REPUBLIC OF THE PHILIPPINESPHILIPPINE STATISTICS AUTHORITY

REQUEST FOR QUOTATION

The Philippine statistics Authority (PSA) through its Bids and Awards commitee (BAC) wifl

undertake alternative mode of procurement (shopping, small value, etc.) for TraininoServices. Details of the procurement are as follows:

Please quote your lowest price on the item/s listed on the next page and submit the quotation

manually to the BAc secretariat, 1lft Flr., cyberpod one Eton centris, Diliman, euezon city orthrough facsimile number 374-8283 or email to gsd.staff@psa.gov.ph not later than :00 AM/pM

on . Kindly address your quotation to the Bids and Awards Committee

MINER ELOISA P. ESOUIVIASBAC Chairperson

Terms and Conditions:

1. Only the suppliers registered at the Philippine Government Electronic procurementSystem (PhilGEPS) shall be allowed to submit the quotation.

2. All entries must be typewritten/printed legibly in the Bid Form and/or proposal.

3. Late submission of quotation shall not be accepted.

4. Bids exceeding the ABC shall be disqualified.

5. The Lowest bidder shall be Informed immediatety and shall be asked to submitadditional requirements within three days after the opening of bids or during postqualification.

6. Award of contract shall be made to the lowest quotation, and complies with thespecifications and olher terms and conditions as stated in the RFe.

7. Terms of Payment shall be made through check payable to the supplier.

8. The PSA reserves the right to re.iect any or all bid proposals, or declares the biddinga failure, or not to award the conlract, and makes no assurance that a contract shallbe entered inlo as a result of this invitation.

Name of Project Burp Suite Training and Burp Suite Professional ToolSolicitation No. PR-tTDS02-20-09-00035Location Metro ManilaBrief Description Training Provider for Burp Suite Training and procurement of

Burp Suite Professional Tool for developing wecure weblications to be used PSA

See attached Bid formApproved Budget for theContract (ABC)Date of Delivery

QuantiW

P 441,O0O,O0

check

Compliance withTechnical

Specifications (pls.

Yes No

TotalAmount

(VATinclusive)

U nitItem(s) and specilication(s)

Minimum

Total amountinwords:

LotBurp Suite Professional ToolLicense for 3 YearsSpecifications:

- Web Vulnerability Scanner- Advance Mutual Tools- Essential Manual Tools

Burp Suite TrainingSpecifications:

- lnstructor Live Online Training- Hands-on exercises using Burp Suite and other

applicable tools- Comprehensive Course Materials (Softcopy)- Certificate of Completion (Hardcopy)- Provision of Server for instructor and students

use during hands-on exercises- 2 Certified Web Apphcation Engrneer

Cerlification- 2 Batches of training with 8 participants each

. 8 parlicipants on 19 - 23 October,2020

. 8 parlicipants on 26 - 30 Ociober, 2020- Training outline to include at least the ff topic:

. Web Application Security

. OWASP Top 10

. Threat Modeling and Risk Management

. Application Mapping

. Aulhentication and Authorization Attacks

. Session Management Attacks

. Application Logic

. Data Validation

. AJAX Attacks

. Code Review and Security Testing

. Web Application Penetration Testing

. Secure SDLC

. cryptography

NOTE: Please Altach (Mayor's Permil, BIR Tax Cerl,, DTI otSEC, Omnibus Swom Slalement and PhiIGEPSRegistration Numbet)

PHILIPPINE STATISTICS AUTHORITYREQUEST FOR QUOTATIONFax no.: 374-82-831 374-82-62

BID FORM

After having carefully read and accepted your Terms and Conditions. l^/Ve quote you on the item

at prices noted above.

Printed Name of authorized representative/Signature-

Position:

Name of Company

Address: Email Address

Date

Cellphone No

oty. I

,",, r,,""

1 P F- ()

I

Fax No.

-.

Tel No.:

()

lsrtcrREPUBM oF THE PHILIPPINEs

PTIRCHASE REQUESTl'und Clusler A.II a 3 ceneml Fund

W^-rJ W;plh,0O$arlo&a +wr

Name:Office/Section :

CTCGITD$SOIDPRNo.: hDJr,ua, q- 6@t(Respolsibility Center Code :

o"t", ot s"nt"-*lzloStocL/ Prop€rty

No.tlnit Item Description Unit Cost Total Cost

Burp Suite Professional Tool 1 121,000.00 121,000.00

License for 3 Years

Specificatlon- Web Vulnerdbility Scanner- Advanced MutualTools- Essential Manual Tools

Burp Suite Training 16 20,000.00 320,000.00

Specification- lnstructor Live Online Training- Hands-on exercises using Eurp Suite and otherapplicable tools- Comprehensive Course Materials (Softcopy)

- Certificate of Completion (Hardcopy)

- Provision of Server for intructor and students use

during hands-on exercises

- 2 Certified Web Application Engineer Certification- 2 Batches oftraining with 8 participants each

8 participants on 19-23 October, 2020

8 participants on 26-30 October, 2020

- TraininB outline to include at least the fftopicsW eb Appl icotion Secu rityOWASP Top 10

Threot Modeling qnd Risk ManogementApplication MoppingAuthenticotion ond Authorizotion AttocksSess ion Mo n oge m e nt Attoc kApplicotion Logic

NAX AttocksCode Review ond kcutity Testing

Web Applicotion Penetrqtion Testioq

Secure SDLC

Cryptogrophy

x-x-x-x-x-x x-t-x-x x-x-x-x-x x-x-x-x-x l-x-x-x-x-x141,000.00

Purpose: For developing wecure web applications to be used by PSA

Signature :

Printed NameD$ignation :

EDWNZARAGoN-fInformation Technologr Officer m

Chiet SOID

NoELGTaREf(lnformation Technolos Omcer IU)

OfficerJn-Charge. ITDS

Requested by: ,/Y Appotied by: n ,<---bs4-*)"-4

IIIIII

III-I--

II

II

II

Prepared by: Maria Paz E. Sulpico

Quantity

Doto Volidotion

lsrtcsREPUBLIC oF THE PHILTPPINEs

PURCEASE REQUESTI'und Cluster A.tr.a.3 G€fl€ral

p,o,oo44d

,fu*tffiName: S

Office/Section :

CTCO-ITDS.SOIDPR No.: l(O,f $z. te'RBponsibility Center Code :

1ro1- OooDate: 04 Septemb€r 2020

Stocld PropertyNo.

Unit Item Description Quantity Unit Cost Total Cost

Burp Suite Professional Tool 1 121,000.00License for 3 Years

Specification- Web Vulnerdbility Scanner- Advanced MutualTools- Essential Manual Tools

Burp Suite Training 16 20,000.00 320,000.00Spccification- lnstructor Live Onlioe Trainin- Hands-on exercises using Burp Suite and otherapplicable tools- Comprehensive Course Materials {Softcopy)- Certificate of Completion (Hard copv)- Provision of Server for intructor and students useduring hands-on exercises

- 2 Certified Web Application Engineer Certifi cation- 2 Batches oftraining with 8 participants each

- Training outline to include at least the fftopics:W e b App I ic otio n Secu rityOWASP Top 10Threot Modeling ond Risk MonogementApplicotion MoppingAuthenticotion ond Authori2otion At'tocksSess ion Mo n oge me nt AttocksApplicotion Loqic

Dota VslidotionNAX AttockCode Review ond Secu ty Testingweb tion Penetrotion TestingSecure SDLC

Cryptogrophyx-x-x-x x-x-x-x-x-x

441,000.00Purpose: For developing ryecure web applications to be used by PSA

Signature:Printed NameDesignation :

Requested by by

EDWIN .ARA NOEL G. PEREZInformation Technologr Officer III

Chief, SOID

(hformation Technolog/ Officer III)Officer-In-Charge, ITDS

Ir

I

Prepared by: Mana Paz E. Sulpico

,At4,0vP\A/r.rW

121,000.00

8 participants on 19-23 October, 20208 participants on 26-30 Odober, 2020

x-x-x-x-x

srrcj

REPUBLIC OF THE PHILIPPINES

Futrd Cluster: A.ll.&3 Geoeral FlldEn Name:ce/Section :

CTCGITDSSOIDlf-VS oL . 1tp -No.:

Resoa-eo?d

Center Code :Date: 04 Scptember 2020

StocL/ PropcrtyNo. tlnit Item Description Quantity Unit Cost Total Cost

Burp Suite Professional Tool 1 121,000.00 121,000.00License for 3 Years

cation- Web Vulnerability Scanner- Advanced Mutual Tools- Essential Manual Tools

Bu Suite Traini 16 20,000.00 320,000.00Specification- lnstructor live Online Traini ng

s-on exercises using Burp Suite and other- Hand

a icable toolsmCo re eh nstve Coup rse a Ite.ia s Softcopv)

- Certificate ofCom on (Hardcopy)

rovision of Server for intructor aod students usedurinS hands-on exercises

.P

- 2 Certified Web plication E ineer Certificationrticipants each- 2 Eatches oftraining with 8

8 participants on 19-23 October, 2O2O8 participants on 26-30 October, 2O2O

- Traini s:to I cn u ed at least het ff tctopWeb Applicotion ,ecurityOWASP fop 10Threot ond iskR mModeling tenMonogeApplicqtion Mopping

ond Authorizotion A ttocksSession Mdnogement Attacks

v

Code Review ond Security Tes

Testing

Ooto Volidotion

Secure SDLC

NAX Attock

Web

x-x-x-x-x-x x-x-x-x x-x-x-x-x-x x-x-x-x-x x-x-x-x-x x-x-x-x-x-x

441,000.00Pu wecure web ications to be used PSAe: For devel

Signature:Printed NameDesignation:

ved

EDWIN . AR{GO

Requested by

NOEL G. P(lnformation Technologz Officer III)

Oflicer- ITDS

Information Technolory Offcer IIIChief, SOID

-

I

Prepared by: Mana paz E. Sulpico

PHILIPPINE STATISTICS AUTHORITY

PURCHASE REQUEST

outline

Authenticotion

Penetrotion

_l