R3775 - Provision of Consultancy Services for Annual Cyber Security Assessment for Railway Operating Systems (Contract No.: Q069696)

Prequalification Invitation

 

R3775 - Provision of Consultancy Services for Annual Cyber Security Assessment for Railway Operating Systems

Contract No.: Q069696

 

MTR Corporation Limited invites qualified consultants to express their interest in tendering for the captioned.

 

This project calls for the provision of consultancy services for cyber security assessment for selected railway systems annually from 2019 to 2021. The selection of the systems for the assessment would be on a risk-based approach.

 

The scope of services shall include the following:

 

a) Preparation and submission of all plans, documents, programs, method statements, records, reports with findings and recommendations etc.;

b) Provision of cyber security gap analysis and benchmarking on the selected systems against international best practices and MTR’s cyber security standards to assess the security design and maturity of the security management of the systems.

c) Provision of on-site non-intrusive compromise assessment on the selected systems to determine if there is hidden threat or compromise resided in the systems

d) Provision of vulnerability scanning and penetration tests on the selected systems and the network that the systems are riding on, with the aim of verifying the sufficiency of cyber security provision for these systems, and identifying any vulnerabilities and weaknesses that may lead to undesirable consequences.

The prequalification process and invitation to tender shall take place in Q3/2019.

 

In order to be considered for prequalification, interested parties having relevant resources, qualifications and experience are requested to express their interest on or before 14 June 2019 via the MTR Corporation Limited’s E-Tendering System.

 

Upon expression of interest, the applicants will receive invitation of prequalification via the E-Tendering System. The applicants shall complete and submit all information and details as required in the invitation via the E-Tendering System no later than 2:00pm (Hong Kong Time) on 31 July 2019.

 

For applicants registered under the E-Tendering System, please click the following link and log into the System for expression of interest:

http://www.hkextender.com

 

For applicants not registered under the E-Tendering System, please click the following link and search for the advertisement notice of this contract for expression of interest:

http://www.hkextender.com/process/GuestLogon.asp

 

All invitations and submissions for prequalification and tender will be carried out through the E-Tendering System at http://www.hkextender.com.

 

Applicants responding to this advertisement are deemed to have complied with the Personal Data (Privacy) Ordinance in the collection and transfer of personal data to MTR Corporation Limited. All information submitted including personal data, will be used by MTR Corporation Limited for the prequalification of tenderers for this contract.

 

For enquiries, please contact Mr. Samson Ng, Acting Manager - Procurement at (852) 2993 2154 or by facsimile at (852) 2993 7721.