ICT Infrastructure Administration and Cybersecurity Support Services

The Vendor is required to provide infrastructure administration and cybersecurity support services of a suitably qualified information technology and computer science professional to provide ongoing administration, maintenance, cybersecurity monitoring, and technical support for its information and communications technology (ICT) infrastructure.
- Cybersecurity administration
• Monitor firewall logs and security events for unusual or suspicious activity.
• Investigate potential cybersecurity incidents and recommend appropriate corrective actions.
• Configure, review, and optimize firewall security policies, NAT rules, VPN configurations, and high-availability and failover settings.
• Verify that recommended security mitigations and threat advisories issued by the ministry of innovation science and smart technology (mist) or other authorities have been implemented where applicable.
• Review intrusion prevention, malware, antivirus, DNS security, URL filtering, and vulnerability reports.
• Recommend improvements to strengthen the overall cybersecurity posture of the organization.
- Network administration
• Monitor the health and performance of the enterprise network.
• Maintain wired and wireless network infrastructure.
• Ensure secure authentication for staff wireless access.
• Maintain segregated guest wireless access.
• Troubleshoot network connectivity and performance issues.
• Monitor bandwidth utilization and recommend improvements where necessary.
- Server and virtual infrastructure
• Monitor the health and performance of physical and virtual servers.
• Review server logs for errors and abnormal conditions.
• Verify backup operations and restoration capability.
• Monitor storage utilization and overall system performance.
• Ensure virtual machines remain operational and are appropriately updated.
• Recommend improvements to virtualization and storage performance.
- Storage infrastructure
• Monitor network attached storage (NAS) systems.
• Review storage capacity and utilization.
• Verify raid integrity and storage health.
• Monitor backup repositories.
• Ensure appropriate data redundancy and availability.
- Systems maintenance
• Install operating system updates where appropriate.
• Apply firmware updates to supported infrastructure devices.
• Maintain configuration backups.
• Verify successful system backups.
• Maintain system documentation.
- Licence administration
• Monitor software licensing status.
• Notify management of licences approaching expiration.
• Provide recommendations for licence renewal.
• Assist with licence activation and management.
- Documentation and reporting
• Work performed.
• Issues identified.
• Corrective actions taken.
• Recommendations for improvement.
• Outstanding issues requiring management attention.
• Security incidents investigated.
• System health observations.
- Disaster recovery and business continuity
• Reviewing disaster recovery procedures.
• Verifying backup integrity.
• Testing restoration procedures where requested.
• Recommending improvements to system resilience and high availability.