Information Security Audit (Network and Cyber Security) GIGW

F. No. D-21013/50/2026/Admn. IV

(The financial bid should be submitted separately in cover-II) QTY.

Information Security Audit (Network and Cyber Security): GIGW compliance 1

1. Network Security Audit & Web Application Security Audit

(The Information Security Audit shall cover the Institute's IT infrastructure comprising 01 Server, 01 Firewall, 01 Router, 30 Network Switches, 300 Endpoints (Desktop/Laptop Systems), 20 Wireless Access Points and 05 Web Applications)

i) Vulnerability Assessment & Penetration Testing (VAPT) of all IT Assets.

ii) Network Security Audit of Firewall, Router, Switches & Network Infrastructure.

iii) Server Security Assessment & Configuration Review.

iv) Endpoint Security Assessment of Desktop/Laptop Systems.

v) Wireless Security Assessment of Access Points.

vi) Web Application Security Audit (OWASP Top 10).

vii) Security Configuration Review of IT Infrastructure.

viii) Risk Assessment & Vulnerability Classification.

ix) Implementation of Approved Remediation Measures.

x) Security Hardening of IT Assets.

xi) Re-validation of Remediated Vulnerabilities.

xii) Submission of Audit Reports & Final Report.

xiii) Onsite Audit, Validation & Reporting at ICAR–CAZRI, Jodhpur.

(http://www.cazri.res.in/塹ᴻ䡿ⲯ嶂藄挧ꮥ)

2(a) Part-I: GIGW Compliance Audit

i) GIGW Compliance Audit as per Latest GIGW 3.0 Guidelines.

ii) Gap Analysis & Identification of Non-compliances.

iii) Submission of GIGW Compliance Audit Report.

2(b) Part-II: Implementation of GIGW Compliance

i) Implementation of Approved GIGW Corrective Measures through Redevelopment of the Institute Website for Compliance with GIGW 3.0.

ii) Re-validation of GIGW Compliance.

iii) Submission of Final GIGW Compliance Report.

Terms & Conditions:

1. CERT-In Empanelment: All participating firms must be currently empaneled with the Indian Computer Emergency Response Team (CERT-In), Ministry of Electronics & Information Technology (MeitY), Government of India, as an authorized Information Security Auditing Organization.

2. Mandatory Documentation: The firm must attach a valid copy of the CERT-In Empanelment Letter/Certificate. Bids received without valid empanelment proof shall be rejected.

Quotations should be complete in all respects at first instance; incomplete quotations and quotation of firms, who merely cut paste specifications from tender document are liable to rejection.

GST, if applicable

(Total bid price in Rupees (in figures)-----------------------------------

Seal and Signature of bidder