Specifications include, but are not limited to:The Alaska Railroad Corporation (ARRC) is seeking proposals from Cybersecurity Firms who can provide a unifying technology platform to assist with understanding, monitoring, improving, hardening, and maintaining our security infrastructure. We are looking for a technology partner who can provide a SIEM solution, assist in the implementation of Hardware/Software, and provide services, training and periodic reviews of our security incidents and events. MINIMUM QUALIFICATIONS TO BE CONSIDERED RESPONSIVE: A technology platform that will provide event and log management based on our sizing document (Attachment 1) A technology platform that will allow a review of attacks at the IP session level (review of a series of packets that establish an attack) The ability to track events over a period of years The ability to review specifics of attacks and situations based on IP connections for weeks Implementation services sufficient to bring up a dashboard of reports and critical systems, services and architecture status Training services sufficient to prepare the administrator to train others in the operation of the system. Monitoring assistance services (6 months). Limited consulting on the true meaning of incidents, appropriate response, configuration techniques, reporting tools, alerting configuration, storage and maintenance tasks
