Managed Detection and Response (MDR) Services

Managed Detection and Response (MDR) Services: Provision of an MDR service from a Security Operations Center (SOC) to support and strengthen the Contracting Authority's operational IT security. The service utilizes and supplements the Contracting Authority's existing Extended Detection and Response (XDR) platform, which is managed by two (2) suppliers. It includes 24 hours a day, 365 days a year manned monitoring, analysis, detection, validation, escalation, and handling of security incidents. The supplier must conduct a technical, organizational, and procedural Transition In, establish and configure integrations between the XDR platform, other security sources, and the supplier's own tools. Ongoing MDR services include continuous SOC monitoring of security-related incidents and alarms; analysis, correlation, and qualification of incidents across relevant data sources; identification, detection, and validation of security incidents; development, implementation, and continuous optimization of detection rules, use cases, and analysis models; application of relevant Threat Intelligence; continuous assessment of the threat landscape; proactive identification of potential security incidents and risks through Threat Hunting activities; escalation, notification, and reporting of security incidents; maintenance of existing and establishment of new integrations; optimization and further development of the XDR platform and other security solutions; consulting on the development and maturation of the security organization, security processes, and governance; execution of targeted Threat Hunting courses and analyses of suspicious activities; Incident Response assistance for security incidents upon request (including analysis, containment, handling, remediation, and recovery); assistance with major security incidents and cyber crises, and coordination with relevant stakeholders; security-related professional advice and strategic sparring on developments in cybersecurity. Additionally, cross-cutting services such as documentation, reporting, governance, quality assurance, and information security are included throughout the contract period. Upon contract termination, Transition Out obligations are required to ensure a controlled, secure, and documented transfer of knowledge, data, processes, integrations, and other contract-related deliverables.

Tender documents

Additional details