Cybersecurity Operations Center Services

This procurement opportunity is for the establishment of a Security Operations Center (SOC) and compliance with the Cybersecurity Act. Due to the increasing cyber threats and the need to protect digital assets through proactive security monitoring and timely response to security incidents, the goal is to set up an external SOC to safeguard critical information and assets. The services will include effective management of critical security incidents, risk mitigation, incident monitoring, and alerting, thereby enhancing security against advanced threats and risks. The SOC management service must ensure continuous monitoring, detection, and response to threats, covering visibility and detection of vulnerabilities and threats across all key components of the IT system, such as servers, end-user devices, databases, user access activities to internal services, and internet access. Additionally, the following services are required for compliance with the Cybersecurity Act: • Business impact analysis • Risk assessment of the information security system • Business continuity planning • Business recovery plan development • Implementation of vCISO solutions for compliance management • Documentation aligned with ISO/IEC 27001:2022 standards • Annual security status report for the Buyer. The external SOC services must ensure the collection and analysis of threat data, event monitoring, and response to security incidents in a 24/7 operational model, including triage, incident categorization, vulnerability identification, and reporting matrix through defined incident response processes.