assessment Services - Deadline August 7,2026

(1) Vendor needs to provide IT security assessment services to the government authority located in Hastings, MN.– Provide the Contractor with timely access to systems, networks, applications, documentation, and personnel required to perform the penetration testing activities, including any necessary credentials, test accounts, or VPN access.– Communicate all relevant County security policies, compliance requirements, and operational procedures that may impact testing, including any restrictions on testing methods or timing.– Review interim findings, status updates, and draft reports provided by the Contractor and supply consolidated feedback within agreed–upon timeframes to support project milestones.– Provide internal support for triaging and validating any critical vulnerabilities or security events identified during testing, including facilitating communication with system owners and technical teams.• Threat Modelling: Develop an organizational profile from an attacker’s perspective. • Vulnerability Enumeration: Identify and categorize all externally and internally exposed systems, critical assets, and any associated vulnerabilities that may be accessible to authorized or unauthorized users. • Defensive Validation: Assess the efficacy of current detection and response methodologies. • Exploitation Analysis: Conduct safe, controlled exploitation to demonstrate real–world impact and potential sensitive data exposure (e.g., via information leakage or social engineering). • Provide actionable recommendations for remediation of the identified practices and/or exposures based on the above testing • Provide recommendations for protecting key county assets. • Provide understanding of the effectiveness of current defensive mechanisms and attack detection methodologies. (2) All the questions must be submitted no later than August 7, 2026.