Vendor needs to provide information security training platform. • Acquire an information security training and awareness platform for the deployment of its three–year information security training and awareness program. • The solution must be offered in a cloud–based model (Software as a Service) to facilitate its integration into organizational infrastructure.