129/2026/EWSS/REDTEAM/RFQ

In short

The appointed service provider will plan, execute, and report on controlled, ethical exploitation across selected critical systems, network zones, personnel targets, and digital assets. The assessment will evaluate TCTA's technical, physical, and human security controls through various testing methods including external and internal network testing, Active Directory penetration testing, wireless/Wi-Fi penetration testing, web application testing, and physical and social engineering exercises. The scope includes identifying and validating exploitable weaknesses, assessing attack paths, and evaluating TCTA's ability to detect and respond.