Tenders Are Invited For Purchase And Implementation Of The Security Operation Center Soc Service As Part Of The Task Called: Cyber -Secure Local Government - Advanced Digital Services

I. Subject Of The Contract1. The Subject Of The Order For The Task Called: Purchase And Implementation Of The Security Operation Center Soc Service As Part Of The Task Called: Cyber Security Local Government - Advanced Digital Services Is To Provide And Launching The Security Operations Center Monitoring Service For The City Hall Of Dąbrowa Górnicza As Part Of The Project Increasing The Level Of Cyber Security In Dąbrów Górnicza European Funds For Digital Development (Ferc) - As Described By The Subject Of The Contract, Which Is Annex 7 To The Specification Of The Terms Of The Contract. 2. Service Parameters: 2.1. The Service Will Be Provided In 24/7 Mode For 365 Days A Year. 2.2. As Part Of The Service, The Contractor Will Monitor And Respond To Events Based On Logs Made Available By The Ordering Party From The Indicated Sources. 2.3. The Service Must Contain Mechanisms To Increase The Level Of Environmental Protection It, Among Others, Allowing Current Management Of Susceptibility And Ensure Compliance With Security Policies. 2.4. The Service Must Aggregate Information About Network Events From Various Sources, 2.5. The Contracting Authority Indicates As Sources For Logs The Following Systems: • Edr/Xdr Class System (Logs From Endpoint - Server Workstations); • Network Login Collector Or Individual Network Devices (Routers, Switches, Firewall, Ips/Isps And Vpn); • Domain Active Directory (Logs Of Min. Administration Min. M365; 2.6. The Proposed Solution Must Allow You To Add Further Sources Of Logs Without Buying Or Adding Further Licenses. License Costs Must Be Fixed, Included In The Price Of The Soc Service And Cannot Depend On The Amount Of Data. 2.7. The Service Must Include At Least: • Monitoring Of Events And Incidents From Network Devices, Servers And User Computers Using The Siem Class Solution And Implemented Rules For Analyzing And Correlation Of Logs (Scenarios); • Responding To Emerging Events In Accordance With Established Procedures And Scenarios. Scenarios And Procedures Must Be Prepared On The Basis Of Mitre Att & Ck; • Providing Recommendations Aimed At The Best Protection Of The It Environment And Minimizing The Risk Of Effective Attack; • Providing Recommendations And Reports Related To Ongoing Monitoring Of The It Environment; • Tracking Threats And Market Trends To Implement New Rules And Reaction Procedures; • Ensuring Control Over The Compliance Of The Security Of Monitored Office Systems With The Regulations In Force In Poland Regarding Local Government Units, In Particular With The Act On The Computerization Of The Activities Of Entities Carrying Out Public Tasks, The Kri Regulation, The Regulation Of The Gdpr, The Act On The National Cyber Security System. 2.8. The Service Must Include The Following Functionalities: • Analysis Of Network Events • Analysis Of End Devices Events • Monitoring The Integrity Of Configuration Files; • Detecting The Susceptibility Of The Internal It Environment And Shared On The Internet; • M