Cyber Security Managed Service

The Vendor is required to provide a managed security services provider/vendor who can provide managed core cybersecurity services.
- Single cloud company - azure
- Current Microsoft e5 license for all active users
- Users – between 1200 and 1500
- End user devices – between 1300 and 1500
- Servers - between 400 and 600
- Other (printers, network, meeting rooms, etc.) 300-400
- Ownership and full use of Microsoft defender for endpoint, identity, cloud apps, m365, Microsoft sentinel
- Internal SecOps team
- Microsoft verified managed detection and response (MDR)
• Endpoint detection & response (EDR) management
• Identity threat detection & response (ITDR) management
• Email threat detection & response (ETDR) management
- Microsoft verified security information and event management (SIEM) management
• Security event monitoring (log collectors)
• SIEM (sentinel) management
- Exposure management (EP)
• Vulnerability management (assessment, reporting and prioritization)
• Security posture assessment
• Exposure prioritization
• Attack surface management
- Additional Services that may require on an ad-hoc basis:
• Security consultancy (security architecture, tabletops, roadmaps, etc.)
• Penetration testing
• RED team
• Breach and Attack simulation
• Audit of other parties
• Management of threat sources and feeds
• Microsoft Defender for Cloud management
• DLP (MS Purview) management
• Dark Web monitoring.
- Security Event Monitoring (Log sources and collectors). Include your proposed periodical maintenance program and log sources add/remove activities.
- Contract Period/Term: 3 years
- Questions/Inquires Deadline: April 25, 2025