Hong Kong - External attack surface management (EASM) solution

Description

The soultion should enable the following capabilities:

1. Asset discovery

To scan and identify assets outside the buyer's network, including:

• servers
• workstations
• network devices
• cloud resources

2. Vulnerability assessment

To perform vulnerability scanning and assessment of discovered assets to identify security weaknesses and misconfigurations.

3. Risk assessment and prioritisation

To prioritise vulnerabilities and risks based on their severity, impact, and exportability.

4. Attack surface monitoring

To continuously monitor the attack surface, identifying changes, new assets, and potential exposures.

5. Remediation guidance

To offer recommendations and guidance on remediating identified vulnerabilities and reducing the attack surface.

6. Reporting and analytics

To generate comprehensive reports and analytics to provide insights into the buyer’s attack surface, vulnerability trends and overall risk posture.

7. Integration and automation

To integrate with third party tools and issue a tracking system for automatic creation of incident tickets to corresponding owners and automatic notification while there are any new findings.

The project is expeted to commence in October 2024.

Opportunity closing date

05 September 2024

Value of contract

to be confirmed

The buyer is happy to talk to

manufacturers, wholesalers, distributors, agents, consultants