Appointment of service provider to conduct penetration and vulnerability assessments tests bi-annually
