Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support - State Hospital Andernach - Construction And Operation Of A Security Operations Center (Soc)

It Services: Consulting, Software Development, Internet And Support - State Hospital Andernach - Construction And Operation Of A Security Operations Center (Soc). Parts Of The Scope Of Services A) Soc Scope Of Services Part 1: Security Event Management (Em) As Part Of The Security Event Management, Events Are Saved, Correlated And Evaluated. Suspicious Events That Indicate A Danger Are Reported To The Client. The Process Flow Is Set In The Security Event Management Schedule. The Corresponding Source Systems Are Defined By The Client. The Events Are Then Collected Within The Security Appliance And Forwarded To The Central Event Management System At The Contractor For Analysis. Within The Event Management Platform At The Contractor, The Security Events Are Accepted And Technically Classified Using Various Threat Intelligence Sources And, If Possible, Enriched With Information. The Contractors Security Analysts Analyze And Evaluate The Events. B) Soc Scope Of Services Part 2: Incident Response Incident Response Is The Quick Reaction To Security Incidents That Endanger The Availability, Integrity, Authenticity And Confidentiality Of The Data. The Basis Is The Indicators Of Compromising That Indicate That The Security Goals Have Been Violated. This Includes In Particular: - Analysis Of The Scope Of The Attack And The Active Access Channels - If Possible, Locking Out Of The Attacker - Observation Of New Attempts At Attack And Cause Analysis - If Possible, Cleaning Of Manipulated Systems - Miring Of Technical Recommendations For The Prevention Of Renewed Incidents The Contractor Has To Create An Incident Response Schedule That Describes The Process Process In More Detail And Documented. Furthermore, A Risk Assessment Of The Systems Concerned Must Also Be Carried Out As Part Of The Incident Response Schedule And A First Report To The Client Must Be Made Promptly. In Addition, The Contractor Has To Ensure On-Site Support In The Course Of The Incident Response:-In The Case Of Incidents Of Criticism Critical Or High, In Which An On-Site Presence Is Required For Quick Limitation, Remediation Or Implementation Of Forensic Security Measures, The Contractor Undertakes, Within A Maximum Of Three Hours After The Customers Request, Qualified Personnel Qualified At The Central To Provide Data Center In Andernach. -The Need For The On-Site Use Is Decided In The Respective Incident Case In Coordination Between The Contractors Incident Response Team And The Client Named. - The Contractor Ensures That There Is A Ready -To -Use And Available Resource Planning And That The Travel Times And Logistical Framework Conditions Are Coordinated With The Client In Advance. C) Soc Scope Of Services Part 3: Cyber ​​Security Assessment A Cyber Security Assessment Is A Central E