Critical System Controls Audit Services for Technology Innovation Agency

Callaghan Innovation wish to procure a sole agency to assist in a Critical System Controls Audit A summary of our requirements is to assess the following critical system controls: - Password hygiene - Application Control / Whitelisting - Monitoring, Detection and Remediation controls (effectively our Security, Incident and Event Management Capability, otherwise known as a SIEM) - Bring Your Own Device (BYOD) posture, and it's risk rating - Security Operations Centre (SOC) capability (either internal and external) - Document classification - Callaghan�s comprehensive understanding of what information it holds, the sensitivity of this information, where it is held, and who has access to it.

This is included as it was a finding from a previous audit in 2020, therefore requires investigation into the progress since the last audit.