Gateway IRAP Assessment

This Tender is invited by the Issuer. Overview The Royal Australian Mint is seeking an Infosec Registered Assessor to conduct a security assessment of the Mint's internet gateway, classified up to OFFICIAL:Sensitive. Purpose The Mint will use the completed assessment report to inform cyber security uplift planning and for system authorisation purposes. Scope The scope includes: Assessing the Mint's internet gateway against the requirements of the Protective Security Policy Framework (PSPF), the Information Security Manual (ISM), the Australian Government Gateway Security Standard, and other Australian Government gateway policies, frameworks, and guidance Providing a completed IRAP Assessment Report, including an Executive Summary, a gateway system overview, the assessment scope and boundary, overall strengths and weaknesses, detailed findings with supporting information, evidence, and potential for risk, and remediation recommendations Providing a completed assessment control matrix Contractor Requirements Must be an Infosec Registered Assessor Must hold a Negative Vetting 1 (NV1) security clearance or higher Must have experience conducting security assessments on internet gateways for an enterprise Government entity specific experience is desirable