ISAC - Network Security Assessment & Penetration Testing

The state and local contracting opportunity is for IT consulting services related to two specific audit assignments - network security assessment and network penetration testing - for the Illinois Student Assistance Commission (ISAC). The selected vendor will be required to perform a comprehensive network security assessment, including external and internal network assessments, network architecture and configuration review, firewall security review, IDS/IPS security review, social engineering testing, database security assessment, operating system scanning, and Active Directory review. Additionally, the vendor must conduct external and web application penetration tests, as well as a risk assessment based on the NIST risk management framework. The vendor must have a minimum of 5 years of experience performing information security reviews, including 2 years of IT network security assessment and external penetration testing, and must submit resumes and documentation of previous relevant assignments. The work is expected to be completed within 3-4 weeks, with a target completion date prior to the end of May 2024.

The contracting opportunity is open to governmental, sole proprietor, partnership, and various corporate entity types. No set-aside designations or restrictions on the types of organizations that can respond are mentioned. The provided information does not indicate any listed incumbent vendors or current contractors, nor any existing infrastructure or technology that requires integration. The pricing terms specify that quoted prices must be valid for the term of the contract, include shipping and handling, and cannot be increased. ISAC reserves the right to reject any offers, award based on the lowest price, and modify quantities. The vendor is not required to divulge specific client names if non-disclosure agreements prevent it, but should provide the company's general industry and description instead.