SIA 874 - IT Managed Detection and Response Solution 2024

Requirement under the CCS Cyber Security Service 3 framework to procure a single service provider for the following services: 1. Remote monitoring and management of IT security functions for up to a maximum of 600 end-points (SIEM alert monitoring and management by intent, strategy, method, type and source), Vulnerability scanning, Intrusion detection, Behaviour monitoring etc. 2. A managed detection and response (or equivalent) in accordance with the NCSC's Cyber Incident Response Scheme Level 2 to manage actively and proactively all types of threats and incidents. That is: • Network-Based Intrusion Detection • Host-Based Intrusion Detection. • Hybrid Intrusion