Gestión del servicio de ciberseguridad (soc)

The contract duration will be 12 months, counted from the day following its formalization. The contract may be extended annually by the contracting authority for a maximum of 4 additional years. This extension requires the contracting entity to notify the contractor at least two months prior to the end of the contract or the current extension, and it is mandatory for the contractor.

The core scope of work for this tender involves the contracting, in service mode, of the management and monitoring of GIPUZKOAKO URAK's security infrastructure, both at the device and cybersecurity levels. This service expands the current Security Operations Center (SOC) to include newly deployed perimeter security, switching, centralized management, security analytics, and network access control infrastructure. The aim is to ensure complete monitoring of the organization, encompassing new equipment and DNS servers. The overall title of the tender is the "Management of the cybersecurity service (SOC)".

The Statement of Work summary and core deliverables include:

• Management and monitoring of the security infrastructure (firewalls, switches, NAC, centralized management, and DNS).
• Integration of new security infrastructure with the existing SOC service.
• Collection of information for detection and analysis of potential security incidents.
• Daily injection of Indicators of Compromise (IoC) into firewalls to enhance security.
• Monthly reports on security incident status and quarterly summaries with improvement plans.
• Assistance with Fortinet-related problems and incidents.
• Routine management and operation (8x5), including modification of security rules and policies, access profiles, and scheduled configuration/security policy updates and patches.
• The SOC service must operate under a 24x7x365 model from a location within the European Union.
• Deliverables explicitly stated are: Technical documentation, Source code, Evidence of tests, User manual, and a Declaration of compliance with requirements.
• The contractor must ensure a seamless transfer of service at the contract's conclusion.
• Proposals should detail the Firewall monitoring service operation, commitment to daily IoC injection, and provide a model for monthly security incident reports.
• Opportunities for improvements related to increased cybersecurity and detailed network traffic monitoring are also part of the scope.