APS is seeking a proponent to provide a capability and related implementation, support, and advisory services that enable APS-authorized personnel to conduct repeatable internal and external security testing for an initial period of two (2) years. The proposed approach must support testing at least quarterly and on demand across segmented internal networks, remote sites, and external assets; safely validate exploitable attack paths and business impact; prioritize and verify corrective action; and produce technical and executive reporting. proponents must identify the extent to which these outcomes are delivered autonomously, require proponent involvement, depend on third parties, or require capabilities outside the proposed baseline, together with the deployment model, implementation approach, support model, licensing, assumptions, limitations, APS effort, and all costs required to achieve an operational service.
