The Rijksdienst Caribisch Nederland (RDCN) is requesting an open tender for periodic penetration testing of the entire IT landscape, including applications, network components, and platforms. Due to continuous changes in the IT environment, systems must be tested regularly to comply with the information security policy. The tender requires a combination of white-box, grey-box, and black-box methodologies to uncover both internal and external vulnerabilities. The contractor shall provide a structured test plan, detailed reports including risk analyses, and recommendations for mitigation. Confidentiality, compliance with laws and regulations, and a clear communication structure are essential. The services must be scalable, taking into account the geographical distribution of the RDCN locations in the Caribbean.
Services · Open · European procedure
01What is being requested
The Rijksdienst Caribisch Nederland (RDCN) is requesting an open tender for periodic penetration testing of the entire IT landscape, including applications, network components, and platforms. Due to continuous changes in the IT environment, systems must be tested regularly to comply with the information security policy. The tender requires a combination of white-box, grey-box, and black-box methodologies to uncover both internal and external vulnerabilities. The contractor shall provide a structured test plan, detailed reports including risk analyses, and recommendations for mitigation. Confidentiality, compliance with laws and regulations, and a clear communication structure are essential. The services must be scalable, taking into account the geographical distribution of the RDCN locations in the Caribbean.
The IT landscape, including the associated applications and network components of the Rijksdienst Caribisch Nederland, is subject to continuous change. New applications are implemented and old applications are regularly updated. The tender has been established because the entire IT landscape is subject to regular changes and, according to the information security policy, a test must be performed periodically. The penetration test is not limited to applications; parts of the network or a platform are also regularly tested. The following methodologies are applied when performing the penetration
02Exclusion grounds
- No specific exclusion grounds were extracted. In a European tender, the mandatory and discretionary grounds of art. 2.86/2.87 of the Dutch Procurement Act almost always apply — check the European Single Procurement Document (ESPD).
03Value in context
The contracting authority did not publish an estimated value — common for a large share of contracts. The EU threshold for diensten is € 221.000, for reference.
04Likely competitors
05Legal themes that may be relevant here
06Frequently asked questions
What is the scope of the requested penetration tests?
Which methodologies are used during the execution of the penetration tests?
Why has this tender for penetration testing been established?
Automatically compiled from the official tender data and documents.
07Estimated value versus the market
€ 327K
€ 800K
€ 2,5 mln
Gegunde waarden in CPV 72 · diensten n=1436