In which months of the year do you generally receive the penetration testing requirement of the annual IT Health Check (ITHC)?
March – May
In which months of the year do you procure the penetration testing services for the ITHC?
November – January
For you last ITHC, how many days were required by the provider to complete the ITHC. Where possible, please break it down by onsite, external and reporting days?
Internal 3 onsite plus 1 reporting offsite
External 1 offsite plus 1 reporting offsite
Did you purchase external services to assist with your ITHC remediation actions?
No
Did you require further penetration testing after your PSN code of compliance submission (due to ITHC failure or major infrastructure changes)?
No
How was your last ITHC contract awarded, i.e. framework, quotes or public tender?
Written quotations
How many virtual servers do you have on premise?
Approximately 400
Do you have any managed security services? Please list.
Yes. Vulnerability assessments
Do you have any other compliance, i.e ISO27001 or N3?
Yes
Do you have any security infrastructure projects in the next 12 months?
Yes. Details are not currently defined, but the projects will support the ICT 2020 Strategic Roadmap, which is explained on Inside Devon
What is your IT security training budget?
Dependent on requirements identified
Do you purchase any security infrastructure training for IT staff and / or red team security training?
Yes
Who is responsible for managing security infrastructure? Please provide their contact details
Scomis, Great Moor House, Bittern Road, Sowton, Exeter, EX2 7NL
Who is responsible for procuring security infrastructure? Please provide their contact details
Scomis, Great Moor House, Bittern Road, Sowton, Exeter, EX2 7NL
Who is responsible for procuring ITHC services? Please provide their contact details
Scomis, Great Moor House, Bittern Road, Sowton, Exeter, EX2 7NL
Who is responsible for procuring training for IT staff? Please provide their contact details
Scomis, Great Moor House, Bittern Road, Sowton, Exeter, EX2 7NL
What is cost threshold that mandates a public tender?
Amounts below £183,000 is subject to Devon County Council’s own financial regulations. There are different levels of requirement dependent on the level of spend for example spend between £2500 – £10,000 3 organisations need to be invited to provide written quotations.