Specifications include, but are not limited to: SYSTEM REQUIREMENTS: • Must support at a minimum ten (10) administrators that have full view and access to all core systems to conduct penetration testing and attack surface analysis for County resources.; • Must provide a cloud subscription-based solution that is “off the shelf” and existing with full software functional requirements at the time of award. The product must be available for retail sale at the time of the solicitation.; • Must include Multi-factor Authentication feature for accessing the solution.; SOFTWARE FUNCTIONAL REQUIREMENTS: • Must be able to simulate any surface to endpoint attacks known to the cyber security community to ensure that County assets are properly tuned to defend against known attacks.; • Must be able to simulate threats and attacks that are known and exploited, including 0-Day vulnerabilities from exploits in the “wild” that are currently available to expose County software or hardware in the production environment.; • Must include simulated exploit techniques that at minimum address unauthorized system access, privilege escalation, system browsing, and tool installation.; • Must be able to emulate exploit techniques and sub-techniques on desktops, laptops, and mobile devices that are listed on the MITRE ATT&CK Framework. Must be able to simulate phishing email attacks that use social engineering to infiltrate and compromise corporate and production environments. ; • Must be able to simulate lateral movement which is a method used by attackers to gain access and control additional systems on a network when perimeter defenses fail and endpoint security is bypassed, providing the attacker a foothold in the organization.; • Must be able to provide the County with detailed analysis and reports that include cybersecurity gaps, vulnerabilities, cybersecurity successes and recommendations to remediate and/or minimize potential exposure to external attackers. These reports should be produced from the management console by the County administrator and available to export into MS Word, MS Excel, or PDF format.
