Security Operation Center as a Service

Proposals from qualified vendors to extend capabilities of the existing IT Security Team to deliver continuous monitoring, detection, investigation, and response to cybersecurity threats through a 24/7/365 Security Operation Center as a Service (SOCaaS) offering.
- Vendor shall:
1. Provide 24/7/365 security monitoring, alerting, threat detection, investigation, and incident response across networks, endpoints, systems, applications, identity services, and cloud environments.
2. Deploy, configure, integrate, and manage core security technologies, including SIEM, EDR/XDR, log management, threat intelligence, and security orchestration capabilities, along with customizable application and data security settings.
3. Integrate the SOCaaS platform with the organization's existing and future IT and security infrastructure.
4. Perform real-time threat detection, analysis, triage, prioritization, investigation, and escalation according to documented procedures and service levels.
5. Support incident response activities, including investigation, containment, eradication, recovery guidance, and post-incident reporting.
6. Support compliance, audit, and regulatory requirements through documentation, reporting, and evidence preservation.
7. Provide onboarding, implementation support, knowledge transfer, and documentation of all operational processes and procedures.
8. Provide vulnerability visibility and risk correlation to prioritize security events, vulnerabilities, misconfigurations, and exposures.
9. Deliver regular reporting, dashboards, executive summaries, and key performance metrics.
10. Provide ongoing service tuning, optimization, threat-hunting recommendations, and security posture improvement guidance.