Penetration Testing Services

The Senedd Commission is seeking an independent penetration testing service to assess the security of its technology infrastructure and identify vulnerabilities that could expose the organisation to cyber threats. The service will involve planning, executing, and reporting on comprehensive penetration tests across the Commission's systems, which may include external and internal infrastructure, web applications, remote access services, wireless networks, and physical locations. Testing will be conducted using white, grey, or black box methodologies as appropriate. The successful supplier should demonstrate expertise in simulating real-world attack scenarios using techniques employed by malicious actors, whilst maintaining strict controls to minimise disruption to operational services. The service should provide detailed vulnerability assessments, validate the effectiveness of existing security controls, deliver prioritised remediation recommendations, and support the Commission's cyber security strategy through continuous improvement of its overall security posture.