Contract notice: Soar, Siem and Ticket System for a Security Operations Center Software package and information systems Short Description: Lot 1 - Security Orchestration, Automation & Response System A clientable and scalable security orchestration, Automation & Response System (SOAR) is advertised according to the requirements according to product issues catalog. First of all, up to 18 people who can act for employees or external work with the system, this number should increase in the medium term. In addition, any number of systems can be connected to realize automation and integration etc. without needing additional licenses. The same applies to service accounts for cooperation with persons outside the team, which should receive appropriately limited possibilities and rights. Product training, software care / maintenance as well as support and integration services are also part of the tender. Details and other requirements are listed in the product issue catalog. Lot 2 - Ticket system for CERT and SOC A ticket system optimized for the needs of Security Teams can be advertised in which all business processes of a CERT and SOC can be mapped, such as the creation and processing of security incidents, consulting requests, the process of commissioning and documentation of penetration tests, forensics cases and much more System also replaces an e-mail client for editing e-mails to the tampost compartment largely, so that the correspondence can be processed to all business processes usually over the ticket system. This also applies to S / MIME signed and encrypted e-mails. The system also has to work with a SOAR as described under Lot 1. First of all, up to 18 people who can act for employees or external work with the system, this number should increase in the medium term. Product training, software care / maintenance as well as support and integration services are also part of the tender. Details and other requirements are listed in the product issue catalog. Lot 3 - Security Analytics Platform / SIEM A client-capable and vertical / horizontal scalable Security Analytics platform (hereinafter referred to as Security Information & Event Management, abbreviated Siem) according to the present requirements from the product issues catalog, which is fully on-premise, so within the networks and data centers of it.nrw can be operated. The connection of the systems in the first phase (2022) generates an uncompressed log data volume of 30 GB per day. Over the next few years, an increase in log data volume is expected to expect 1TB or more per day. Product training, software care / maintenance as well as support and integration services are also part of the tender. Details and other requirements are listed in the product issue catalog. The number of users is not limited. Deadline for Submission: 20220414 23:59 Type of Buyer: Other Type of Contract: Supplies Type of Procedure: Open procedure Regulation: European Union Type of Bid: Submission for all lots Award Criteria: The most economic tender [Disclaimer: The above text is machine translated. For accurate information kindly refer the original document.]
We takes all possible care for accurate & authentic tender information, however Users are requested to refer Original source of Tender Notice / Tender Document published by Tender Issuing Agency before taking any call regarding this tender.
