aaa technologies has secured a work order worth ₹28,99,400 from Punjab & Sind Bank to conduct Vulnerability Assessment and Penetration Testing (VAPT) Audit Assignments for FY 26-27. The order encompasses a comprehensive audit of the bank's IT infrastructure, including critical information systems, web applications, and cloud platforms.

The scope of work includes annual audits for non-critical information systems and half-yearly audits for critical systems located in the De-Militarized Zone (DMZ). Additionally, the contract covers web application security audits, configuration audits of operating systems and databases, and external penetration testing of public IPs. The bank reserves the right to vary the number of units audited by up to 10% without additional cost.

The audit assignments cover approximately 18 critical IT and security applications, 35 other risk-categorized applications, and 125 external and internal URLs, including mobile applications. The inventory also includes three data centers, 250 APIs, and 2,000 IPs across various categories such as server, OS, and virtual IPs. The total cost of ownership is finalized at ₹28,99,400, excluding taxes.

AAA Technologies is required to deliver all requirements stated in the scope of work and adhere to the timelines, payment conditions, and penalties outlined. The company must commence the audit project within five working days of receiving the Engagement Letter cum Purchase Order. The firm, a Cert-In empanelled auditor, had previously signed a contract with the bank under Bid No. GEM/2024/B/5579094 dated November 6, 2024.

The engagement mandates that AAA Technologies bear all expenses related to travel, lodging, and boarding for its audit team during visits to the bank's branches or vendor locations. The company must also acknowledge acceptance of the purchase order within four working days.

Scope of Audit Assignments

AAA Technologies Ltd has secured a work order worth Rs 11.23 lakh from National Informatics Centre Services Incorporated (NICSI) to conduct a cyber security audit for the Employees' Provident Fund Organisation (EPFO). The assignment, valued at Rs 11,23,360, involves providing Application Security Audit and Compliance Services. The project is scheduled to commence on July 6, 2026, and conclude on September 11, 2026, spanning a duration of 68 days. The disclosure was made to the stock exchanges on July 7, 2026, under Regulation 30 of the SEBI (Listing Obligation and Disclosure Requirements) Regulations, 2015.

The work order, numbered O2600600, specifies a rate of Rs 14,000 per day for the Comprehensive Security Assessment (CSA). The total contract amount includes an integrated tax of 18% (IGST). The scope of work requires the company to perform a security audit at the EPFO Complex in Dwarka, New Delhi. The empanelment reference for this order is 10(21)/2022-AAA, which remains valid until September 24, 2027.

Financial Terms and Conditions

The company is required to furnish a Performance Bank Guarantee (PBG) equivalent to 3% of the work order value before signing the contract. The PBG must remain valid for 60 days beyond the completion of all contractual obligations. Payments will be released quarterly based on the pro rata amount of work done, subject to the deduction of Tax Deducted at Source (TDS) and any applicable penalties. NICSI aims to process payments within 30 days of bill submission.

Service Level Agreement

The Service Level Agreement (SLA) and penalty clauses outlined in the original tender document, referenced as NICSI/Application Security Audit/2023/05, are applicable to this order. The agency must adhere to the timelines defined in the work order. Any delay in the submission of the PBG will attract a penalty of 0.1% of the purchase order value per day, capped at a maximum of 10% of the PO value.