Provision of vulnerability assessment and penetration testing services, and operation of a risk operations center for a period of 38 months.