The overarching goal of the procurement is to provide a modern, flexible, and scalable security and network architecture to connect and monitor the dynamically growing and heterogeneous system landscape of the contracting authority. The scope of the systems to be connected and secured includes physical and virtual endpoints, dedicated on-premise data centers, as well as various cloud environments. Particular emphasis is placed on ensuring that these landscapes can not only be flexibly integrated into the network but that security-relevant events are centralized, correlated, and monitored. This tender is divided into two lots: - Lot 1: "Managed SOC" - Lot 2: "Managed Connectivity Security" Compressed overview: a) time-limited provision of a Managed SOC solution (Lot 1) or time-limited provision of a Managed Connectivity Security solution (Lot 2) b) the establishment of operational readiness of the solution for up to four data centers c) operation of the solutions d) supplementary services for handling security incidents including digital forensics services (Lot 1) e) consulting services f) services upon contract termination. The details can be obtained from the service description and other procurement documents provided free of charge.

LOT-0001
Managed SOC.
Lot 1 involves the provision and operation of a modern platform for attack detection and response, as well as associated detection processes. The systems and processes to be implemented (SOC, SIEM, SOAR, and DFIR) should centralize, correlate, and analyze data from various sources and service providers, as well as self-operated infrastructures, for possible attacks and generate corresponding alerts.

LOT-0002
Managed Connectivity Security.
Lot 2 involves the provision and operation of solutions in the area of Managed Connectivity Security, namely Software-Defined Wide Area Network (SD-WAN) or Secure Access Service Edge (SASE), Web Application Firewall (WAF), distributed Denial-of-Service protection (DDoS protection), Secure Web Gateway (SWG) or Cloud Access Security Broker (CASB), Remote Browser Isolation (RBI), remote access for mobile work (Client-2-Site-VPN), as well as the connection of external partners (Site-2-Site-VPN). The goal is to provide a scalable, redundant, and resilient network infrastructure that enables flexible network connectivity and security in a heterogeneous system landscape within the context of a multi-cloud and multi-provider infrastructure.