Basic Information

Reference Number

0000132203

Issuing Organization

Toronto Police Service

Solicitation Type

RFQ - Request for Quote (Formal)

Solicitation Number

1288512-18

Title

Web Application Penetration Testing

Source ID

PU.MU.ON.673461.C148376

Agreement Type

Canadian Free Trade Agreement (CFTA)

Details

Location

Canada, All of Canada, All of Canada

Description

Quotations are invited for: Web Application Penetration Testing

SUBMISSION OF BID

The Bidder must register with MERX in order to have the ability to formally complete and uploaded a Bid submission. Please ensure that the registration is completed 24 hours prior to uploading your Bid.

Please go to https://www.youtube.com/watch?v=To0fqSccw3M for information as to how to upload your Bid submission through MERX. If you still have issues please contact MERX directly at 1-800-964-MERX (6379).

Bid Submission:

Submissions shall only be accepted electronically via the MERX Portal and as per MERX electronic clock no later than November 1, 2018 1:00:00 p.m. Eastern Standard Time (EST). Submissions submitted in any other manner shall be found non-compliant and disqualified.

INTRODUCTION

The TPS is seeking bids from qualified Bidders for the provision of penetration testing as more particularly described in the Request for Quote (RFQ) Document as required by Toronto Police Service (TPS).

OBJECTIVE

TPS would like to have an independent third party contractor to perform and deliver a penetration test to determine external and internal vulnerabilities within the application and hosting environment to ensure adequate protection of sensitive and privacy data; identify factors that could potentially impact the system availability and data integrity.

Qualifications and bidding requirements

Bidder must not make use of subcontractors/third-party vendors to deliver any of the in-scope activities.
The assessment will be completed at the following location and remotely.40 College Street, Toronto, ON. M5G 2J3

2. Mandatory Certification Requirements (minimum 1 of the following)

Offensive Security Certified Professional (OSCP)
GIAC Web Application Penetration Tester (GWAPT)
GIAC Penetration Tester (GPEN)
GIAC Exploit Researcher & Advanced Penetration Tester (GXPN)
EC-Council Certified Ethical Hacker (CEH)
EC-Council Licensed Penetration Tester (LPT) Master

Optional Certifications:

Offensive Security Certificated Expert (OSCE).
GIAC Mobile Device Security Analyst (GMOB)

Experience: A minimum of five (5) years working within the government or financial institutions.

Submission of Signed Confidentiality Agreement
Bidders that are interested in this initiative must submit a signed copy of the attached “Non-Disclosure Agreement” prior to receiving a copy of the Request for Quote document.

Only those Bidders that have submitted a signed, valid and binding Non-Disclosure Agreement will be invited to download a copy of the Request for Quote document via Merx Electronic Bid Submission (EBS).

Dates

Publication

2018/10/12 10:27:04 AM EDT

Bid Intent

Not Available

Questions are submitted online

Closing Date

2018/11/01 01:00:00 PM EDT

Required Acknowledgement

Non Disclosure Agreement

Submission of Signed Confidentiality Agreement

Bidders that are interested in this initiative must submit a signed copy of the attached “Non-Disclosure Agreement” prior to receiving a copy of the Request for Quote document.

The signed copy must be sent no later than 1:00 p.m. EST, Thursday October 18, 2018 via e-mail to Sanjeev.drego@torontopolice.on.ca quoting “1288512-18: Web Application Penetration Testing” in the subject line of the e-mail.

For any questions regarding this process, please e-mail Sanjeev.drego@torontopolice.on.ca.

Only those Bidders that have submitted a signed, valid and binding Non-Disclosure Agreement will be invited to download a copy of the Request for Quote document via Merx Electronic Bid Submission (EBS).

Bid Submission Process

Bid Submission Type

Electronic Bid Submission

Pricing

Lump sum

Bid Documents List

Item Name	Description	Mandatory	Limited to 1 file
APPENDIX C	TPS POLICIES FORM	Yes	No
APPENDIX D	STATUTORY DECLARATION FORM	Yes	No
SCHEDULE “A”-	MANDATORY REQUIREMENTS FORM	Yes	No
SCHEDULE “B”	RESUMES AND REFERENCES	Yes	No
APPENDIX B	BID SUBMISSION FORMS (Price Summary Form, Part A,B & C)	Yes	No
No entries

Additional Bidding Instructions

FORMS SUBMISSION
In addition to the Bid Submission Forms, the following completed forms are required with your submission:

APPENDIX B - BID SUBMISSION FORMS (Price Summary Form, Part A,B & C)
APPENDIX C - TPS POLICIES FORM
APPENDIX D - STATUTORY DECLARATION FORM
SCHEDULE “A”- MANDATORY REQUIREMENTS FORM
SCHEDULE “B” - RESUMES AND REFERENCES

© MERX - All rights reserved. No part of the information on this Web Site may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or otherwise without the prior permission of MERX and the Minister of the participating government department (if applicable). MERX, the Minister nor the Contracting Authority will assume responsibility or liability for the accuracy of the information contained in the publication.