Mobil ISC GmbH Tender

Contract notice: misc_soc_2021_tnw The aim of this tender is to initially meet the requirements of the issuing agency itself and to enable the employees of the issuing agency to take over standard services within the security operation center (soc) themselves. in a further step, the intention is to also integrate customers and in particular the shareholders of misc as separate clients into the soc. the framework agreement to be concluded includes all scenarios.Mobil isc gmbh is the it service provider for its shareholders. in the modern digitized and networked world, networks of companies, data centers and end devices are exposed to an increasing threat from cyber attacks via a variety of attack vectors. assuming that cyber attacks cannot be completely prevented even by various complementary preventive measures, the focus is on the detection of threats and security incidents. a high level of protection is required to ensure its tasks vis-à-vis its shareholders and other customers. for this reason, misc intends to set up a soc (security operation center) including a siem solution for its own company, with the option of using the area of ??application at needs to be extended to your shareholders and, if necessary, other customers. multi-tenancy of the systems is a mandatory requirement for the selection. multi-client capability is expressly required. special challenges are the technical and organizational complexity of the project as well as the availability (especially on the job market) of specially trained technical staff (security experts). the establishment of a soc and siem operations is urgent and must be carried out as promptly as possible in order to maintain the level of security to bring it to a higher level throughout the company. misc therefore attaches great importance to the quick implementation of the tendered service. with this tender, misc is pursuing two objectives: on the one hand, the level of security in the entire company must be raised to a higher level at short notice, and on the other hand, the object of procurement must also be shared with shareholders and other customers open to the misc. the requirements are then adjusted according to the needs of the end customer. the subject of the tender is the following: 1. managed siem servicessiem services include the installation and operation of a siem system for the automated acquisition and correlation of security-relevant log and event data from the misc. this also includes the implementation and maintenance of suitable use cases for the detection of attacks and security incidents and alarms, including cyber threat intelligence information. to achieve the goals, a siem software is to be procured which will become the property of the misc. this includes all licenses, operating costs and any procurement of hardware. 2. soc-monitoring services the service includes real-time monitoring of siem alarms and incident detection by a provider soc as well as the notification of confirm