Information Technology Security Event Monitoring and Alerting Solution

Tender description

TII's network system is generating a significant amount of network traffic data and TII need to quickly and efficiently interpret the traffic for events of genuine significant concern. TII requires additional services to allow it identify new and emerging threats. The requirements are twofold: 1. A hardware tool\appliance that will receive all mirrored traffic from the core of the TII network plus a facility to monitor and analyse the traffic to look for anomalous behaviour. This must have the ability to look for unknown attacks that have not been seen before. 2. The successful contractor will constantly monitor and analyse TII network traffic for likely high impact anomalies. Where these are confirmed by the provider’s IT Security Analyst to be of high risk then they must be notified to named TII contacts within the same day.