SS/CON/6555 - Security Monitoring and Incident Management Service

Tender description

The Contracting Entity intends to procure the Security Monitoring and Incident Management System Services. ESB operates a 24/7 Enterprise Security Monitoring and Incident Management service to proactively and reactively detect/respond to Cybersecurity Threats. ESB seeks to contract a Managed Security Service Provider (MSSP) to co-operate, maintain, support and augment the existing services. The successful Candidate must be competent in Security Incident and Event Management services for traditional Information Technology, Operational Technology and modern Cloud SaaS, PaaS, IaaS environments. The successful Candidate will be required to monitor in scope endpoints, security systems, business applications and network infrastructure to identify threats, risks and alarms; and provide actionable intelligence and real time visibility. The services including SIEM hardware and software on premise. Lot 1: The Contracting Entity intends to procure a contract for the Security Monitoring and Incident Management System Services as part of ESB Security Operations centre. ESB operates a 24/7 Enterprise Security Monitoring and Incident Management service to proactively and reactively detect/respond to Cybersecurity Threats. ESB seeks to contract a Managed Security Service Provider (MSSP) to co-operate, maintain, support and augment the existing services in line with ESB's Brighter Future Strategy. As part of requested service, the successful Candidate must be competent in Security Incident and Event Management services for traditional Information Technology, Operational Technology and modern Cloud SaaS, PaaS, IaaS environments. The successful Candidate will be required to monitor in scope endpoints, security systems, business applications and network infrastructure to identify threats, risks and alarms; and provide actionable intelligence and real time visibility. Managed Security Services for the operation, maintenance and support Security Monitoring & Incident Management services including SIEM hardware and software on premise. It is proposed that the Contract will include (non-exhaustive list – high level scope): Managed Security Services for the operation, maintenance and support of Security Monitoring & Incident Management services in the cloud 24/7 security monitoring and threat/anomaly detection managed services of ESB on-premise, telecommunications and cloud infrastructure, ESB business assets, users, customers, applications, data and processes Continuous development/testing of use cases and monitoring rules (standard and bespoke/custom) Threat Profiling and Modelling services Continuous proactive threat hunting and analysis Rapid response to zero day and emerging threats Threat Intelligences services (Strategic/Tactical/Operational) Supply of Qradar Licensing & Features Supply of maintenance support for Qradar Supply of IBM Qradar Hardware + warranties As stated in Procurement Qualification Questionnaire (PQQ) available to download from www.etenders.gov.ie using RFT ID 227404