The objective of the procurement is to acquire advanced and automated, modern, comprehensive and high-quality technologies, as well as services and methods for the management, monitoring and implementation of cybersecurity in Oy Apotti Ab's environments (Contracting Entity). The purpose of the contracting entity is to conclude a contract for cybersecurity services with one capable service provider. The supplier is expected to have several years of experience and references in delivering similar services.
The selected provider produces continuous and accurate environmental security monitoring and threat monitoring, and detects and blocks both more common and advanced threats. If necessary, the selected provider will also be able to provide resources for other tasks promoting cybersecurity. Services must be provided from the EU/EEA mainly in Finnish.
The procurement is carried out by means of a negotiated procedure in accordance with section 34 of the Act on Public Procurement and Concession Contracts (1397/2016, the "Act on Public Procurement and Concession Contracts"). The subject matter of the procurement, the requirements set out in the documents and the terms of the contract may change and be specified as the negotiated procedure progresses.
The object of the procurement covers the contracting entity's production environment and basic IT areas, and the same information security service provider is wanted for both of them. The service provider must maintain regular contact with the customer and, based on its findings, make proposals for the development of cybersecurity and the services to be procured.
The procurement consists of a centralized Security Operations Center (SOC) and related sub-services produced as a 24/7/365 service.
• Security Operations Center, SOC
• SIEM service and technology,
• Centralized log management service and solution,
• Managed Detection and Response -palvelut
• Threat information management and advanced threat detection service,
• IT forensics and Incident Response Service (DFIR), and
• Vulnerability scanning service and technology.
The procurement package also includes the deployment of all the technologies and services to be procured.