First-Line Penetration Testing Services

The intent of this RFP is to secure one or more proponents to provide annual Penetration Testing (PenTest) services. ATB’s Offensive Security & Threat Intelligence is seeking proposals that offer innovative, impartial, and an objective approach which will act as a proactive measure to continuously improve its cyber security profile, and to maintain pace with the evolving cyber security threat landscape targeting financial institutions. The selected vendor(s) will be called upon to conduct various penetration tests throughout the year as new and existing systems, features, or applications are deployed by our business units.

The outcome is to allow ATB to implement appropriate remediation measures on a prioritized
basis, and to improve the effectiveness of its cyber security controls that are integrated in its
networks, and application systems.

Each Proponent shall submit one (1) complete priced electronic copy and one (1) complete unpriced electronic copy of its Proposal containing responses to all elements of Section 3.0 “What Your Proposal Should Include” to the ATB Contact listed below. Please note important details below.

Proposal No.:        27.17 - CISO Penetration Testing Services
Closing Date and time as outlined in Section 2.4 “Our Schedule”
RFP Contact:        Justin Chymboryk
sourcing@atb.com
Procurement
ATB Financial
CC: jchymboryk@atb.com

All Proposals must be delivered to the RFP Contact, unless otherwise directed by the RFP Contact, and must be received by ATB prior to the RFP Deadline. Proposals received after the RFP Deadline or submitted to the wrong location may be disqualified. Proposals will need to be submitted in English unless otherwise specified.

The time noted in the electronic submission (by the ATB server) will be considered the time received. Proponents should not wait until the last minute to submit proposals as there is a possibility of a temporal delay between the time a proposal is sent and the time it is received on the ATB server. The ATB server has a limitation of 10MB, so please keep submissions under this limit.

Note: Word format copies may include an additional copy (PDF format) for signature pages.

Proponent questions regarding this RFP must be submitted to the RFP Contact only, via email. Questions received on or before the deadline for submitting questions will receive a written response on or before the deadline for posting answers as stated in Section 2.4. ATB responses and the corresponding questions will be posted and shared with all Proponents on APC.
Proponent questions which ATB determines will not assist in preparing Proposals, verbal
questions and questions not received through the RFP Contact email prior to the question
submission deadline for any reason including without limitation, delivery delays or being sent to someone other than the RFP Contact may be answered at ATB’s sole and absolute discretion.