The ICT systems used in the proposed solution/service must be securely configured and maintained. Do you confirm that your company (and 1 any 3rd parties used) comply with this requirement, and are able to evidence it? Yes No Requirement: Protecting networks from internal and external attack Ref Bidder’s Response The networks used in the proposed solution/service must be protected from external and internal Do you confirm that your company (and 2 attack. any 3rd parties used) comply with this requirement, and are able to evidence it? Yes No Requirement: Account provisioning and approval process Bidder’s Response Ref The proposed solution/service must include a user account provisioning process (account approval, Do you confirm that your company (and 3 creation, maintenance and deactivation), and a means of controlling privileged access. any 3rd parties used) comply with this Link: Further detail and control examples requirement, and are able to evidence it? Yes No
1 The ICT systems used in the proposed solution/service must be securely configured and maintained. Do you confirm that your company (and any 3rd parties used) comply with this requirement, and are able to evidence it? Yes No Ref Requirement: Protecting networks from internal and external attack Bidder’s Response 2 The networks used in the proposed solution/service must be protected from external and internal attack. Do you confirm that your company (and any 3rd parties used) comply with this requirement, and are able to evidence it? Yes No Ref Requirement: Account provisioning and approval process Bidder’s Response 3 The proposed solution/service must include a user account provisioning process (account approval, creation, maintenance and deactivation), and a means of controlling privileged access. Link: Further detail and control examples Do you confirm that your company (and any 3rd parties used) comply with this requirement, and are able to evidence it? Yes No
information-risk-questionnaire-self-assessment.docx