Security Managed Detection and Response Service

Contract for a specialist security provider to provision Human-Driven Security Managed Detection and Response Service to:

1. Reduce the likelihood and impact of a major cyber security incident.

2. Reduce the likelihood and impact of data loss/theft.

3. Reduce the attack surface and improve cyber security maturity across all environments.

4. Improve threat intelligence and understand normal user behaviour to shape and develop cyber security maturity improvement programmes.

5. Respond to a major cyber security incident in an expedient manner and to ensure a quick, secure, and full recovery in the shortest amount of time.

6. Ensure our citizens information and Council services are as fully protected and secure as possible and are impacted minimally by any cyber security threat.

The service is comprised of:

1. Detection and Response Service (Network Detection and Response, and Endpoint Detection and Response)

2. SIEM service management

3. Vulnerability scanning of public interfaces

4. Online exposure monitoring

5. Incident response

6. Network Intruder Alarm (optional)

Awarded following Further Competition conducted under Crown Commercial Services Cyber Security Services Framework RM3764.3