The purpose of the assignment is to provide various services in the field of digital information security to Participatiemaatschappij Vlaanderen (PMV). For example, the service provider will be responsible for, among other things, the integral security of PMV's IT infrastructure, internet access and external networks. The entirety of these services is referred to as Security as a Service (“SECaaS” for short). PMV's IT system currently has about 150 users.
The SECaaS service required by PMV generally consists of the following components:
- the use of certain appliances (infrastructure and software):
i) double redundant firewall;
ii) Intrusion Detection and Prevention System;
iii) integrity of the mail traffic;
iv) antivirus solution ,;
v) web application firewall; and
vi) Security Information & Event Management,
- the provision of certain security services, whereby the SECaaS service provider uses the appliances:
i) Network Operations Center;
ii) Security Operations Center;
iii) Reporting; and
iv) User Awareness services;
- the migration and installation of the appliances and services at the start of the assignment,
- Finally, as a mandatory option, the Tenderer must provide CSIRT (Computer Security Incident Response Team) services.
For further information about the (partial) components of the contract, reference is made to the technical regulations enclosed as an appendix to the specifications.