Tenders Are Invited For Improving Cybersecurity In The Opalenica Commune.

The Subject Of The Order Is The Delivery, Implementation And Launch Of A Comprehensive It Solution Providing The Audit As A Service Service In The Saas Model. This Includes The Creation And Delivery Of A Dedicated Cloud Platform With The Functionalities Of It Security Audit 24/7, Infrastructure Monitoring, Incident Management, Full Integration With The Infrastructure Of The Ordering Party And The Possibility Of Further Expansion. Recommendations, Reports,- Automation And Monitoring In Accordance With Siem/Soar,- Integration With Existing Edr/Xdr/Mdr Solutions, Utm, Av And Other It Security Components,- Module For Scanning Vulnerability, Configuration And Resources,- 24/7 Audit Of Final Systems And Equipment (Windows, Macos, Linux Servers, Networks, Domains, Backups, Personal Data, Microsoft And Google Clouds,- Graphic Presentation Of The Level Of Security With Score And Statements. As Part Of The Service, Access To The E-Learning Platform With Ai Support Courses, Knowledge Base, Tests, Database Of Threats Related To The Services Used By The User And The Function Of Personalization Of Training Must Also Be Provided. Implementation:- Advanced Backup System (For Physical, Virtual, Nas, Saas),- Data Retention Without Temporary Restrictions,- Deduplication, Compression, Encryption And Protection Against Ransomware (Immutable Backputs),- Backup Of Data From Operating Systems, Databases (Sql, Oracle Rman), Microsoft 365 Application, Github/Gitlab/Bitbucket, Jira, Etc.,- Bare Metal Restore, P2v/V2p/P2p/V2v Function And Granular Recovery Of Files And Data. Establishment Also Includes The Supply And Configuration Of It Equipment (Servers, Matrices, Network Devices) And All Required Licenses For A Period Of Not Shorter Than 5 Years. There Are:- Consultations With An Internal Auditor And Vciso,- Monthly Kri Reports, Newsletters, Recommendations,- Stationary And Remote Training,- Monitoring Of Visibility In The Public Network (E.G. Leakage Base, Search Engine). (Windows, Macos, Servers),- Provide Resistance To Razomware, Device Control, Systems And Application Updates,- Offer Advanced Event Analysis, Scanning Of Website Reputation, Detection Of 0-Day Threats And The Ability To Respond To Incidents. All Components Must Act In Polish, Have A Web Interface, Be Independent Of One Point, Be Independent Of One Point Failures And Support The Integration Of The Contracting Authoritys Infrastructure.