Information security assessments (RVICTO-PT) 2026-II

Summary

The Dutch Ministry of Economic Affairs is procuring a framework agreement for information security assessments, primarily penetration tests, for central government ministries and other public bodies. Testing will use automated and manual methods to identify and validate digital vulnerabilities in applications, infrastructure, cloud environments, IoT/OT and other in-scope targets. The estimated volume is about 800 tests over four years; the estimated total value is €20 million and the maximum is €35 million, excluding VAT. The framework is intended for up to 10 contractors and is not divided into lots.