Explore demosContact us
Contact us
Open menuClose menu
Update

Request for proposals: Security vulnerability assessment and CSAP certification consulting for our AI solution

1. Background and need

  • Need to meet security requirements for cloud/AI services

  • Assess current security controls against CSAP (Korea’s Cloud Security Assurance Program) criteria and identify improvement tasks

  • Need to organize evidence (documents/operational records) and run a pre-assessment to prepare for the certification audit

2. Scope

  1. Current-state assessment and gap analysis

  • Review the target systems/services and the operating environment (network separation, accounts/permissions, logs, access control, etc.)

  • Analyze gaps against CSAP criteria and present an implementation roadmap

  1. Security vulnerability testing and remediation support

  • Test key components (servers/DB/WAS/web/API/admin functions, etc.) for security vulnerabilities (automated and manual testing combined as needed)

  • Provide remediation guidance, support implementation, and retest

  1. Security governance and operational controls

  • Access control, account management (MFA, etc.), logging/monitoring, backup/recovery, change management, incident/outage response, etc.

  • Organize operational control procedures and deliverables (policies/guidelines/procedures/registers)

  1. Preparation of CSAP submission materials (evidence) and audit support

  • Support preparation of certification application and audit submission materials (including templates)

  • End-to-end support, including mock pre-assessments, interview rehearsals, and responses to requests for remediation

※ Detailed scope will be finalized through consultation at kickoff (adjusted according to the target service, grade, and scope)

3. Duration

  • 3 months from the contract date

4. How and when to bid

  • Method: Submit a quotation by email ([email protected])

  • Deadline: January 22, 2026, 2:00 p.m.

5. Eligibility

  • Companies registered as a corporation or business in Korea that are able to perform the services

  • Meeting at least one of the following is recommended (recommended qualifications may be reflected in the evaluation)

a. Track record in CSAP certification consulting/support

b. Track record in information security consulting/vulnerability assessment

c. Security/cloud specialists on staff (e.g., ISMS/ISO 27001, cloud security, vulnerability assessment)

6. Contact