Tenders Are Invited For Programming Services Of Packaged Software Products - Providing A Subscription Right Of Use, Installation And Maintenance Of An Event Collection And Analysis System With The Ability To Obtain Automatic Response, Response, Delivery And Warranty Support For Security Keys

Programming Services Of Packaged Software Products - Providing A Subscription Right Of Use, Installation And Maintenance Of An Event Collection And Analysis System With The Ability To Obtain Automatic Response, Response, Delivery And Warranty Support For Security Keys. The Subject Of Award Are Activities As Follows: 1. System For Collecting And Analyzing Events With The Ability To Obtain An Automatic Response - 1 Pc. The Contracting Authority Puts As A Minimum Requirement To Provide The Following Type Of Solution: • 60-Month Cloud Correlation System Subscription And Analysis Of Data From Cybersecurity Events With Response Automation And Included Subscription For New Threats Of Cybersecurity From Several Sources Of Volume Of 6000Tb (5000Tb Total • Subscription For 1000 Loans For Response Services For Specific Incidents (5000 Loans In Total For 60 Months) With An Agreement For A Maximum Permissible Time Of 2 Hours For A Critical Incident; • Subscription To A Consulting Service With Access To A Minimum Of Two Cybersecurity Experts To Obtain Information About The Observed Tendencies From Cyber -Intimidation And Provide Recommendations For Improving The Cybersecurity Of The Organization For The Maintenance Period; • Subscription For A Minimum Of 20 Days For Training Administrators From The Organization For Handling The System For The Maintenance Period; • 60 Monthly Subscription To Services For Analysis And Prioritization Of Incidents And Automation Of Processes For Detecting And Dealing With Incidents Of Logged Data From 1000Tb (5000Tb In Total For 60 Months) Per Year With 60 Months Maintenance. The Proposed System Must Be Provided In The Form Of A Global Cloud Platform That Contains The Functionality For Correlation And Analysis Of Data From Cybersecurity Events (Siem), Including Integrated Response Automation (Soar) And Powered By Threat Intelligence. All Components Must Be From One Manufacturer And Fully Integrated With Each Other. The Requirement For All Components To Be From One Manufacturer Is Objectively Necessary Because Of The Following Motives: Centralization Of Operations In A Platform By Using Elements From The Same Manufacturer Provides A Unified Approach To Security Data, Rationalization Of Work Processes For Incidents By Integrating The Various Instruments With The So -Called Nativi Deativ Consolidation Of Data And Communication In One Console With Minimal Effort. Full Integration, On The Other Hand, Will Lead To Centralization That Reduces Manual Task Switching, Minimizes Data Silos, Accelerates The Average Response Time (Mttr) And Ultimately Increases The Efficiency And Efficiency Of The Security Operations Center (Soc). Key Advantages Of Centralization In A Platform - A Unified Platform And Reduced Need For Heavy Integration Of Tools That Will Centralize Security Data And Integrate The Various Security Tools Into A Platform, Eliminating The Need For Analysis