0055 - The Provision of Security Operations Centre (SOC) and Security Information and Event Management (SIEM) Services

Description

An Post requires a suitably qualified Security Partner to deliver a managed Security Operations Centre (SOC) and Security Information and Event Management (SIEM) service across its technology estate. The successful Supplier will be responsible for providing a resilient, secure, and professionally managed cybersecurity capability that supports continuous security monitoring, threat detection, incident analysis, alert triage, incident response, escalation management, compliance assurance, service reporting, and ongoing service improvement. The Supplier will work collaboratively with An Post personnel and relevant third-party providers to ensure comprehensive monitoring coverage, effective management of security incidents, and alignment with An Post's security, resilience, governance, and regulatory requirements. The service will include the provision, operation, management, and continuous enhancement of security monitoring and incident management capabilities, including support for Microsoft Sentinel as An Post's current SIEM platform. The Supplier must also be capable of supporting alternative SIEM technologies should An Post's security architecture evolve during the contract term. In addition, the Supplier must be able to monitor and manage security event sources across both Microsoft and non-Microsoft technologies, including platforms that do not natively integrate with Microsoft Sentinel. The scope of the service is expected to include, but is not limited to, managed cybersecurity operations, threat detection and analysis, incident management and response, security platform support, threat intelligence, governance and reporting, and the provision of suitably qualified cybersecurity personnel to support service delivery.