SSRO Security Assessment and Penetration Test

ogramme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner

whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3:  Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (exte