Controller General Of Defence Accounts Cyber Security Audit Tender Pune Maharashtra 2026 ISI/Cert‑IN Empaneled CISSP Auditor

Tender Overview

The Government of India tender is issued by the Controller General Of Defence Accounts for a Cyber Security Audit / Security and Compliance Audit in Pune, Maharashtra. Estimated value is ₹160,000 for a one‑year contract, with pricing requested for four quarters. Unique conditions require the auditor to be CERT‑IN empanelled and the audit team leader to be a CISSP certified professional, conducting audits of a government web application. An OEM authorization path exists for authorized distributors, and mandatory malware/embedded code certification is required. The scope emphasizes external security verification, compliance assessment, and hosting suitability for government systems. The clause on audit eligibility and special ATCs indicates a controlled, certifications‑driven approach.

Technical Specifications & Requirements

• No BOQ items are listed; the procurement title and ATCs imply a web application security audit for a government agency.
• Mandatory credentials include CERT‑IN empanelment, and the auditor must certify that the application is free from embedded malicious code, with liability for IP infringement.
• Audit team leadership must hold CISSP certification; firm must have prior experience auditing similar government web applications.
• OEM authorization is required if using authorized distributors; price must cover four quarters (1 year) of contract value.
• Special ATCs specify that audits are conducted by empanelled entities and that hosting certificates will be issued post‑audit by certifying bodies.

Terms, Conditions & Eligibility

• EMD: Not specified in data; bidders must meet buyer’s terms and provide documentation proving financial standing and non‑liquidation status.
• Experience: Demonstrated experience in conducting similar web application audits for government agencies; CISSP certified auditor required for audit certification.
• Delivery & Payment: Quote for 4 quarters; terms on delivery cadence per quarter to be aligned with contract issuance; payment terms not specified in data.
• Certificates & Documents: Mandatory CERT‑IN empanelment proof, OEM authorization form if applicable, and malware certificate. Bidders must upload cyber certifications and attestations with bid.