The Department of Communications, Information Technology and the Arts (DCITA) is tendering for a consultant to produce a report on enterprise strategy for information security.
DCITA is tendering for a consultant on behalf of the IT Security Expert Advisory Group (ITSEAG) within the Trusted Information Sharing Network (TISN) to produce one confidential report along with two supplementary guidelines, one aimed at Chief Executive Officers (CEOs) and the other, a more technical digest to the Chief Information Officer (CIO).
According to tender documents released today, the total cost of the consultancy service must not exceed $88,000.
The tender states the key focus area for the consultant will be developing a framework based on enterprise and critical infrastructure which includes ways to identify threats and vulnerabilities and appropriate managerial guidance in response to these threats and vulnerabilities.
The documents state both service oriented architecture (SOA) and convergence as the two areas of adding new potential risk online.
"The use of already deployed systems for the delivery of new services or purposes, via such overall designs as SOA, adds to potential risk and IT will create demand for a new range of services that facilitate greater effectiveness," the tender states.
"However, on the other hand, there is potential for this convergence to weaken security barriers. One or more of these threats, intentionally or accidently, may exploit vulnerabilities in information in IT systems.
"Similarly, technical evolution within sectors, coupled with Internet and allied network protocols, may expose owners and operators of critical infrastructure to greater risk (eg VoIP and SCADA systems). Failure to achieve alignment in the area of security could have a major strategic implication for the enterprise and convergence represents one of these threats."
The contract is expected to be completed by June 30, 2007. A requirement of the tender is attendance at the ITSEAG meeting in Brisbane, December 14, as well as the completion of draft reports.
Closing date for the tender is 10am, November 27, 2006.