Posted Date : February 02,2022
Product (RFP/RFQ/RFI/Solicitation/Tender/Bid Etc.) ID : CSE-11805
Government authority located in Toronto, Ontario; Canada based organization looking for expert vendor for enterprise security event monitoring solutions.
[A] Budget: Looking for Proposal
[B] Scope of Service:
Vendor needs to provide enterprise security event monitoring solutions to enhance the cyber security posture and streamline security operations through improved detection, correlation, and response to enable comprehensive, effective, efficient, and proactive threat management to the government authority located in Toronto, ON.
- Solution must allow the ministry to onboard and manage customers separately or in combinations as business rules dictate, and to logically and/or physically segregate solution services, configuration, resources, data, access, and management related to customers using the solution.
- SaaS based continuous monitoring across multiple sensors (e.g., endpoints, network, identity, email, cloud workloads, etc.) providing proactive cybersecurity threat detection and incident response.
- Malware protection including ransomware, file less malware.
- Customizable endpoint protection policies that can be nested, is easily implemented, efficiently managed, and can be selectively applied to an endpoint, arbitrary collection of endpoints or groups of endpoints.
- Customizable endpoint protection policies that can be easily and dynamically set to “learn / report-only” mode or “actively block / protect” and can be selectively applied to new or existing endpoints, arbitrary collection of endpoints or groups of endpoints.
- The EDR Platform must provide reputation information on all running and stored software. Information that determines a file’s reputation includes behavior, age, prevalence, vulnerability score and publisher.
- Endpoint agent configuration must operate transparently to the user and does not require end-user configuration and decision making.
- Capability to request user confirmation before allowing interactive endpoint access.
- IT operational use cases including performance analysis, network analysis, capacity management and capacity planning.
- Pre-defined and easily customizable and maintained means and methods for distribution of generated reports (e.g., email, on-premise and Cloud storage-based retrieval, etc.).
- Case prioritization and assignment, including initial/shared/exclusive assignment controls; escalation.
- Case analytics, including performance analytics and post-incident review reporting.
- Provides full and contextualized views of the details of the crisis providing a decision supports system to enable real-time impact analysis and reporting.
[C] Eligibility:
- Onshore (Canada Organization Only);
[D] Work Performance:
Performance of the work will be Offsite.
Budget :
Deadline to Submit Proposals: March 16,2022
Cost to Download This RFP/RFQ/RFI/Solicitation/Tender/Bid Document : 5 US$
Product (RFP/RFQ/RFI/Solicitation/Tender/Bid Etc.) ID : CSE-11805
Government authority located in Toronto, Ontario; Canada based organization looking for expert vendor for enterprise security event monitoring solutions.
[A] Budget: Looking for Proposal
[B] Scope of Service:
Vendor needs to provide enterprise security event monitoring solutions to enhance the cyber security posture and streamline security operations through improved detection, correlation, and response to enable comprehensive, effective, efficient, and proactive threat management to the government authority located in Toronto, ON.
- Solution must allow the ministry to onboard and manage customers separately or in combinations as business rules dictate, and to logically and/or physically segregate solution services, configuration, resources, data, access, and management related to customers using the solution.
- SaaS based continuous monitoring across multiple sensors (e.g., endpoints, network, identity, email, cloud workloads, etc.) providing proactive cybersecurity threat detection and incident response.
- Malware protection including ransomware, file less malware.
- Customizable endpoint protection policies that can be nested, is easily implemented, efficiently managed, and can be selectively applied to an endpoint, arbitrary collection of endpoints or groups of endpoints.
- Customizable endpoint protection policies that can be easily and dynamically set to “learn / report-only” mode or “actively block / protect” and can be selectively applied to new or existing endpoints, arbitrary collection of endpoints or groups of endpoints.
- The EDR Platform must provide reputation information on all running and stored software. Information that determines a file’s reputation includes behavior, age, prevalence, vulnerability score and publisher.
- Endpoint agent configuration must operate transparently to the user and does not require end-user configuration and decision making.
- Capability to request user confirmation before allowing interactive endpoint access.
- IT operational use cases including performance analysis, network analysis, capacity management and capacity planning.
- Pre-defined and easily customizable and maintained means and methods for distribution of generated reports (e.g., email, on-premise and Cloud storage-based retrieval, etc.).
- Case prioritization and assignment, including initial/shared/exclusive assignment controls; escalation.
- Case analytics, including performance analytics and post-incident review reporting.
- Provides full and contextualized views of the details of the crisis providing a decision supports system to enable real-time impact analysis and reporting.
[C] Eligibility:
- Onshore (Canada Organization Only);
[D] Work Performance:
Performance of the work will be Offsite.
Budget :
Deadline to Submit Proposals: March 16,2022
Cost to Download This RFP/RFQ/RFI/Solicitation/Tender/Bid Document : 5 US$