Διενέργεια_Κάτω_«Προμήθεια προηγμένων Υπηρεσιών Ασφαλείας SOC στις υποδομές της ΚτΠ Μ.Α.Ε.».

The total duration of the contract is twelve (12) months, starting from the date of the contract's signature until the submission of the last deliverable, according to the detailed schedule in ANNEX I. This duration includes the time required for the acceptance of intermediate phases or deliverables. The contract duration can be extended by up to 50% through a reasoned decision by the contracting authority, upon a request from the contractor before its expiration, in objectively justified cases not attributable to the contractor's fault.

The contract timeline is broken down into the following phases:

• Phase 1: Application Study - Duration: 1 month. Starts with the signing of the contract.
• Phase 2: Installation, Parameterization, Control, and Commissioning Services of required hardware/software and Documentation - Duration: 0.5 months. Starts upon completion of Phase 1.
• Phase 3: Final completion checks, optimizations, and training - Duration: 1 month. Starts upon completion of Phase 2.
• Phase 4: Managed Security Services - Duration: 10 months. Starts 0.5 months after the beginning of Phase 3.
• Phase 5: Project Management Services - Duration: 12 months. Starts with the signing of the contract.

A Kick-off Meeting is scheduled within two (2) weeks from the start of the project, during which the implementation schedule will be updated. Regular progress meetings between the contractor and the authority will be held at least monthly.The total duration of the contract is twelve (12) months, commencing from the date the contract is signed until the submission of the final deliverable, as detailed in ANNEX I. This includes the time for accepting intermediate phases or deliverables. The contract duration can be extended by up to 50% if justified and requested by the contractor before expiration, provided the delay is not due to the contractor's fault.

The contract timeline includes the following key phases:

• Phase 1: Application Study - 1 month, starting with the contract's signature.
• Phase 2: Installation, parameterization, control, and commissioning of required hardware/software and documentation services - 0.5 months, beginning after Phase 1 is completed.
• Phase 3: Final completion checks, optimizations, and training - 1 month, beginning after Phase 2 is completed.
• Phase 4: Managed Security Services - 10 months, commencing 0.5 months after Phase 3 begins.
• Phase 5: Project Management Services - 12 months, starting with the contract's signature.

A Kick-off Meeting will be held within two weeks of the project's start to update the implementation schedule, and monthly progress meetings are also planned.

The core scope of work and statement of work summary for this tender, titled "Procurement of advanced SOC Security Services for the infrastructure of KtP M.A.E.", includes several phases and deliverables over a 12-month period.

Summary of Scope of Work and Deliverables:

• Phase 1: Implementation Study: This involves defining the architectural solution, recording and analyzing project components, and developing an integrated Incident Response service with defined procedures and necessary access levels. This phase also includes an architectural review of the existing IT infrastructure, detailed plans for equipment/software installation, infrastructure preparation, development/parameterization, and optimization of existing subsystems/applications.
• Phase 2: Installation, Parameterization, Control, and Commissioning Services: This covers the deployment and configuration of required hardware and/or software, along with comprehensive documentation.
• Phase 3: Final Completion Checks, Optimizations, and Training: This phase includes final verification checks, system optimizations, and training services. It specifically incorporates the execution of simulated Incident Response exercises (tabletop exercises).
• Phase 4: Managed Security Services: This crucial phase involves providing ongoing Security Operations Center (SOC) as a Service, including incident reporting, ad-hoc security incident investigation reports, and real-time Incident Response services. A 24/7 retainer fee for the Incident Response team is part of this. It also includes on-site incident investigation services for severe incidents.
• Phase 5: Project Management Services: This involves project oversight, including monthly progress reports, kick-off meetings, regular progress meetings, issue and change management, risk management, and quality assurance.
• Key Deliverables and Tasks: Proposals for optimizing the security of information systems, updating the project implementation plan and risk file, finalization of project management organization and communication methods, and a Project Quality Plan. The tender also requires the finalization of methodologies and preparation of system acceptance testing scenarios, including the creation of incident response playbooks.
• Transition Services (Upon Contract Termination/Dissolution): The contractor must provide full export of parameterizations, documentation of detection use cases and correlation rules, incident history, lists of indicators of compromise, final response manuals, a complete register of data logging sources, and architecture documentation. Knowledge transfer sessions, verification of delivered material, revocation of contractor accesses, and secure deletion of copies are also required, along with mandatory cooperation with any new contractor.