Contracting Specialized Cybersecurity Consulting Firm(s) for Penetration Testing (PENTESTS) on CAIXA's Technological Environments and Systems in Brasília/DF

This tender from CAIXA ECONOMICA FEDERAL seeks to contract one or more specialized cybersecurity consulting firms to conduct in-depth penetration tests (PENTESTS). The primary objective is to assess and enhance the security posture of CAIXA's technological environments and systems. These tests will involve simulating cyberattacks to identify vulnerabilities and potential weaknesses within the organization's IT infrastructure. The engagement will be carried out in collaboration with a team of CAIXA's internal auditors. The project is scheduled to be executed in Brasília/DF and will have a duration of seven (7) months. The scope of work is expected to cover a comprehensive evaluation of system defenses, network security, and application vulnerabilities. The findings from these PENTESTS will be crucial for CAIXA in strengthening its cybersecurity defenses, mitigating risks, and ensuring the integrity and confidentiality of its data and systems. The procurement process will utilize an electronic auction (Pregão Eletrônico).

This is a consulting contract in the information and communication technology and security and defense sectors, with a focus on Cybersecurity and IT support. Located in Brazil, Latin America, this opportunity is open to firms and consortiums, with an estimated budget of BRL 359,000.

Published through PNCP Distrito Federal, a national government procurement portal. Public procurement tenders follow the country's national bidding regulations and may have specific eligibility and documentation requirements for consulting in the information and communication technology sector. Consulting assignments are typically evaluated with a strong emphasis on the technical proposal, including the methodology and qualifications of key experts. Shortlisted firms may be invited to submit financial proposals in a second stage. This contract has already been awarded. The information is published for transparency and market intelligence purposes.