Penetration Testing Services

This Tender is invited by the Issuer. Overview The Australian Competition & Consumer Commission (ACCC) Digital ID Program requires a one-time engagement of an external penetration testing provider to conduct an independent and comprehensive security assessment of the Digital ID Regulator System (DIRS) prior to its production release. Purpose This engagement is intended to provide independent validation of the platform's security posture by simulating real-world attack scenarios across both external and internal threat vectors. While a range of internal security controls and automated tools are already in place, penetration testing introduces adversarial techniques that allow for the identification of vulnerabilities that may not be detected through standard testing approaches. The outcome of this engagement is to identify vulnerabilities, assess the effectiveness of implemented security controls, and provide clear and actionable remediation guidance to support risk reduction prior to public release. Scope The scope includes: Conducting an independent and comprehensive security assessment of the Digital ID Regulator System (DIRS) Simulating real-world attack scenarios across both external and internal threat vectors Identifying vulnerabilities in the platform Assessing the effectiveness of implemented security controls Providing clear and actionable remediation guidance to support risk reduction prior to public release Instructions to Tenderers The engagement is time-sensitive, with external penetration testing required in August. Please see the document for further details about requirements.