Vulnerability and Threat Hunting

07 October, 2021

CQUniversity would like to advise receipt of tender questions / clarifications. Please see responses provided in the attached "Tender Clarification 02 - 06.10.2021 CQURFQ21037" document.

28 September, 2021

Please see attached document "CQURFQ-21-037 Addendum 01" for download.

23 September, 2021

CQUniversity would like to advise receipt of tender questions / clarifications. Please see responses provided in the attached "Tender Clarification 01 - 23.09.2021"document.

Please also note: an unlocked version of Schedule 4: Supplier Acceptance to Participatehas also been uploaded in place of the previous version.

15/09/2021 - UPDATED TENDER DOCUMENTS

CQUniversity has uploaded the missing documents "CQURFQ-21-037 Schedule 1 - High Level Scope of Requirements and Evaluation Process.docx" and "CQURFQ-21-037 - Schedule 4-6 Response Form.docx" in response to questions posted on the tender.

CQUniversity has also provided a copy of CQU’s standard Professional Services Agreement (“PSA”). This is the preferred set of terms for CQU to conduct business resulting from this tender. The supplier may nominate one of the following options:

a) Accept the PSA without any proposed amendments;

b) Accept the PSA as the base agreement and propose amendments for CQU to consider (Any requested deviations to the Agreement must be marked up with track-changes in the supplied document and returned with the respondent’s tender response. Please include justification comments as to why the amendment is requested); or,

c) Counter-propose an alternate agreement to govern the services. In this instance, the respondent must include a detailed explanation as to why the PSA is not suitable and the respondent’s agreement more suitable.

CQUniversity Australia is seeking Proposals for RFQ-30/08/2021 - CQURFQ-21-037 Vulnerability and Threat Hunting.

Depending on requirements these goods / services specifically include:

• Establishing a cloud-based vulnerability management solution;
• Collect, treat, and report application and system vulnerabilities;
• Allow for automated response and support of threat hunting activities;
• Prioritise vulnerability database of the University’s risk management framework;
• Support for public and private cloud, and;
• Provide a data driven approach to cybersecurity and ICT operations.

For detailed information on the specific goods / services sought under this tender, please review the "Specification Documents" in "Section 3 - Here is the detail".