Cybersecurity Penetration Test, Vulnerability Scan, and Risk Analysis Services

Cybersecurity penetration test and vulnerability scan to validate host configurations and produce a list of any known vulnerabilities in existing systems.
- Network Penetration Testing shall include, but is not limited to, the following tests:
a. Penetration testing from both inside and outside of KUA's network
b. Identification of targets and attack vectors
c. Brute force attacks
d. Denial of Service testing
e. Port scanning
f. Network sniffing
g. Spoofing
h. Trojan attacks
i. Wireless network testing
j. Social Engineering Exploits
k. Listing of all identified domains, including IP address, FQDN, and Registrant
l. Listing of Open-Source Intelligence gathering results for KUA email addresses released in known breaches and how many were validated on attempt
m. Definitions of tools and services used to produce deliverable results (e.g., Cobalt Strike, Nessus)
- Cybersecurity Risk Analysis: The Consultant will develop a comprehensive IT Cybersecurity Risk Analysis using industry best practice methodologies to ensure a standardized risk
mitigation approach that identifies the highest risk reduction potential. The Cybersecurity Risk Analysis will communicate KUA's current state of information technology security, a response plan to mitigate vulnerabilities, and a road map of activities to improve KUA's cybersecurity posture. The approach should complement the “NIST Cybersecurity Framework (CSF) 2.0” developed by the National Institute of Standards and Technology.