This is the selection phase associated with the procurement Cyber Security services of EBN bv. By means of this application you are invited to register.

EBN eg

Energie Beheer Nederland bv (EBN) is 100 percent owned by the Dutch state. We implement parts of the climate and energy policy of the Ministry of Economic Affairs and Climate.

About EBN IM

EBN Information Management is a management organization and does not carry out its own operational activities. The operational activities are all outsourced. EBN IM organization consists of four FTEs, supplemented by a data team and approximately 35 functional managers. This directing organization mainly carries out strategic activities, such as the architecture principles, policy plans and processes. The operational activities are mainly carried out by the SIAM party together with the suppliers. The various suppliers operate and consult independently and advise

The scope for lot 1 concerns the following elements in outline:

- delivery, installation, configuration, management and maintenance of a SIEM solution based on best practices supplemented with specific EBN use cases, including where necessary the requirements for local log collection,

- delivery, installation, configuration and maintenance of (network) sensors that work in an integrated manner with the supplied SIEM,

- delivering and unlocking Threat Intelligence on the SIEM solution. Services: 24/7 analysis of incidents identified by the SIEM, together with EBN's partners provide an analysis of the incidents, provide follow-up advice regarding incidents to EBN and its partners, active support with fine-tuning SIEM and clear feedback to EBN. Prioritize incidents (p1 24/7, the other Ps during office hours),

- providing and managing a portal with real-time insight into incidents and status (incidents and landscape),

- delivering reports,

- delivery of helpdesk support.

Making a re-transition plan including transfer described use cases.

Out of scope

Physical security

EBN has defined the following objectives for plot 1 which EBN wants to achieve with this assignment:

- continuity: EBN expects an uninterrupted service in terms of availability, stability, performance, integrity and confidentiality,

- unburdening: the supplier must be primarily responsible for providing security services to EBN and EBN partners. EBN expects the supplier to operate independently, to take the lead and take responsibility for security-related problems and to involve the right parties (e.g. other suppliers)

- innovation: in order to optimize EBN's ICT services, EBN expects the Supplier to actively monitor innovation and market developments during the agreement, to safeguard within the service provision, to think along with the customer and to lead to a better price-performance ratio for EBN,

- flexibility: EBN expects to be able to easily scale up and / or relocate the services based on a P * Q pricing model. Costs of third parties must be settled in the most advantageous manner for EBN,

- cultural fit: supplier must match its approach to EBN's culture (size, service provision, professionalism).

The scope for lot 2 generally concerns the following elements:

- consultancy regarding security strategy and processes,

- security by design advice in development and solution architecture of the application landscape,

- providing online awareness training,

- consultancy regarding security design / issues current ICT service providers,

- delivery of PEN tests (currently once every 1 or 2 years at EBN and / or joint venture partners),

- provision of Forensic analysis. Immediately available during incidents and where forensic services are necessary.

Out of scope:

Physical security

EBN has defined the following objectives for plot 2 that EBN wants to achieve with this assignment:

Continuity: EBN expects a tailored service in terms of response time, knowledge, integrity, security and confidentiality.

Unburdening: the supplier must be primarily responsible for providing security advice from EBN and EBN partners. EBN expects the supplier to operate independently, to take the lead in security-related issues and to involve the right parties (such as other suppliers).