Specifications include, but are not limited to: The Information Technology Department (ITD) of the Lansing Board of Water and Light (LBWL) is soliciting proposals to ensure the security information event management and incident response elements of our defensein-depth cybersecurity architecture remain current and cost effective. We are seeking proposals for implementation and on-going operation of a managed SIEM service which will ingest our log files, perform correlation, analysis, prioritization, and review of security event information based on alerts (Level 1 Monitoring) and investigate security alerts to validate legitimacy and appropriate incident response actions including curated and acquired security threat intelligence information (Level 2 Response). We are also seeking an on-demand, rapid-response, on-site incident response capability in the event a cyber security incident exceeds our internal response capability or capacity.
