Procurement of Professional Services for Continuous VAPT and 3rd Party Security Assessment Services

National Bank of Pakistan (NBP) invites electronic bids for professional services in Karachi. The procurement includes two main categories of non-consultancy services: continuous Vulnerability Assessment and Penetration Testing (VAPT) and third-party services for security assessments. These services are critical for maintaining the bank's cybersecurity posture and ensuring robust protection against evolving threats. Items being procured: - Professional services for continuous VAPT - Procurement of 3rd party services for security assessments Bidders must submit their electronic bids through the EPADS portal by the deadline of 30 September 2026 at 11:00 AM. Physical bids will not be accepted. Detailed tender documents including terms, specifications, eligibility criteria, and evaluation requirements are available on the NBP Tender Portal (www.nbp.com.pk/tender) and EPADS (pa.epads.gov.pk). The scope involves specialized cybersecurity services requiring experienced firms with relevant certifications and proven track records. Bidders should ensure compliance with all technical and financial bid submission requirements, including Earnest Money and valid FBR/ATL registration. The submission process is fully electronic via EPADS, ensuring transparency and efficiency. Interested bidders should carefully review the tender documents and prepare their bids accordingly. For queries, contact the Procurement Division at National Bank of Pakistan, Karachi. A practical tip for bidders: Ensure your EPADS registration is active and your digital signatures are valid well before the closing date to avoid last-minute submission issues.