Sample RFPs?

[linusrules]

I've been tasked with getting pricing for a pen test. First time for me and for the company so i don't really have a starting point to work with. Just wondering if anyone has a sample or baseline RFP for a basic pen test they could share. Any advice would be welcome as well. We have a really tight budget and a pretty straightforward environment so i don't want to get a bid for the taj mahal when i just need the basics.

[3ripledez]

Pricing is all over the place for penetration tests as we just have been through some of them as well. What kind of testing are you looking at? External, Internal, Application, etc. Also what is the size of your environment? I might be able to help you ballpark compared to my previous research.

[bills75]

Just make sure you have your head around what it is you want when you put your RFP together. Think about your organization's security goals. Are you doing it specifically for a compliance requirement? You need to be as specific as possible in defining your target of evaluation. That's your best bet for getting a good price.

[linusrules]

Thanks for the suggestions. We ended up putting something together pretty quick and dirty, but i think it will work for what we need. Now the next challenge is going to be picking the right proposal. I may be back...