Data security software development services

Tender description

TII requires a service to capture and analyse IT network traffic for events of significant concern. This will consist of hardware to capture, analyse and report on the traffic and in particular to identify unknown but anomalous issues. It will also consist of an expert IT Security analyst service to examine the traffic in more detail and to report to TII on request and at least every 2 weeks. TII requires specialist services to allow it identify new and emerging threats. The requirements are: 1) A hardware tool\appliance that will receive all mirrored traffic from the core of the TII network plus a facility to monitor and analyse the traffic to look for anomalous behaviour. This must have the ability to look for unknown attacks that have not been seen before; 2) A facility to monitor and analyse the traffic to look for anomalous behaviour. This must have the ability to look for unknown attacks that have not been seen before; 3) The successful contractor will constantly monitor and analyse TII network traffic for likely high impact anomalies. Where these are confirmed by the provider’s IT Security Analyst to be of high risk then they must be notified to named TII contacts within the same day; 4) A service where TII staff can directly contact an expert IT Security Analyst between 9am-5pm Monday-Friday for assistance at least 4 times a month; 5) A service where the provider’s IT Security Analysts will examine TII security incidents of suspected malicious activity. These must then be presented to TII in regular summary reports (at least every 2 weeks) highlighting the incidents of real concern and that may require further investigation. Other related services as required.