RFP – Managed SOC & VAPT Services | NRSP Microfinance Bank Limited
Download RFP documents for open tenders of NRSP Microfinance Bank Limited free of cost.
Provision of Managed Security Operations Center (SOC) and Vulnerability Assessment & Penetration Testing (VAPT) Services
About the Project
NRSP Microfinance Bank Limited is seeking proposals from qualified cybersecurity service providers for a 24x7 remote Managed Security Operations Center (SOC) service and authorized Vulnerability Assessment and Penetration Testing (VAPT). The engagement is intended to strengthen continuous security monitoring, incident detection and response support, and the identification of security weaknesses across the Bank's technology environment.
NRSP_RFP_SOC_VAPT.pdf · Full RFP Document
Tender Particulars
Services Required
1. Managed SOC
- 24x7 remote monitoring, event collection and analysis
- SIEM, file integrity monitoring (FIM) and alert triage
- Threat hunting, incident investigation and escalation
- Reporting and approved workflow automation (SOAR)
Asset baseline: 85 servers, 45 network/security devices and 1,500 endpoints.
2. Vulnerability Assessment & Penetration Testing (VAPT)
- Active Directory internal assume-breach testing
- Exchange Server configuration, version and public exploit checks
- Internal testing of non-domain-joined end-user endpoints
- External grey-box VAPT of 65 web applications, 75 servers and 5 firewalls
Key Eligibility Requirements (Summary)
- Legally registered entity in Pakistan with valid tax registrations; not blacklisted or debarred
- At least 5 years of cybersecurity services experience
- Managed SOC services delivered to at least 5 clients, including at least one bank, financial institution or comparably regulated organization
- VAPT completed for at least 4 distinct government/public-sector organizations in the 24 months before the deadline
- Established 24x7 SOC operating capability
- Qualified VAPT lead and team (e.g. OSCP/OSEP and OSWE or equivalent)
- Current SOC 2 attestation report and valid ISO/IEC 27001 certification
Evaluation
- Mandatory eligibility is assessed on a pass/fail basis.
- Technical proposals are scored out of 100 marks. A minimum of 85 marks is required, plus category minimums.
- Financial proposals of technically qualified bidders are then evaluated. The award is recommended to the lowest evaluated responsive bidder.
Submission
Proposals must be submitted in the form, manner and by the deadline stated in the tender notice. Prices must be quoted in PKR with taxes shown separately.
Only formal addenda issued by NRSP amend this RFP. Please read the full RFP document for complete terms.
Products & Services
More Info
Head Office
Head Office Address: Shalimar Arcade Plot No. 11-12C, Shalimar Avenue, Shalimar Town, Near Motorway Fatehjang Interchange, Fatehjang Road, Islamabad- 46330
Copyrights © 2019 NRSP Microfinance Bank Limited. All rights reserved.
Powered by: CyberVision International