Prepared October 4, 2013
Proprietary and confidential
REQUEST FOR PROPOSAL
Table of Contents
USING THIS TEMPLATE 3
TEMPLATE CONTENTS 3
INTRODUCTION AND BACKGROUND 5
PURPOSE OF THE REQUEST FOR PROPOSAL 5
ADMINISTRATIVE 6
TECHNICAL CONTACT 6
CONTRACTUAL CONTACT 6
DUE DATES 6
SCHEDULE OF EVENTS 7
GUIDELINES FOR PROPOSAL PREPARATION 8
PROPOSAL SUBMISSION 8
DETAILED RESPONSE REQUIREMENTS 10
EXECUTIVE SUMMARY 10
SCOPE, APPROACH, AND METHODOLOGY 10
DELIVERABLES 11
PROJECT MANAGEMENT APPROACH 11
DETAILED AND ITEMIZED PRICING 11
APPENDIX: REFERENCES 11
APPENDIX: PROJECT TEAM STAFFING AND BIOGRAPHIES 11
APPENDIX: COMPANY OVERVIEW 12
EVALUATION FACTORS FOR AWARD 13
CRITERIA 13
SCOPE OF WORK 14
REQUIREMENTS 14
DELIVERABLES 14
USING THIS TEMPLATE
Savid Technologies has developed this Request For Proposal (“RFP”) template to help organizations identify and select a quality security vendor to perform professional services work. This template is absed off templates provided by Foundstone, Verisign, and other security institutions including countless RFP responses Savid has provided.
It also lists questions organizations should consider asking potential vendors to ensure that a thorough and comprehensive approach to the project will be taken. This template should apply for a variety of information security projects including:
External Network Vulnerability Assessment and Penetration Testing
Internal Network Vulnerability Assessment and Penetration Testing
Web Application Penetration Testing
Dial-In / RAS Security Testing
DMZ or Network Architecture Designs / Reviews
Wireless Network Assessment and Penetration Testing
Virtual Infrastructure Security Assessment
Server Configuration Reviews
Firewall and Router Configuration Reviews
VPN Configuration