Penetration Test and ITHC Services to the NDA

Provide the NDA with: * PSN Health Check producing a report in the format and with the comprehensiveness appropriate for the Cabinet Office PSN team. * The NDA’s annual IT Health Check (ITHC), a comprehensive penetration test and vulnerability scan to identify weaknesses specifically at points of data ingress/egress and potentially to include an element of social engineering testing. * The ITHC should be run in two stages, an initial exploratory test during December 2015, with a full retest and report at the end of January 2016. * The NDA may also call upon the successful supplier to provide ad-hoc testing to new or existing solutions as required; within mutually acceptable timescales