Cover Letter

Respected Information Security Team, It is with great pleasure that Oman Data Park - Cyber Security Park confirms our ability to deliver the requested red team assessment. The aim of this assessment, as we understand it, is to evaluate the effectiveness of your organization’s security posture through simulated attacks and other testing methods.

We assure you that all penetration testing activities will be conducted in a manner that adheres to industry’s best practices and standards, and that is both professional and ethical. The scope and objectives of the assessment will be clearly defined and agreed upon in advance, and all findings will be promptly reported to you in a comprehensive manner. We are aware that our team will be collaborating closely with your internal security staff and other relevant parties during the duration of the assessment. To minimize any potential disruptions to your business operations, we will cooperate with your team to ensure that all necessary precautions are taken.

We are confident in our ability to provide valuable insights and recommendations based on the results of this assessment. We look forward to working with you and your team to ensure the success of this engagement. Will you have any questions or concerns, please do not hesitate to contact us.

Sincerely, Oman Data Park - Cyber Security Park

Confidentiality Statement This proposal is confidential to “CUSTOMER” (hereinafter referred to as “CUSTOMER”) and Oman Data Park SAOC (hereinafter referred to as “ODP”). This proposal contains the intellectual property of Oman Data Park and other third parties with whom ODP has business relationships. It has been supplied to “CUSTOMER” on condition that it may not be disclosed, in whole or in part, to any party other than those of your employees and professional advisors who need to see it to evaluate the proposal. It may not be used for any other purpose. © Copyright Oman Data Park 2025 All Rights Reserved. Other than the purposes specified above, no part of this document may be reproduced in any form or by any means without the prior written permission of ODP. Whilst every care has been taken to ensure that the contents of this proposal are complete and realistic, ODP reserves the right to change or withdraw this document in the light of further information on “CUSTOMER” specific requirements.

Executive Summary

Oman Data Park- Cyber Security Park (ODP-CSP) is pleased to submit a proposal to “CUSTOMER” for a comprehensive Vulnerability Assessment and Penetration Testing (VAPT) services. The objective of this VAPT is to identify and address potential vulnerabilities and weaknesses in “CUSTOMER”’s IT infrastructure. Our team of experienced professionals will utilize a combination of automated and manual testing techniques to provide a comprehensive evaluation of “CUSTOMER”’s network, systems, and applications.

The testing process will be performed by our highly skilled and certified ODP-CSP offensive security team, who will conduct thorough testing of the IT infrastructure. This will include testing web applications, network infrastructure, and endpoint devices. Our team will work closely with “CUSTOMER”’s relevant department to ensure that the testing process is minimally disruptive to daily operations.

Upon completion of the VAPT, ODP-CSP will provide “CUSTOMER” with a comprehensive report detailing all identified vulnerabilities, showcasing a step-by-step approach to breakdown the team’s approach and methodology, the severity of each identified vulnerability, and recommendations for mitigation. Our team will also provide detailed technical debriefing to “CUSTOMER”’s relevant team(s), including recommendations on how to implement effective security measures to address identified vulnerabilities.

Background

Oman Data Park is a joint venture company owned by Oman Telecommunications and 4-Trust, a part of National Trading Company. The partnership brings an unrivalled combination of network infrastructure and management expertise to ensure unmatched service and reliability to its customers. Oman Data Park has Data Centre’s in Wattaya, Knowledge Oasis Muscat and Duqm. The facilities provide the highest levels of performance, simultaneously providing the most robust, fault-tolerant site infrastructure, redundant capacity systems and multiple distribution paths to serve business critical IT needs of its customers. Oman Data Park operates both

$24 \times 7 \times 365$

Security Operation Centre (SOC) and Network Operation Centre (NOC) which are ISO27001 & ISO 20000 Certified. Oman Data Park is the first the Managed Security Services provider in Oman that provides both practice and detective security services. It operates on

$24 \times 7 \times 365$

basis. The incident response team is available across the clock to provide the assistance needed on site or remotely

Associations