SERVICE FOR THE DETECTION OF VULNERABILITIES IN THE IT PLATFORM ASSETS OF SUNAT

This tender, issued by the Superintendencia Nacional de Aduanas y de Administración Tributaria (SUNAT) in Lima, Peru, seeks a service for the detection of vulnerabilities within the organization's Information Technology (IT) platform assets. The procurement process is designated as CP-ABR-22-2025-SUNAT-8B7200-1, utilizing an abbreviated public tender method (Concurso Público Abreviado).

The primary objective of this service is to identify and report security weaknesses and potential vulnerabilities present in SUNAT's IT infrastructure. This proactive approach is crucial for maintaining the integrity, confidentiality, and availability of the sensitive tax and customs data managed by the institution. The scope of work likely involves comprehensive vulnerability assessments, penetration testing, and security audits across various IT assets, including servers, networks, applications, and databases.

SUNAT, as the national customs and tax administration authority, handles vast amounts of critical financial and trade information. Therefore, ensuring the robustness of its IT systems against cyber threats is paramount. The selected service provider will be expected to deliver detailed reports outlining identified vulnerabilities, their potential impact, and actionable recommendations for remediation. This initiative underscores SUNAT's commitment to strengthening its cybersecurity posture and protecting national economic interests through advanced threat detection and mitigation strategies.

This is a services contract in the information and communication technology, trade and industry and finance and banking sectors, with a focus on Cybersecurity and Taxation. Located in Peru, Latin America, this opportunity is open to firms and consortiums, with an estimated budget of PEN 2.1 million.

Published through Peru SEACE, a national government procurement portal. Public procurement tenders follow the country's national bidding regulations and may have specific eligibility and documentation requirements for services in the information and communication technology sector. Service contracts are typically evaluated on both technical quality and price, and may require bidders to demonstrate relevant experience and qualified personnel. This contract has already been awarded. The information is published for transparency and market intelligence purposes.