Cybersecurity Health Check and Penetration Testing Services

The DVLA seeks a qualified cybersecurity company to conduct comprehensive vulnerability assessments and penetration testing on its infrastructure and applications, including both physical and cloud-based systems. The successful supplier must: Required Qualifications: • PCI ASV (Approved Scanning Vendor) approval • CESG certification • CHECK Certified Green Light status • CREST Star accreditation • Cyber Essentials certification Key Requirements: • Proven experience developing penetration testing strategies with government cybersecurity teams • Demonstrated ability to build long-term client partnerships with training and skills transfer capabilities • Fully mature and documented remote testing solution for secure network connectivity • On-site and remote testing capabilities • Post-engagement guidance on maintaining security posture and recommended next steps The supplier will work closely with DVLA's internal cybersecurity teams to deliver tailored testing solutions and provide actionable recommendations for ongoing security improvement.