ORVIS Environment - Application Penetration Testing

Background
The Oregon Secretary of State, through its Information Systems Division, is issuing this Intermediate Request for Proposals (IRFP) for application penetration testing. The purpose of this contract is to enhance the security of the Oregon Registered Voter Information System (ORVIS), which is a modernized elections system developed in collaboration with the state's 36 County Clerks.

The Agency's mission includes providing information technology design and infrastructure, as well as software development, testing, and maintenance.

Work Details
The contractor will perform application penetration testing services on the ORVIS environment. This includes identifying vulnerabilities within the application and providing a comprehensive report detailing findings and recommendations for remediation.

The contractor is expected to deliver a final assessment report to Agency Division Directors that outlines the results of the penetration testing, including any identified security weaknesses and suggested improvements. Specific tasks include conducting tests on various components of ORVIS, evaluating security controls, and ensuring compliance with applicable standards.

Period of Performance
The anticipated term of the contract is for a single assessment with a report due shortly after the completion of testing activities. The timeline for key events includes a pre-proposal conference on February 10, 2025, with proposals due by February 25, 2025.

Place of Performance
The services will be performed in Oregon, specifically related to the ORVIS environment managed by the Oregon Secretary of State's Office.