Cyber Security Compliance and Benchmarking Audit

This Tender is invited by the Issuer. Overview The Digital ID Division of the Australian Competition & Consumer Commission (ACCC) is seeking an independent and appropriately qualified cyber security service provider to undertake a baseline cyber security compliance, assurance and benchmarking audit of its technology environment, security controls, processes and practices. Purpose The Division requires an evidence-based assessment of its current cyber security posture to establish a baseline, identify control deficiencies and risks, and develop a prioritised roadmap for improving cyber security maturity and compliance. Scope The scope includes: Conducting a baseline cyber security compliance, assurance and benchmarking audit covering the Essential Eight, applicable Information Security Manual (ISM) controls, cyber security tools and capabilities, and the Division's contribution to the agency's obligations under the Commonwealth Protective Security Policy Framework (PSPF) Establishing the current state of the Division's cyber security posture without presuming that any particular Essential Eight maturity level has been achieved Identifying existing control implementations, deficiencies, effectiveness issues and gaps against the relevant requirements Providing independent assurance and actionable recommendations based on the assessment findings Implementation of remediation activities is outside the scope of this RFQ. Contractor Requirements Must be an independent and appropriately qualified cyber security service provider