Threat and Risk Assessment Security Architecture

This Tender is invited by the Issuer. Overview The Australian Securities & Investments Commission (ASIC) is seeking to engage an independent partner to provide expert advice and assessment of risks to enable strengthening of the security architecture and associated governance of the Registry Connect Program environment, including against emerging AI-enabled capabilities that are increasing in speed, scale, and sophistication. Purpose This engagement will give ASIC an independent, evidence-based view of the cyber risks and recommendations of its current state architecture, and a clear path and recommendations on closing the gaps that matter most in its target state. Scope The scope includes: Assessment of risks to the security architecture and associated governance of the Registry Connect Program environment, including risks arising from emerging AI-enabled capabilities Provision of an independent, evidence-based assessment of cyber risks associated with the current state architecture Development of recommendations and a clear path for closing the gaps between the current state and target state architecture Information Requested In the supplier's response, please return: A completed Foreign Ownership, Control or Influence (FOCI) questionnaire A compliance statement addressing the ASIC Cybersecurity and Protective Security Requirements Instructions to Tenderers Full details are in the attached Statement of Requirement.