Specifications include, but are not limited to: Through this Request for Proposals, the City of Champaign is soliciting proposals from qualified firms to provide MDR cyber-security services. Services will include 24/7 monitoring with advanced threat detection. The selected solution will work with our existing technology stack to discover and profile assets and collect data and security event observations from multiple sources. The solution will catch advanced threats that are missed with other approaches with a platform that analyzes security data, and an experienced team who knows how to look for them. The selected vendor will review logs of the City’s local and Internet traffic and investigate suspicious activity. The vendor’s security team will carefully review data and alert the City team only when the significance of the potential threat activity justifies alerting the city security team. The vendor’s security team will conduct investigations sufficient to eliminate alerting the City of false positives. The vendor’s security team will notify the City’s security team of threats immediately upon identifying them. After threats have been identified and City staff have been alerted, the vendor’s security team will work with the City’s security team on remediation to validate the threat has been neutralized and verifying it hasn’t returned. The vendor will work with the City team to investigate the root cause of incidents to assist with the creation of customized rules and workflows that harden the City’s security posture. Regular meetings between the vendor’s security team and the City’s security team will be held monthly, at a minimum, to review the City’s overall security posture and find areas of improvement that are optimized for the City’s environment. The City’s existing technology stack includes the use of Crowd Strike endpoint security, Fortinet Firewalls, and Microsoft Antivirus and Advanced Threat Protection.
