SSRO Security Assessment and Penetration Test

gramme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whils

t they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3:  Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (external, M