Hello
Hope you are great
Statement of Work Title: Penetration Testing for WA Cares Fund
1. Description of Work:
Penetration Test Service Overview
VENDOR defines its penetration testing services as the following levels:
Escalating Level
§ Level 4 – Escalating Penetration Test: This version includes all tasks performed in the Expanded Penetration Test (Level 3) and adds in attack aggressiveness and sophistication over time with each subsequent test. Escalating Penetration Testing includes:
o One (1) penetration test to establish a CUSTOMER baseline
o Three (3) follow-on penetration tests within the same 12-month contiguous period which increases in attack aggressiveness and sophistication over time, and with each subsequent test iteration
These tests are designed to demonstrate what a trained and dedicated attacker might accomplish over an extended period. Additionally, this test will be enhanced to include as needed the following:
o Industry Monitoring
o Dedicated research of CUSTOMER specific, potential or requested vulnerabilities
o Validation of newly discovered attack vectors
o Application of industry currently emerging threats
o Attack Recidivism
Standard Testing Levels
§ Level 3 – Expanded Penetration Test: This version includes all tasks performed in the Penetration Test (Level 2) and adds advanced exploitation, persistence and pivoting. Additionally, Expanded Penetration Testing can be used to:
