NATO Seeks Contractors to Test Security of Web Assets

Share This Post

The North Atlantic Treaty Organization (NATO) is looking for penetration testing vendors to assess the security posture of its internet-facing web assets.

A notice posted by the US Department of Commerce (DOC) last week shows that the NATO International Military Staff (IMS) plans to launch an invitation for International Competitive Bidding (ICB) in this regard.

“The requirement is to assess the cybersecurity posture of NATO internet-facing web assets through controlled penetration testing,” the notice reads.

For this job, NATO is looking for contractors that have a base in the US, which have been pre-approved for participation, and which have a declaration of eligibility (DOE) issued by the DOC.

Interested parties need to be pre-approved by the US government for participation in NATO ICB, on a facility-by-facility basis.

“The contract will be awarded for the lowest technically compliant bid. No partial bidding will be allowed,” the notice reads.

In support of their one-time application, contractors are required to provide a resume or statement indicating completed contracts and an annual report or financial documents indicating an independent audit.

Interested parties have until April 25 to submit their applications to the DOC, which oversees the approval process.

The contract will be awarded for one year, with two one-year extension options.

Related: NATO’s Team in Albania to Help on Iran-Alleged Cyberattack

Related:China Not Happy With South Korea Joining NATO Cyber Defense Center

Related:Over 30 Countries Take Part in NATO’s ‘Locked Shields 2022’ Cyber Exercise

SecurityWeek RSS Feed

Read More

More Articles

Article

Navigating SEC Regulations In Cybersecurity And Incident Response

Free video resource for cybersecurity professionals. As 2024 approaches, we all know how vital it is to keep up to date with regulatory changes that affect our work. We get it – it’s a lot to juggle, especially when you’re in the trenches working on an investigation, handling, and responding to incidents.

Article

BFU – Seeing is Believing

Oh no, the device is in BFU. This is the common reaction; a device needs extracting, and you find it in a BFU state. Often, there’s an assumption that a BFU extraction will only acquire basic information, but that isn’t always the case.