RFP Security Assessment Template for Australia

1. Physical Security Assessment: Include when physical security components need to be assessed alongside cyber security

2. Cloud Security Requirements: Include when cloud infrastructure is part of the assessment scope

3. Mobile Device Security: Include when mobile devices and applications are part of the scope

4. Industry-Specific Requirements: Include when there are specific industry regulations or standards that must be addressed

5. International Compliance: Include when the organization operates across multiple jurisdictions

6. Security Testing Limitations: Include when there are specific systems or times that cannot be included in security testing

7. Incident Response Assessment: Include when incident response capabilities need to be evaluated

1. Schedule A - Technical Environment Details: Detailed description of the technical environment to be assessed

2. Schedule B - Compliance Requirements Matrix: Detailed matrix of compliance requirements and standards to be assessed

3. Schedule C - Pricing Template: Standardized template for submission of pricing information

4. Schedule D - Service Level Requirements: Detailed service level requirements and performance metrics

5. Appendix 1 - Current Security Architecture: Overview of existing security architecture and controls

6. Appendix 2 - Risk Assessment Template: Template for risk assessment reporting

7. Appendix 3 - Previous Audit Findings: Summary of relevant previous security audit findings

8. Appendix 4 - Non-Disclosure Agreement: Confidentiality agreement for bidders