Two Bid Tender Regarding audit of Jawaharlal Nehru Custom House Official Website

OFFICE OF THE Pr. COMMIsSIONER OF CUSTOMS (NHAVA SHEVA-I)| EDI (CENTRALISED) SECTION, JAWAHARLAL NEHRU CUSTOM HOUSE, NHAVA SHEVA, URAN,RAIGAD, MAHARASHTRA

• 400 707 E-mail: edi@jawaharcustoms.gov.in Date: 09/03/2021 F. No. EDI-MISC-76/2013/JNCH(H/w) TENDER NOTICE NO. 06/2021 TWO BID SYSTEM The Principal Commissioner of Customs (General), Jawaharlal Nehru Custom House, Mumbai Customs Zone-ll, on behalf of the President of India, invites sealed quotations in two bid system (Technical Bid and financial Bid) from reputed, technically proficient and CERT-In empanelled IT security Auditing Organizations for conducting Security Audit of the Jawahar Customs Website (http://jawahar customs.gov.in), before hosting the same on NIC Server after compliance of all the Web hosting norms and regulations as applicable to Government Websites. General Instructions

The quotations should be in two parts (Technical Bid and Financial Bid), sealed in separate covers and duly super scribed as Technical Bid' and 'Financial Bid', respectively and are to be enclosed in a bigger cover, which should also be sealed and the Tender Notice Number and date super scribed on it. The same should be addressed to Deputy Commissioner of Customs (EDI), Office of the Pr. Commissioner of Customs (NS-1), Jawaharlal Nehru Custom House, Nhava Sheva, Taluka-Uran, Dist Raigad, Maharashtra, PIN 400707. The sealed covers containing quotations can also be submitted by hand in the EDI section, of the above address on any working day during the office hours. The Technical Bids received within the stipulated time as mentioned below will be opened first and the Financial Bids of only those bidders will be considered if their Technical Bid is acceptable to the Department. 2. The sealed quotations should reach the undersigned within 15 days from the date of issue of the Tender Notice. The quotation received after the prescribed time limit will not be considered. The last date of receiving the quotations is 24.03.2021 at 17.00 hrs. For any technical clarification, EDI Section may be e- mailed at edi@jawaharcustoms.gov.in, during normal working hours.

WEBSITE SPECIFICATION:

1. Dynamic Pages -4080
2. Static Pages

0 3. Technology DOT NET (NET FRAME WORKS) 4. Server - sQL-2010 TECHNICAL PROPOSAL:

1. During the preparation of Technical Bid, the following details should also be given i. A brief description of the organization and an outline of recent experience in assignments of similar nature in Government Departments/Government Undertakings/corporate Sector etc., i. Proof of CERT-In empanelment, ii. Proof of GST Registration, iv. PAN No. v. GST No. (if any) A security Audit is a specified process designed to assess the security risks facing 2 an organization and the controls of countermeasures adopted by the organization to mitigate those risks. As a part of any audit, the auditors will interview key personnel, conduct vulnerability assessments and penetration testing, catalog existing security policies and controls and examine IT assets.

IT security auditing should include a combination of the following: i. Vulnerability assessment ii. Application security assessment ii. Password cracking iv. Log review, incident response and forensic auditing v. Integrity checks vi. Virus detection 4. Audit Environment Audit can be done on-site or off-site. The application has presently been uploaded on temporary staging servers. Department shall provide source code and necessary assistance as and when required to complete the security audit. 5. Roles and Responsibilities - The auditor responsibilities need to articulate not just the audit tasks, but also the documentation of their activities, reporting their actions etc. and providing necessary guidance to the developer as and when requested during the audit phase. 6. Audit Report-Security Audit Report from the security auditor should clearly state that these web-pages, including the backend database and scripts, if any, are free from any vulnerability and malicious code, which could be exploited to compromise and gain.

FINANCIAL PROPOSAL The financial bid should clearly indicate the price quoted by the bidder inclusive of all taxes and other terms and conditions, if any. The financial bid of only those bidders will be considered, if the Technical Bid is acceptable to the Department. General conditions of the Tender Notice are as follows:

1. The quotation shall contain the full technical details of the service. The quotation should also contain full address of the Auditing organization, Telephone no., Fax no. and E-mail-id etc. The price quoted by the bidder should not be mentioned anywhere in the Technical bid.
2. The Department reserves the right to accept/reject any or all of the bids at any stage without assigning any reason whatsoever.
3. The service provider should have sound knowledge and experience of performing same type of works in other Government Departments/Public Sector Undertakings/ Corporate Sectors and should have sound technical and financial background.
4. Only the Cert-In empanelled firms are invited to submit their quotations.
5. The payment shall be made only after satisfactory completion of the work.
6. The time limit for completion of any assignment given by the department will be adhered to by the service provider.
7. This Tender Notice is also available on our website www.jawaharcustoms.gov.in Alalada (VINAY KUMAR THAMMI) DY. COMMISSIONER OF CUSTOMS (ED) Jawaharlal Nehru Custom House Copy to:
8. DC/CHSIJNCH for display on Notice Board and requested to givewide publicity.
9. EDI (SW)IJNCH to display on Website
10. DCICHS/New Custom House, Mumbai to display on Notice Board and requested to givewide publicity.