Alberta Purchasing #IST004

APS Automated Penetration Testing Capability and Services

Alberta Pensions Services Corporation is seeking an automated penetration testing capability to strengthen security testing and remediation across its environment. - Government buyer: Alberta Pensions Services Corporation (APS); no sub-agency or office is identified. - Procurement: An automated penetration testing capability, including implementation, support, and advisory services. - OEMs and vendors: No product OEMs, vendors, or resellers are named in the opportunity. - Required capabilities: - Enable APS-authorized personnel to conduct repeatable internal and external security testing at least quarterly and on demand. - Cover segmented internal networks, remote sites, and external assets. - Safely validate exploitable attack paths and potential business impact. - Prioritize corrective actions and verify that remediation is effective. - Provide technical and executive reporting. - Proponents must explain which outcomes are automated, which require provider or third-party involvement, and which are outside the proposed baseline. They must also describe deployment, implementation, support, and licensing models, along with assumptions, limitations, APS effort, and all costs required to establish an operational service.

Description

Alberta Pensions Services Corporation (APS) is seeking a capability and related implementation, support, and advisory services that enable APS-authorized personnel to conduct repeatable internal and external security testing for an initial two-year period. The approach must support at least quarterly and on-demand testing across segmented internal networks, remote sites, and external assets, including safe validation of exploitable attack paths and business impact. It must prioritize and verify corrective actions and produce technical and executive reports. Proponents must describe delivery responsibilities, deployment and support models, licensing, assumptions, limitations, APS effort, and all costs required to achieve an operational service.

View original listing