Penetration Test - Møre og Romsdal County Municipality

Project overview

NOTE. Applications will be reviewed, and questions will be answered from November 23rd.

Request for: Consultant assistance to perform IT security – penetration test at Møre og Romsdal County Municipality.

Offeror must be able to demonstrate extensive experience from similar projects.

Number of consultants: One or two consultants, from the same company.

Duration of partial agreement: 01.02.2027 – 31.04.2027.

Project details

Estimated hours: 150 hours.

Work is done from an external location (in Norway).

Assignment description

Møre og Romsdal County Municipality has had positive experiences with penetration testing as an effective tool for improving IT security in recent years. We therefore wish to conduct a new penetration test to:

The penetration test shall cover both internal and external IT systems at Møre og Romsdal County Municipality. The tests may include scenarios where attackers already have control of a user account.

We want the following activities in connection with the penetration test:

Qualification requirements

The consultant offered for this assignment is expected to possess the following qualifications:

Education:

Experience:

Desired knowledge of:

Personal qualities/characteristics that are relevant:

Language:

Reference:

Offers presented shall include a cover letter/statement briefly describing the offered consultants and the supplier's strategy for penetration testing, including methods, timeline, and reporting structure.

This is an assignment with result responsibility.

• Check compliance with current requirements and standards
• Identify vulnerabilities and uncover weaknesses to implement improvement measures
• Planning: Define objectives and scope of the test.
• Mapping: Gather information about systems, applications, and networks.
• Analysis: Identify and assess the risks associated with vulnerabilities.
• Testing (exploitation): Perform tests to exploit identified vulnerabilities.
• Reporting: Prepare a detailed report describing the performed tests, identified vulnerabilities, risk assessment, and recommendations for measures.
• Presentation: Hold a presentation of the findings to the Client's operations personnel with the possibility for technical clarifications.
• Evaluation – feedback on the design of the assignment and recommendations for future tests.
• Bachelor's degree in computer science, information security, or a related field
• or equivalent practical experience
• Certification in penetration testing
• Minimum 3 years of experience performing penetration tests
• Documented completion of similar tasks previously for a municipality or county municipality
• Minimum one with senior competence
• Penetration testing
• Documentation
• Solution-oriented
• Accurate
• Structured
• Report and presentation shall be delivered in Norwegian
• We want references from clients who have had similar assignments to ours. We are particularly interested in speaking with any municipal or county municipal clients.
• Start: 2027-02-01
• Remote: onsite
• Location: Kristiansand, Norway; Oslo, Norway; Stavanger, Norway; Trondheim, Norway; Bergen, Norway; Tromso, Norway, NO
• Languages: Norwegian