Framework Agreement for Penetration Tests and Security Analyses

Penetration tests and security analyses: Verification of IT security for systems and applications, identification of vulnerabilities, and derivation of risk minimization measures. Services are provided on demand based on individual call-offs, with an annual maximum callable service volume of approximately 120 person-days (PT) as a non-binding calculation basis. Annual project phases include a preparation phase (2-4 weeks), a testing phase (4-6 weeks), and an evaluation phase (4 weeks). Billing is monthly based on person-day rates for Senior Consultant, Consultant, and Junior Consultant. Each individual call-off specifies the test object, test scope, test depth, test type (e.g., Blackbox, Greybox, or Whitebox), prioritization, and service period; further items as per the tender documents.

Tender documents

Additional details