Norway – Safety consultancy services – Framework agreement for consultancy and consultancy services in connection with: security testing and incident handling.

The government manager ́s joint services and the government managers need a framework agreement for consultancy and consultancy services in connection with. security testing and incident management. This is primarily including, but not exclusively, a need for assistance with: - Consultancy, training and execution of and in connection with security testing. - Technical consulting and training. Intrusion Tests Vulnerability scan Technical stand-by exercises - Assist with information security incidents. Incident Response Team Relevant assignments will i.a. be within security recognising and specific intrusion testing against systems and services. Areas for security testing can be applications, cloud services, integrations, databases, infrastructure and system/source code. In addition there can be password testing, social manipulation, denial-of-service attack testing and security testing/revision of systems that the Contracting Authority has procured/procured. There will also be a need for assistance in technical stand-by exercises for testing i.a. own ability to detect abnormal activity and a response to this. The list is not exhaustive.