Hiring of GRC-SP in UIDAI

Sheet 1 : Prepatory Phase Components

Sheet 2 : Operational Phase

Sheet 3 : Audit Sheet

Please Enable Macros to View BoQ information

Item Rate BoQ

BoQ_Ver4.0

Name of the Bidder/ Bidding Firm / Company :

PRICE SCHEDULE (This BOQ template must not be modified/replaced by the bidder and the same should be uploaded after filling the relevent columns, else the bidder is liable to be rejected for this tender. Bidders are allowed to enter the Bidder Name and Values only)

NUMBER #

Prepatory Phase Components

1) GRC Project Plan, GRC Framework and Program Review and related reports such as Communication Plan and GRC organization structure, Risk Assessment and Risk Profiling methodologies 2) UIDAI Policy of business divisions - Review / Update, review Procedure Documentation 3) Review of UIDAI IS Policies Documentation 4) Strategic Analysis of Information Security posture of UIDAI 5) Report on Global Risk Intelligence / Threat Intelligence Feed 6) Review /Preparation and recommendation report for Privacy framework of UIDAI (Internal & External Ecosystem Partners) & Legal Compliance (DPDP Act, Aadhar Act, IT Act, NCIIPC rules, prevailing acts related to privacy) 7) Baseline Risk Profiles for ecosystem processes & all internal and external partners 8) Risk Audit Management (assessments, profiling, treatment, remediation proposal) 9) Gap analysis and recommendation report for all security technologies in UIDAI 10) Finalize the plan for Periodic Assessments and Reviews of Processes of various Business divisions 11) Tool implementation and configuration for Vulnerability Assessment & Penetration Testing (network & apps – round 1) brought in by GRC-SP 12) Cryptography / Encryption Implementation Review 13) Security Operations Review – SOC, SIEM, UEBA & SOAR 14) Validation & Incident management Review 15) Exception Management Review (process & implementation) 16) IS tools Implementation Review & Recommendations 17) Strategic Security Analysis Report

Item Wise BoQ

BoQ_Ver4.0

Name of the Bidder/ Bidding Firm / Company :

PRICE SCHEDULE (This BOQ template must not be modified/replaced by the bidder and the same should be uploaded after filling the relevent columns, else the bidder is liable to be rejected for this tender. Bidders are allowed to enter the Bidder Name and Values only )

NUMBER #

Information and Cyber security for Internal ecosystem

IS Program Manager

Security Architect

Application Security Manager

DevSecOps Manager

Encryption Expert

Biometric Security Expert

Data Security & Database Expert

SOC/ SIEM specialist

Network Security Specialist

Application Security Consultant

Infrastructure Penetration Testing Support Team

VAPT Support Team

Network Security Consultant

Cloud Security Manager

Cloud Security Consultant

Governance Manager

Access Manager

Business Continuity and Disaster Management Manager

Governance Consultant

Access Manager Support Team

Audit Manager (Risk)

Audit Consultant (IT & IS Risk)

Bug Bounty Consultant

GRC Archer Manager (compliance)

GRC Archer Consultant (compliance)

Red Teaming

Field Assessment of all external ecosystem partners

Lead Auditor

Auditors

Ecosystem Field Audit Coordinator (Enrolment Centers & ADQCSA/ADQASA) - EU-I & II

Fraud Detection and Forensic Lab

Cyber Crime & Forensic Specialist

Forensic Analyst

Forensic Investigator

Manager, Fraud Risk

Fraud Analytics Consultant

Data Scientist

Application Security Consultant

Privacy & Legal Support

Legal support

Contract Management Support

SLA Management Consultant

Contract Management Consultant

Item Wise BoQ

BoQ_Ver4.0

Name of the Bidder/ Bidding Firm / Company :

PRICE SCHEDULE (This BOQ template must not be modified/replaced by the bidder and the same should be uploaded after filling the relevent columns, else the bidder is liable to be rejected for this tender. Bidders are allowed to enter the Bidder Name and Values only )

NUMBER #

Audit Cost

Unit Cost for Field Audits (For Enrolment Agencies)

Unit Cost of Field Level Information Security and Operational Audits of all the ADQCSA and ADQASA Centers

Unit Cost for Field Audits (For KUAs/ AUAs, ASAs, Sub AUAs / Sub KUAs)

Unit Cost for Pre-onboarding Audit (for AUA/KUA)