Annexure I: Contact Details:

Transcription

1 Ref: CO/IT-BPR/CSC Date: Annexure I: Contact Details: a) Name of the company b) Company s address in India c) Contact person d) Telephone no. e) Fax f) address g) Service tax registration No / GST no. h) Permanent Account Number (PAN) Authorized Signatory: Name of the Authorized Signatory: Place: Date: Seal: Page 1 of 6

2 Ref: CO/IT-BPR/CSC Date: Annexure II: Declaration of name of projects executed S.No. i) Type of Jobs for which Empanelment is sought Network security Minimum no. of activities to qualify (no. of projects executed) Declaration to be given for name of the projects. ii) Application security iii) Wireless security iv) Compliance s (ISO 27001, IRDAI, etc.) 5 v) vi) IT Policy Drafting 15 IT Risk Assessment 15 vii) viii) ix) Vulnerability assessment Third Party Security Audit IT Consultancy Projects 10 x) xi) Penetration Testing Secure code review xii) Forensic security 10 xiii) Hardening training 5 Page 2 of 6

3 S.No. xiv) xv) Type of Jobs for which Empanelment is sought Application security training Audit of UIDAI ASA / KSA Ref: CO/IT-BPR/CSC Date: Minimum no. Declaration to be given for name of the projects. of activities to qualify (no. of projects executed) 3 3 xvi) xvii) Cyber Forensics 3 IT GRC Consulting 1 xviii) xix) xx) xxi) xxii) Audit of Certifying Authorities/esign/RA/ASP etc. Information Security Awareness and Trainings Disaster Recovery, Back-up and Contingency Planning Cloud Security Assessment Managed Security Services xxiii) SDLC Review 5 xxiv) IP v6 Compliance Audit 1 xxv) Identity and access Management 2 xxvi) Data Centre 2 Authorized Signatory: Page 3 of 6

4 Ref: CO/IT-BPR/CSC Date: Name of the Authorized Signatory: Place: Date: Seal: Page 4 of 6

5 Ref: CO/IT-BPR/CSC Date: Annexure III: Rate Card for each activity for L1, L2 and L3 Resources Name of the Activity Network security Qualification of the e.g. basic education with certification etc. relevant to carry out the activity/job Rate card for L1 (More than 1 year of 2 years of experience) Rate card for L2 (More than 2 years of 4 years of experience) Rate card for L3 (More than 4 years of experience) Application security Wireless security Compliance s (ISO 27001, IRDAI, etc.) IT Policy Drafting IT Risk Assessment Vulnerability assessment Third Party Security Audit IT Consultancy Projects Penetration Testing Secure code review Forensic security Hardening training Application security training Audit of UIDAI ASA / KSA Cyber Forensics Page 5 of 6

6 Name of the Activity Ref: CO/IT-BPR/CSC Date: Rate card for L1 (More than 1 year of 2 years of experience) Qualification of the e.g. basic education with certification etc. relevant to carry out the activity/job Rate card for L2 (More than 2 years of 4 years of experience) Rate card for L3 (More than 4 years of experience) IT GRC Consulting Audit of Certifying Authorities/e-sign/RA/ASP etc. Information Security Awareness and Trainings Disaster Recovery, Back-up and Contingency Planning Cloud Security Assessment Managed Security Services IP v6 Compliance Audit Identity and access Management Data Centre N. B. : 1. Qualification of the e.g. basic education with certification etc. relevant to carry out the activity/job will be given by the bidder. 2. L1 should have more than 1 year of 2 years of experience 3. L2 should have more than 2 year of 4 years of experience 4. L3 should have more than 4 year of experience Authorized Signatory: Name of the Authorized Signatory: Place: Date and seal: Page 6 of 6