Delivery, installation and implementation of an intrusion detection system
The Klinikum Fürth is an academic teaching hospital of the University of Erlangen-Nuremberg. As an independent municipal company (institution under public law), it currently provides 771 inpatient beds. In addition, it has 36 beds in the field of geriatric rehabilitation (according to § 111 SGB V). The Klinikum Fürth is a hospital with the highest level of care, emergency care level 3. Approximately 42,000 inpatients and approximately 58,000 outpatients are treated annually.
In order to be able to react promptly and appropriately to cyber attacks, Klinikum Fürth, as part of the critical infrastructure, needs sufficient detection capabilities and greater insight into the existing technical security level of the IT systems. On the other hand, it needs a quick and easy way to efficiently evaluate the collected data. These capabilities should be offered through SIEM functionality. The aim is to improve the necessary organizational structure to ensure rapid and sufficient responsiveness. The Klinikum Fürth is very much oriented towards the guidance on the use of attack detection systems published by the BSI. The majority of the criteria in the service description that such a system must meet are also derived from this document of the BSI.
The overall objectives of the project are:
1. Creation of a detectability of IT security incidents (hacking attacks, failures, data theft, etc.)
2. Establishing a quick and adequate response capability
3. Implementation:
- Introduction of a complete Security Operations Center Service (SOC service) consisting of:
- Security Information and Event Management (SIEM)
- Incident Response
- Major Incident Response
With the help of the SIEM functionality, incidents are detected in the IT systems of the Fürth Hospital. It extracts information from the log files of the connected IT systems, merges them, interprets them and alerts when incidents are detected.
A complete overview of the award procedure is provided in the document "Notes and explanations on the award procedure SIEM Klinikum Fürth", which is attached to the tender documents.