IS Security Monitoring Operations Center (SOC) Rental

Список и краток опис на критериумите за избор

The economic operator should have an established system for personal data protection, i.e. documentation adopted by the economic operator (documented policies, codes of practice, guidelines, procedures and work instructions), required to implement technical and organizational measures in order to ensure guarantee that personal data processing is carried out in accordance with the requirements provided for in the regulations for personal data protection, as well as for ensuring the protection of the rights of the personal data subjects; The documentation should contain provisions/information that will guarantee the integrity, availability and confidentiality of personal data, namely: *whether and how the data is encrypted according to their sensitivity; • whether there are procedures in place that guarantee that no one will have unauthorized access to the data; • whether and how data transmission is encrypted; • guarantees regarding traceability (logs, information audit trail); • management of access rights; • risk management; • password policy; • the minimum standards for authentication of the authorized persons; • the conditions for restoring data and/or their destruction after the expiration or termination of the contract; • measures for physical security of premises and devices for personal data processing; • rules for management and notification of the National Bank in case of incidents, that is, in case of violation of the security of personal data; • management of incidents that caused a violation of the security of personal data with appropriate and timely reporting to the National Bank, in accordance with legislation and • other technical and organizational measures for the security of personal data processing.
- the economic operator is required to provide a team consisting of at least 6 experts who will be involved in the implementation of the contract. - At least four of the experts from the team involved in the process of providing SOC services should hold at least one of the following certificates: Comptia Security+, Certified SOC Analyst (CSA), GIAC Certified Incident Handler Certification (GCIH), Certified Ethical Hacker (CEH) or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid one of the following certificates: Certified Information Systems Security Professional (CISSP), Certified Information Systems Security Manager (CISSM) or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid one of the following certificates: Certified Digital Forensics Examiner(CDFE), Computer Hacking Forensic Investigator (CHFI), GIAC Certified Forensic Analyst (GCFA), or equivalent. At least one of the experts from the team involved in the process of providing SOC services should hold a valid Microsoft Certified Windows Server Hybrid Administrator certificate or equivalent. At least one of the experts from the team involved in the process of providing SOC services should have possess a valid certificate for Cisco Certified Network Professional or equivalent Certificates must be valid at the time of submission of the bid, and if they expire during the validity of the contract, they must be renewed or a valid certificate equivalent to the previously accepted certificate must be submitted
- the economic operator is required to possess forensic equipment/software from a commercial manufacturer