Invitation of quotation rates from eligible bidders for performing Cyber Security Audit in BESCOM.

Comprehensive Cyber Security Audit of all BESCOM IT/OT/IoT Systems, Web Applications, Mobile Applications, Policies, Processes, Governance Structure and Compliance Requirements as per Scope defined in Part-1(one no. of audit cycle to be performed in one year)

Vulnerability Assessment & Penetration Testing (VAPT) of IT Application - Large (Large applications like IPDS, TRM, ERP and miscellaneous)-two nos. of audit cycles for each application to be performed in one year (2 cycles each/year)

Vulnerability Assessment & Penetration Testing (VAPT) of IT Application - Medium (Medium scale applications like Pre-paid meters and miscellaneous)-two nos. of audit cycles for each application to be performed in one year (2 cycles each/year)

Vulnerability Assessment & Penetration Testing (VAPT) of IT Application - Small (Small scale applications like SBM, BESCOM official website, Financial accounting systems, Finance and accounts Management software (cash management), GST software, EV (web & mobile app, Jagruthi portal), GangaKalyana web app, HT Mithra mobile app, BESCOM Mithra mobile app and miscellaneous)-two nos. of audit cycles for each application to be performed in one year (2 cycles each/year)

Vulnerability Assessment & Penetration Testing (VAPT) of IT Application of DAS system(IT Application (classified as Large Scale) along with OT Assessment including 10 sampled RTUs) - one no. of audit cycle for DAS application to be performed in one year

Vulnerability Assessment & Penetration Testing (VAPT) of IT Application AMI System (IT application (classified as Medium scale) + IoT system including 16 nos. of sampled meters) - Two audit cycles to be performed in one year