Technical Cyber Risk Assessment
Tender Overview
About this tender
This Tender is invited by the Issuer. Overview The Murray-Darling Basin Authority (MDBA) is seeking a supplier to undertake a Technical Cyber Risk Assessment to independently validate its reported Australian Signals Directorate's (ASD's) Essential Eight maturity position. Purpose The purpose of the Technical Cyber Risk Assessment is to independently validate the MDBA's reported Essential Eight maturity position and confirm that key maturity claims are reasonable, evidence-based, and supported by controls operating effectively in practice. Scope The scope includes: Validation of the MDBA's reported Essential Eight maturity position against evidence of controls operating effectively in practice Identification of priority cyber risks and practical remediation actions Identification of any material technical cyber exposures observed during the validation that may warrant further investigation or remediation Sharing of initial findings with the MDBA Delivery of a final report Contract Terms and Conditions The Assessment is expected to be completed within 3 weeks of commencement Initial findings are to be shared with the MDBA following completion of the Assessment A final report is to be delivered 8 weeks from commencement of engagement
How to respond to this tender
A strong tender response is clear, compliant, and backed by evidence. These steps apply to most Australian and New Zealand public tenders.
Read the requirements in full
Open the official listing and download the full tender pack. Note the response schedules, evaluation criteria, mandatory conditions, and the exact closing time and lodgement method.
Confirm you are eligible and it is worth bidding
Check licences, insurances, certifications, and any conformance requirements before you commit. A quick bid or no-bid decision saves days of wasted effort on a tender you cannot win.
Answer every criterion with evidence
Respond to each evaluation criterion directly and back your claims with concrete examples, referees, and past performance. Address the buyer’s stated need, not a generic capability statement.
Lodge early through the official portal
Submit through the source portal well before the deadline. Late or incorrectly lodged bids are almost always rejected, so leave time for uploads, portal errors, and last-minute questions.
