Norway – Safety consultancy services – Framework agreement for consultancy and consultancy services in connection with: security testing and incident handling.

The government manager ́s joint services and the government managers need a framework agreement for consultancy and consultancy services in connection with. security testing and incident management. This is mainly, but not exclusively, a need for assistance with: - Advice, training and execution of and security testing o Technical consultancy and training o Intrusion tests o Vulnerability scans o Technical stand-by exercises - Assist with incident security o Incident Response Team services Relevant assignments will i.a. be within security requisitioning and specific intrusion testing against systems and services. Areas for security testing can be applications, cloud services, integrations, databases, infrastructure and system/source code. In addition there can be password testing, social manipulation, denial-of-service attack testing and security testing/revision of systems that the Contracting Authority has procured/procured. There will also be a need for assistance in technical stand-by exercises for testing i.a. own ability to detect abnormal activity and a response to this. The list is not exhaustive.