Board Of Investments Makati City Metro Manila Tender

Description 1. About The Procuring Entity The Board Of Investments (boi) Is An Attached Agency Of The Department Of Trade And Industry (dti) Which Is The National Government Agency Responsible For The Promotion Of Investments- Both Foreign And Domestic. It Is Governed By Executive Order No. 226, Also Known As The Omnibus Investments Code Of 1987. The Boi Seeks To Attract Quality Investments That Will Encourage Technological Innovations And Provide Support For Industries To Seize The Opportunities And Challenges Of Global Demands And Competition. The Agency Envisions Itself As A Global Investment Promotion Agency By 2028 Guided By The Core Values Of Integrity, Excellence, Teamwork, And Passion For Knowledge. Its Mission Is To Provide Investors With Opportunities For Investments, Comprehensive Business Support Services, And Fair Predictable, And Consistent Industry Policies, Which Is In Line With The Economic Integration Of Asean Countries, Which Started In 2015 Wherein The Philippines Is Challenged To Compete With Its Neighboring Countries As An Investment Destination Of Choice. Due To The Price Increase Brought About By Different Factors Such As Changes In Exchange Rates, The First Public Bidding For The Procurement Of Such A Device Ended In A Failed Bidding. A New Terms Of Reference (tor) Has Been Generated Through A More Recent Market Scan Of Different Products In The Market. 2. Project Overview/objectives Generally, The Project Aims To Achieve The Following:  Ensure Security Even At The Endpoint Level To Secure Endpoint Devices From Infections And Malicious Activities That May Compromise The Integrity And Confidentiality Of Files. 3. General Requirement A. The Proposed Solution Must Be Cloud-delivered And Use Metadata For Analysis, Actual Files Should Not Be Sent To The Cloud For Analysis. B. The Proposed Solution Must Support The Capability To Be Deployed On-premise For Flexibility Should Air-gapped Network Deployment Be Required In The Future C. The Proposed Solution Must Have A Lightweight Agent Of <100mb And Must Support Interactive And/or Silent Installation. D. The Proposed Solution Must Be Supported On The Following Platforms: I. Windows Ii. Mac Iii. Linux Iv. Android And Ios Mobile E. The Proposed Solution Must Support Both Static And Behavioral Analysis Of Files 62 F. The Proposed Solution Must Be Able To Perform Root Cause Analysis On Suspected Machines With The Following Capability: I. Sequential And Chronological Trace Of Events With Details Including Host, Username, Ip, And Client Application Involved Ii. Details Should Highlight Which File/process/services That Affected G. The Proposed Solution Must Support Tracking Of Malware Movement And Provide Visualization At The Network Level: Systems And Users Affected, Patient Zero, And Method/point Of Entry. H. The Proposed Solution Must Support Continuous Monitoring, And Retrospective Detection Including File Retrospection To Flag Missed Malware Events Without The Need For Rescan. I. The Proposed Solution Must Support The Use Of Indication Of Compromise (ioc) And The Ability To Import Ioc Conforming To Openioc Formats. J. The Proposed Solution Must Have The Ability To Automatically Submit Suspicious Files With Low File Age And Prevalence For Analysis. K. The Proposed Solution Must Support Integrated Sandboxing Capabilities To Perform A Comprehensive Analysis Of Any Potential Malware Attempting To Compromise Their Endpoints L. The Proposed Solution Must Support Full File Analysis In A Secure Sandbox Environment With Detailed Reports Including The Severity Of Behaviors To Quickly Understand Malware And Suspicious File Behavior. M. The Proposed Solution Must Have A Single Agent For Endpoint Protection And Threat Hunting Capabilities Such As Threat Development Graphs And Ioc Scanning. N. The Proposed Solution Must Be Able To Protect Against File-less Malware And Zero-day Attacks That Use Memory Injection On Unpatched Software Vulnerabilities. O. The Proposed Solution Must Be Capable Of Blocking Communications And Dropper Activity And Contain The Spread Of Malware. P. The Proposed Solution Must Have Application Blocking To Stop Applications With Vulnerabilities From Executing Until A Patch Has Been Released. Q. The Proposed Solution Must Have The Capability To Allow The Administrator To Isolate The Endpoint In The Event Of Infection And The Isolated Endpoint Should Block Incoming And Outgoing Network Activity On A Windows Computer To Prevent Threats Such As Data Exfiltration And Malware Propagation. R. The Proposed Solution Must Have The Capability To Enable Features That Can Simplify Security Investigation And Incident Response By Aggregating Threat Intelligence And Context From Multiple Security Technologies And 3rd Party Tools For A Holistic Investigation And Immediate Remediation Of Threats Through A Single Interface Dashboard. S. Must Have Intuitive And Interactive Graphs To Show The Relationship And Interaction Between Malicious File Hash Found During The Investigation And Related Targets In The Network To Easily Identify If These Are Seen Locally In The Network And Can Also Allow To Blocking Files At Endpoints And Immediately Quarantine Affected Endpoints From This Dashboard. T. The Proposed Solution Must Support Threat-hunting Capabilities To Help Make Security Investigation Simple By Allowing The Administrator To Perform On-demand Live Queries From Installed Endpoints Using A Pre-defined Query Set Or Customizable Queries Defined 63 By The Administrator, And Available Via An Upgrade License That Can Be Purchased In The Future U. The Proposed Solution Must Be Capable Of Providing A List Of The Pre-defined Query Templates That Use Industry Standards Like Mitre Att&ck In Order To Simplify The Query Process., And Be Available Via An Upgrade License That Can Be Purchased In The Future V. The Proposed Solution Must Be Capable Of Allowing The Customer To Store The Query Results In The Cloud Provided By The Vendor Or In The Customer’s Own Directory, And Available Via An Upgrade License That Can Be Purchased In The Future W. Must Provide License For 325 Concurrent Users With 3-year Subscriptions. 4. Product Training And Demonstration A. Conduct At Least One (1) Day Of Product Training And Demonstration On Deployment, Configuration, Administration, Maintenance, And Basic Troubleshooting With Eight (8) Attendees. B. Includes Training Materials. C. Certificate Of Training Attendance 5. Product Support Requirement 5.1. 8x5 Remote Support Through Phone And Email; And Services Assistance Through Email, Phone, And Web Chat With A Response Time Of Not More Than An Hour Upon Receipt Of The Request From Boi. 5.2. Provision Of 8x5 On-site And On-call Services Within The Subscription Period. 5.3. Provide Comprehensive Service Level Agreement 5.4. Regular Daily Pattern Updates And Firmware Updates Within The Subscription Period 5.5. Onsite Support Services If Needed 5.6 Minimum Of Two (2) Hours Response Time For Email Support Assistance 5.7 Minimum Of Four (4) Hours Response Time For Technical Problems That Cannot Be Resolved Remotely 6. Service Provider Requirements 6.1. The Vendor Must Supply, Deliver, And Configure The Monitoring And Security Solution Being Offered With Existing Boi Network Infrastructure. 6.2. The Vendor Must Submit A Certification Issued By The Product Manufacturer That They Are A Certified Partner And Able To Extend Direct Technical Support To End-users For The Product Being Offered. 6.3. The Vendor Must Have At Least 3-years Existence In It Business. 6.4. The Product Must Be Included In The Gartner Magic Quadrant For Endpoint Security At Least Once In The Last Three (3) Years. 6.5. The Vendor Must Be A Philgeps Registered Supplier. 6.6. After The Initial Three (3) Year Subscription, Boi Has The Option To Renew 1 Year Thereafter 64 6.7. Retention Fee Shall Not Be Release Until Such Time That The Three (3) Year Subscription Period Has Already Lapsed. 7. Manpower Requirements Must Have A Regular Employee For At Least 3 Years, With The Required Qualifications: Should Have At Least Two (2) Locally Employed Manufacturer-certified Engineers Of The Proposed Brand Who Will Do The Installation To All Endpoints. 8. Warranty 8.1. Solution Supplied Have A Three (3) – Year Assurance Warranty From The Date Of Acceptance. 8.2. Other Warranties As Prescribed Under Applicable Law. 9. Delivery Installation And Configuration Must Be Completed Within Ninety (90) Days Upon Receipt Of Notice To Proceed. Must Provide In Hard And Soft Copies Detailed Project Documentation Of The Following: A. Project Implementation Plan, B. User Acceptance Test Plan, C. Installation And Configuration Manual, D. Incident And Problem Escalation Procedure With List Of Designated Technical Support Engineers, E. Sla (service Level Agreement) 10. Project Estimates Approved Budget Cost A Budget Ceiling Of One Million Seven Hundred Eighty-seven Thousand Five Hundred Pesos (php 1,787,500.00) Has Been Approved And Earmarked For The Subscription Of 325 Anti-virus Licenses (end Point Protection), Including All Incidental Expenses For The Duration Of The Project. Prices Are In Php Peso And Are Vat Inclusive. 11. Source Of Funds The Budget Authorized For Subscription Of 325 Anti-virus Licenses (end Point Protection), Shall Be Sourced From The 2024 Mooe, Pursuant To Philippine General Appropriation Act Of 2024. 12. Payment 99% Upon Final Acceptance Of Boi Of The Project. 1% Three-year Retention 65 13. Penalty In Case There Is A Delay In The Installation Of The Software And/or Hardware Where Boi Is Not At Fault, The Contracted Service Provider Shall Be Subject To Sanctions As Specified In The Contract To Be Signed By Both Parties Based On The Applicable Permission Of The Procurement Law.