DEADLINE: 9TH AUGUST, 2024
CENTRAL SECURITIES CLEARING SYSTEM (CSCS) PLC
REQUEST FOR PROOF OF CONCEPT (POC): WAF & API SECURITY SOLUTION IMPLEMENTATION
REFERENCE NO.: CSCS/ERM/WAF-API/07/2024
Introduction
Central Securities Clearing System (CSCS) PLC is seeking proposals from qualified vendors to conduct a Proof of Concept (PoC) for a WAF & API Security Solution. The goal of this PoC is to evaluate the effectiveness, scalability, and compatibility of the proposed WAF & API security solutions within our existing infrastructure. This initiative aims to enhance our application security posture by implementing robust security measures to protect our endpoints from
potential threats and vulnerabilities.
Background
As a leading Financial Market infrastructure (FMI) in the Nigerian Capital Markets, CSCS relies heavily on APIs and web applications to enable seamless integration and communication between various internal and external systems. Ensuring the security of these assets is paramount to protect sensitive data, maintain operational integrity, and comply with industry regulations. We are looking for a comprehensive security solution that offers advanced threat protection, real-time monitoring, and effective access control mechanisms.
Objectives
- Evaluate the proposed WAF-API security solution’s ability to protect against common threats such as injection attacks, DDoS, and unauthorized access.
- Assess the solution’s compatibility and integration capabilities with our existing infrastructure.
- Determine the scalability and performance impact of the security solution.
- Analyze the solution’s ease of use, management, and reporting features.
- Ensure compliance with relevant industry standards and regulations.
Scope of Work and Success Criteria for the Proposed WAF & API Security Solution
To ensure the successful selection and onboarding of the security solution, the under-listed success criteria must be met thereby ensuring and effective utilization and strengthening the overall security posture and improving our operational efficiency.
Deliverables
- Detailed implementation plan for the PoC.
- Comprehensive test results and analysis reports.
- Recommendations based on the PoC findings.
- Demonstration of key features and functionalities.
- Final presentation and Q&A session with our evaluation team.
Evaluation Criteria
Proposals will be evaluated based on the following criteria:
- Technical capabilities and comprehensiveness of the proposed solution.
- Vendor’s experience and track record in the solution deployment.
- Feasibility and clarity of the PoC implementation plan.
- Cost-effectiveness of the proposal.
- Quality of references and previous work.
Proposal Submission Requirements
The return date for responses against this RFP is August 9, 2024, delivered electronically to rfpsubmission@cscs.ng
Any questions regarding this RFP can be directed to rfpsubmission@cscs.ng . The proposed security solution should be communicated to the above email on or before the date.
