Co-Managed Security Solution

The Vendor is required to provide co-managed security solution should include cloud based tools and services necessary to effectively manage and enhance the city's cybersecurity posture.
- The co-managed cybersecurity solution must meet the following specifications:
1. Cloud-based security tools:
• Security information and event management (SIEM) system
• Endpoint detection and response (EDR) tools
• Identity and access management (IAM) solutions
• Threat intelligence platform (tip)
2. Compliance and standards:
• Compliance with NIST cybersecurity framework (CSF)
• Adherence to ISO/IEC 27001 standards
• Compliance with general data protection regulation (GDPR) where applicable
• Alignment with center for internet security (cis) controls
3. Security operations center (SOC) services:
• 24/7 monitoring and incident response
• Threat hunting and intelligence analysis
• Vulnerability management and patching
• Regular security assessments and audits
4. Training and awareness:
• Regular cybersecurity training for city staff
• Phishing simulation exercises
• Awareness campaigns and materials
5. Reporting and analytics:
• Real-time dashboards and reporting
• Monthly and quarterly security reports
• Customizable analytics and metrics.