EXTERNAL AND INTERNAL NETWORK PENETRATION TESTING SERVICES

Miami University is seeking proposals for external and internal network penetration testing services to identify vulnerabilities and weaknesses in their systems. The selected vendor will conduct a comprehensive testing engagement over the course of one week, including vulnerability scans and focused exploits. The vendor must provide a fixed-fee quote, including a mandatory retest, and adhere to the University's account lockout policy. The proposal must include a comprehensive report, prioritized findings, and a formal presentation to the University's staff. • The testing will include 102 external/public IP addresses and 1,241 associated subdomains. • The vendor must hold recognized penetration testing credentials and follow industry standards such as PTES or NIST. • The University requires immediate notification of critical findings and a written summary within four hours of discovery. • The vendor must describe measures to protect the University's proprietary information, including encryption standards and access control.