Cyber Security Assurance Services

This Tender is invited by the Issuer. Overview The Department of Parliamentary Services (ACT) is seeking an independent Cyber Assurance Partner to provide targeted, evidence-based assurance in relation to specified cyber security matters and milestone deliverables. The Services will provide DPS with independent assurance that relevant cyber risks are appropriately identified, assessed, accepted or treated, and transparently reported, and that key cyber security deliverables are suitable and fit for their intended purpose. Scope The scope includes: Provision of independent, evidence-based cyber assurance services in relation to specified cyber security matters and milestone deliverables Objectives The objectives of the Services are to: Provide independent cyber assurance to the Chief Information Officer (CIO) and the Chief Information Security Officer (CISO) that DPS is responding appropriately to the ANAO finding and associated cybersecurity risks Assess the quality, completeness and practical application of key cybersecurity governance, risk, assurance, architecture, accreditation and resilience artefacts Improve transparency of cyber risk ownership, treatment, acceptance and reporting to executive and governance forums, including matters relevant to the Executive Committee (EC) and Audit and Risk Committee (ARC) Identify material gaps, dependencies and delivery risks early enough for DPS to take corrective action Provide clear, proportionate and actionable recommendations that support, rather than duplicate or impede, PICR delivery Verify there is a defensible evidence base for cybersecurity decisions, including residual risk acceptance and Authority to Operate decisions Instructions to Tenderers This RFQ is limited to invited sellers only. Requests to be added will not be considered. Sellers may be included in future RFQs.