Tender Description:

Liberty Bank announces tender for procurement of external and internal infrastructure pen test.

Requirements for Companies:

• Company has at least 5 years of experience in providing penetration testing services.
• Company conducted at least 2 projects on similar applications within last 2 years.
  - List of similar projects
• Company has staff, who were involved in at least 2 similar projects with the company within last 2 years.
• Penetration tester who will lead the project has one of the following or similar certifications: OSCP, OSCP+, OSEP, GXPN
• Lead penetration tester has at least 5 years of experience in penetration testing
• Proposal must include:
  - CVs and roles of all personnel involved in testing.
• Company must provide 2 recommendation letters about providing penetration testing services.
• Companies with resident penetration testers will be preferred.
• Company should be authorized by Digital Governance Agency for conducting pen tests according to Law on Information Security of Georgia.

Penetration Test Scope and Scenarios will be sent to interested companies.

Project requirements:

• Preferable active (testing) phase should be finished on December 15, 2024 (reporting can be done till December 25, 2024)
• Proposal must include:
  - Project planning with timeframes
  - Methodologies to be used.
  - Tools to be used.
  - Man/days of each involved personnel.
  - Financial proposal

Deliverables:

• Assessment report of external perimeter and internal infrastructure separately
• Report must include:
  - Executive summary containing overall assessment of security level and list of nonconformities.
  - Detailed list of non-conformities with appropriate evidence
    - Non-conformities should have severity classification.
  
• Recommendation how to solve non-conformity.
• Separate excel file with list of non-conformities and corresponding recommendations.
  

Tender Submission Terms:

• Offers should be submitted on procurement web-page: www.tenders.ge
• Submission Deadline is: 15/11/2024 ; 17:00 PM 
• Bid currency: N/A
• Auction type: Without auction
• Instructions to Apply for E-Tender can be found in the attached file
• Any question during the electronic tender process shall be made in writing and communicated through the Q&A platform of www.tenders.ge website

After the bank’s decision to continue its relationship with the company, an agreement will be signed between the parties in accordance with Appendix #1.

If you are interested, please submit your response no later than November 15, 2024.

For any questions regarding the project or to receive more detailed information, please contact:

Avtandil Nebadze 
Head of the Information Security and IT Security Department, at avtandil.nebadze@lb.ge or by phone at +995 599 25 76 86.

ტენდერის კატეგორია:

• 72900000 კომპიუტერის მონაცემების სარეზერვო დუბლირება და კატალოგების კონვერტირება
• 72500000 კომპიუტერთან დაკავშირებული მომსახურებები