Specifications include, but are not limited to: RIHousing is soliciting proposals from qualified vendors to perform four (4) penetration tests of RIHousing’s network, applications, and one (1) on-site physical penetration test, over a two (2)-year period for purposes of identifying and documenting risk and vulnerabilities and for compliance and auditing purposes. At RIHousing’s option, there may be an option to extend the contract for an additional two (2) years. At a minimum, the penetration test should include the following tactics, techniques, and procedures: • Social engineering (including phishing and vishing) • Web application testing (credentialed and non-credentialed) • Physical penetration testing (one (1) physical location) in Providence, RI • External network penetration testing • Wireless security testing
