Alberta Electric System Operator - Request for Proposal - Penetration Testing Services

The AESO performs regular penetration tests to detect exploitable vulnerabilities within systems, networks, applications, people, and processes against potential threats. The AESO is seeking penetration testing services from one or more penetration test partners for a period of 5 years. On at least a quarterly basis, one or more penetration test partner(s) will conduct penetration tests on the AESO’s systems to validate defenses and/or perform threat simulations and report their findings, remediation recommendations and potential retesting to the AESO (the “Services”). The Services may include, but are not limited to, the types of penetration tests listed in Appendix C using common testing methodologies, such as red-team, blue-team, purple-team or other, as determined with the AESO during the scoping of the penetration test.