Tenders Are Invited For Security Incident Response 2.0 (2026)

Providing Security Incident Response Services For The Benefit Of The Participants Via An Sla. The Scope Of This Tender Consists Of The Following Core Components. - Analysis: Mapping The Scope And Cause Of An Incident And Investigating/Responding Expeditiously And Adequately; - Coordination: Coordinating The Approach To The Incident Among Participants. Coordination Of The Work Can Relate To All Parts Of The Assignment. - Defense And Mitigation: Containing And Eradicating The “Contaminated” Parts Of The It And Ot Infrastructure (“Fire Brigade Function”) - Research; Carry Out Digital Forensic Investigations (“Detective Function”). - Evaluation And Reporting: Adequate Transfer Of Results (Research Details) To Incident Response Partners Designated By Us (“Reporting Function”). These Reports Should Also Contribute To Compliance, For Example By Providing A Second Opinion. As Part Of These Core Components, The Following Can Be Delivered: - The Supply And/Or Use Of Hardware And Software To Implement Parts Of This Assignment. The Contractor Takes Into Account The Standards And/Or Installed Base Used By The Participant. - Trainings: Where Appropriate, The Participant Can Request The Contractor To Carry Out Or Provide Training. In Addition To These Core Components, The Following Matters Are Also Part Of The Scope. - Strategic And Technical Advice: Strategic And Technical Advice On Incident Handling. This Includes Advice On Paying Compensation For Attacks/Ransomware. Or Strategic Advice On Policy Regarding These Topics. - Communication Advice; Advice On Communication Strategies And Advice On Communication In Specific Incidents. This May Include Assisting The Institution In Drawing Up Communiqués And/Or Translating Technical Matters Into Understandable Language To Support General Communication With The Outside World. This May Also Include Additional Reporting Activities, Such As Advising On How Reports Can Be Shared With The (Surf) Communities And/Or Third Parties Or Contributing To Presentations In Which Results Are Shared. - Discussions On Behalf Of The Institution About Security Incidents With Malicious Parties. - Other Ways Of Sharing Knowledge Within And Outside The Institutions/Community, Such As The Contribution Of Knowledge And Expertise To Exercises, Rescue Teaming And Training To Strengthen Cooperation Within The Incident Response Process. Each Incident Response Request May Include One Or More Of The Tasks Listed, But Does Not Have To Include All Tasks. For Example, When An Incident Occurs, The Institution Can Rely On Defense And Mitigation, But The Institution Itself Can Provide For The Coordination Of The Activities. Other Combinations Of Parts Of The Assignment Can Also Be Assigned To The Contractor By The Institution.