Penetration Testing

Description

Value of contract was based on a sample test, not the anticipated annual spend which will be nearer £75k p.a. inc VAT 
Contract is 2 years + option to extend for further 3 years
Total Contract value including extension period is £375,000 inc VAT

A penetration tester to partner on a call-off-contract
To assure UoY's as-is vulnerability assessment and management processes and to act as a catalyst for improvement where there is opportunity for this.
To reduce UoY's attack surface
To reduce likelihood of costly or reputation damaging data breaches
To facilitate PCI compliance
To guard and protect UoY's reputation for excellence.
To facilitate re-certification to Cyber Essentials in the short term with a desire to obtain Cyber Essentials Plus certification in the mid to long-term.
To provide assurance to third-parties including research partners of UoY's strong Cyber Security posture to attract and encourage their business.
To gain greater understanding of and to assist in securing UoY's IT wide and organically growing IT estate and reduce its attack surface.
To reduce the risk of cyber security incidents occurring.
To reduce the impact of cyber security incidents if/when they do occur.